Вакансии

Location: Australia; Hong Kong The Global Security Operations Engineer is a senior technical role responsible for strengthening the firm's ability to detect, investigate, respond to, and recover from cybersecurity threats across its global environment. Working as part of the Global Security operations team, the successful candidate will lead complex security investigations, develop and optimize threat detection capabilities, and implement automation to improve the effectiveness and efficiency of security operations. The role combines hands-on incident response with proactive security engineering, helping the firm move from reactive alert management toward an increasingly automated, intelligence-led security operating model. Operating within a geographically distributed organization, the successful candidate will work closely with global and regional technology and security teams, provide technical leadership during significant incidents, and contribute to the continuous improvement of security capabilities. Based in APAC, the role will provide critical regional coverage as part of a coordinated global security operations function. Responsibilities Advanced Investigation and Incident Response Serve as a senior escalation point for security incidents, assuming ownership of complex, ambiguous, and high-severity events that exceed first-line triage capability. Conduct detailed investigations to establish initial access vectors, attacker activities and objectives, scope of compromise, and dwell time, documenting findings to an appropriate evidentiary standard. Perform root cause analysis on confirmed incidents and near misses, identifying underlying security control or process failures rather than simply addressing immediate symptoms. Act as technical lead during significant incidents across containment, eradication, and recovery, coordinating activities across global and regional teams. Conduct host and network forensics and malware triage, engaging specialist forensic providers where investigations exceed internal capabilities. Translate technical findings into clear statements of business risk for leadership and drive post-incident corrective actions through to closure. Investigate identity-based attacks, account compromise, unauthorized access, and suspicious activity across cloud platforms and enterprise applications, including Microsoft 365 and Entra ID. Participate in an on-call rotation and provide out-of-hours escalation support during serious incidents, and undertake additional projects and activities as required. Security Automation & Detection Engineering Design, build, tune, and maintain detection content mapped to the MITRE ATT&CK framework, identifying and reporting coverage gaps against threat actor tactics, techniques, and procedures relevant to the firm. Reduce false-positive volume and analyst alert fatigue through systematic tuning, suppression logic, and automated alert enrichment. Operationalize threat intelligence by translating reporting and indicators of compromise into actionable detections, threat-hunting hypotheses, and preventive controls. Design, develop, and maintain automated response playbooks, including Logic Apps, automation rules, and SOAR workflows, to reduce mean time to detect and respond. Write and maintain queries, scripts, and code (KQL, PowerShell, Python, or equivalent) supporting detection, enrichment, automated triage, and reporting. Integrate security tooling and data sources through APIs and connectors, including onboarding new log sources with appropriate parsing, normalization, and validation. Continuously assess and improve security monitoring, detection, and response capabilities, identifying opportunities to strengthen coverage, reduce operational complexity, and improve effectiveness through automation and technology optimization. Identify opportunities to apply AI-assisted investigation, alert triage, and security automation capabilities to improve detection effectiveness, reduce manual effort, and accelerate incident response. Conduct proactive threat hunting to identify suspicious activity, validate detection effectiveness, and uncover threats that may evade existing security controls. Requirements This is a hands-on technical role requiring demonstrated depth in security operations, sound technical judgment, and the ability to work with limited supervision. We value analytical rigor, curiosity, initiative, and a willingness to share knowledge and develop others as highly as any individual technology or certification. Compulsory Requirements: 5+ years of experience in security operations, incident response, or detection engineering, including demonstrable experience working in a Security Operations Center (SOC). Proven experience leading complex technical investigations end to end, from escalation through root cause analysis to documented remediation. Deep, hands-on expertise with modern SIEM and endpoint detection and response (EDR) platforms, including authoring and optimizing detection logic, conducting investigations, and managing data onboarding. Strong practical automation and scripting abilities, including KQL and at least one of PowerShell or Python, with demonstrated experience developing and operating automation in production. Experience designing and maintaining automated response playbooks using Logic Apps, automation rules, or comparable SOAR capabilities. Advanced knowledge of the MITRE ATT&CK framework, Cyber Kill Chain analysis, and established incident response methodologies, such as PICERL. Strong working knowledge of TCP/IP and networking, Windows and Linux operating systems, Active Directory, Entra cloud identity and authentication, and security operations across cloud and hybrid environments. Experience with host and network forensics, malware triage, and the analysis of malicious email headers, links, and attachments. Strong written and verbal communication skills, including the ability to communicate technical findings and security risks to both technical and nontechnical audiences. Ability to work independently and collaborate effectively with geographically dispersed teams, with flexibility to provide out-of-hours support during significant security incidents. Occasional travel to support global cybersecurity operations and incident response may be required Preferred Requirements: Bachelor's degree in Information Security, Information Technology, Computer Science, or a related discipline, or equivalent professional experience. Industry certifications such as GCIH, GCIA, GCFA, GREM, OSCP, CySA+, SC-200, AZ-500, or CISSP. Hands-on experience with Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra ID, and Microsoft Azure. Experience operating within a global, federated, or shared-services model, ideally in professional services or another highly regulated sector. Familiarity with ISO 27001, the NIST Cybersecurity Framework, or comparable control frameworks Benefits Benefits are aligned with the respective location. The above is intended to describe the general content of and requirements for the performance of this job.  It is not to be construed as an exhaustive statement of essential functions, responsibilities or requirements.

Location: United States; Canada Workplace: OnSite WHO ARE WE? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! As a Senior Security Operations Engineer you will: - Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues - Harden our cloud-native environments (AWS, OCI, GCP) by introducing secure by default cloud controls - Own and drive resolutions for enabling engineers to design, build, and use infrastructure securely at scale by paving the secure path using infrastructure-as-code modules and reusable code libraries - Manage IAM / RBAC for cloud infrastructure, and partner with IT on streamlining authentication/authorization to ensure unified access control across the board - Deploy, integrate and operationalize security platforms and services including but not limited to SIEM, SOAR, domain monitoring, endpoint tooling, cloud security tooling - Respond to security incidents and harden environments post-incidents. - Support control monitoring and remediation for compliance initiatives - Gather and analyze security metrics to address security issues with cross-team dependencies - Partner empathetically with engineering teams to understand their needs and deliver practical, scalable security solutions without creating unnecessary friction. You may be a good fit if: - 5+ years previous experience in SecOps, DevSecOps, Cloud Security, Threat Detection & Response or software development with a strong focus on security engineering. - You’re a hands-on security engineer interested in automating controls and building scalable solutions rather than relying on manual processes. - You have experience in managing cloud platforms (GCP, AWS, Azure, OCI) and Kubernetes environments - Familiarity with CI/CD systems and SecOps workflows (Git, Terraform) in cloud environments (GCP, AWS, Azure, OCI) - Have practical experience with one or more of : infrastructure automation, network segmentation, system hardening, container and cloud security concepts, and security observability - You have experience with multiple languages such as Golang and/or Python - Are comfortable navigating ambiguity, making informed decisions with incomplete information, and adapting your approach as requirements evolve. - You employ a flexible and constructive approach when solving problems - You are able to make trade-offs between build vs. buy decisions - help build solutions and able to review what tools are available - You understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS: - A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch. - Full health and dental benefits, including a separate budget for mental health. - RRSP matching, 401K, Pension Scheme. - 100% Parental Leave top-up for up to 6 months, for either parent. - Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit. Education & learning stipend for conferences, courses, and coaching. - 6 weeks of paid vacation (30 working days!) - Budget for traveling to other offices if you are remote, plus an annual company offsite. HOW AND WHERE WE WORK: - Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon. - For those in the office: a daily lunch program, plenty of snacks, and regular community and social events. - For those not near an office: a co-working benefit so you can work alongside others in your city. - Everyone receives a $500 home office stipend to set up your workspace properly. If any of the above doesn’t line up exactly with your experience, we still encourage you to apply. We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs. We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider. Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.

Velaura is looking for a Security Architect to define end-to-end SoC security architecture, protect AI workloads, and guide security requirements through production.

Location: Remote What you’ll be part of Garner is on a mission to transform the U.S. healthcare system — and we’re the only proven player doing exactly that. We partner with employers to redesign how healthcare works: applying 550+ proprietary clinical metrics across 80+ specialties to a dataset of 320M+ patients to identify the best-performing doctors, then using compelling incentives to steer members to the care that helps them get healthier, faster. The result is a rare “win win” — better care and lower costs for both members and employers. In just five years, our work has helped over 2.5 million people access higher-quality care and saved $1B in healthcare costs. We recently raised our Series E and have doubled five years running. If you've ever wanted your work to solve a problem that touches every person in this country, this is the opportunity to do exactly that. You'd be joining a team fundamentally reimagining healthcare in the U.S. — and using AI to scale that impact further and faster than anyone else can. About the role: We are seeking a Senior Security Engineer to serve as a technical anchor for our security function. This role is critical for leading technical design reviews and ensuring our security posture scales alongside our rapid customer growth. You will be responsible for defining the security standards that protect sensitive healthcare data, ensuring our systems are resilient against evolving threats while maintaining high engineering velocity. Where you will work: Garner is headquartered in NYC, but this position is available for individuals who are comfortable with remote work and occasional travel to HQ. What you will do: Lead technical security design: Own the technical design and review process for security-critical systems, ensuring all new features meet Garner's high standards for data protection and resilience Master complex domains: Maintain and apply a mastery of one or more technical security domains (e.g., Cloud Security, AppSec, or Data) to solve the most complex business and technical challenges Course-correct technical direction: Identify when technical paths are inefficient or insufficient and proactively redirect efforts to capture higher ROI for the firm Architect automated defenses: Create and implement advanced tools and automation that increase the efficacy of security monitoring and incident response Translate ambiguity into execution: Take broad, complex security objectives and break them down into well-defined deliverables and architectural requirements for the broader engineering team Mentor through technical rigor: Raise the bar for the engineering function by providing high-level feedback during code and design reviews, fostering a culture of security-first development The ideal candidate has: Exceptional Technical Judgment: Proven ability to make high-stakes technical decisions that result in positive long-term outcomes for the company's security posture Strategic Problem-Solving: Effectively leverages context and data to analyze root causes and prioritize security initiatives that offer the greatest impact on risk reduction Influential Stakeholder Management: Builds strong relationships across the organization, conveying complex security risks in a clear and compelling manner to both technical and non-technical partners Drive for Innovation: Continuously identifies and implements creative solutions to pay down technical debt and improve the efficiency of our security infrastructure Reliability Under Pressure: Handles complex escalations and security incidents with discipline, ensuring rigorous analysis and comprehensive resolution without jumping to conclusions A desire to be a part of a high-performing, mission-driven team that operates with intense urgency, a strong sense of individual accountability, and a commitment to authentic feedback Technologies we use: Python, Kubernetes, Snowflake, AWS, Terraform, Wiz, Cyberhaven, and more This is a unique opportunity to join a fast-growing company in a transformative role, helping shape the future of healthcare. Compensation Transparency: The target salary range for this position is $209,000 - $243,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to participate in our equity incentive and competitive benefits plans, including but not limited to: flexible PTO, Medical/Dental/Vision plan options, 401(k), Teladoc Health and more. Fraud and Security Notice: Please be aware of recent job scam attempts. Our recruiters use getgarner.com and garnerhealth.com email domains exclusively. If you have been contacted by someone claiming to be a Garner recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement here and to candidateprotection@garnerhealth.com . Equal Employment Opportunity: Garner Health is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Garner Health is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at talent@garnerhealth.com .

Location: Bangalore (Hybrid) ABOUT ONEPAY OnePay is the consumer fintech trusted by millions of Americans to make money better. Our financial system is broken. High fees, low rates, and too few ways to actually grow your money. We’re fixing it. And we’re moving fast. We’re an all-in-one financial services platform that brings together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. We also partner with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers. We’re backed by Walmart, the world’s largest retailer, and Ribbit Capital, one of fintech’s most respected investors, giving us rare scale, distribution, and the opportunity to build something truly category-defining. But what really sets OnePay apart is how we move. Our customers don’t have time to wait… and neither do we. This place moves fast, and we’re looking for people who are: - Ready to run - Hungry and driven by urgency - Exceptional at what they do, with low ego - Comfortable operating in motion THE ROLE As a Security and Threat Operations Engineer at OnePay, your work will have a direct impact on protecting our fast-moving fintech environment. You will turn production signals into actionable detection, response, and hardening initiatives, partnering closely with Product Security, Platform Security, and Engineering teams. Your efforts will enable us to proactively identify, monitor, and stop compromised behaviors across OnePay's products and infrastructure, ensuring the continued safety and trust of our business and customers. You will: - Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments. - Review traffic patterns across APIs, authentication flows, and WAF telemetry to identify malicious activity, abuse patterns, and anomalous behavior. - Use AI responsibly as a force multiplier for triage, analysis, and workflow automation, while helping define guardrails for AI-enabled systems. - Help operate OnePay's vulnerability management program by triaging, prioritizing, and driving remediation for findings from Wiz, vulnerability scanning, and related workflows. - Develop Python-based tooling and automation to improve investigations, enrichment, response, and operational scale. - Partner with Product Security to translate threat models, security reviews, and product risks into production detections and response playbooks. - Investigate security events end to end, including triage, scoping, containment support, and follow-through on remediation. - Support vulnerability management and operational security practices in ways that align with PCI and SOC 2 expectations. - Participate in proactive threat hunting, detection improvement, and a 24x7 security incident response on-call rotation. TOOLS WE USE We use Node and TypeScript on the server, leveraging the NestJS framework within a microservice-oriented architecture running on Kubernetes and AWS. On the client side, we build and ship product features for iOS, Android, and web platforms using React Native. We also embrace AI-assisted development, so engineers have their choice of Claude Code or Cursor to fit their workflow. While you don't need experience with our exact stack, familiarity with modern software engineering practices will help you ramp up quickly. YOU BRING - 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response, ideally in a cloud-native or product-focused environment. - Strong experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry, with the ability to distinguish attacker behavior from normal production noise. - Demonstrated ability to review traffic and event patterns for signs of malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts. - Strong Python programming skills and the ability to write maintainable code for automation, enrichment, analysis, and security operations tooling. - Experience building and tuning detections in a SIEM or detection platform and working with observability and logging systems such as CloudWatch, Datadog, or similar platforms. - Experience operating or supporting a vulnerability management program, including triage, prioritization, remediation tracking, and stakeholder coordination. - Familiarity with cloud and application security findings from platforms such as Wiz, including CNAPP, runtime, code, and vulnerability scanning use cases. - Experience with at least one major cloud provider, preferably AWS. - Working knowledge of identity and access systems, modern authentication flows, and the security implications of internet-facing applications and APIs. - Strong understanding of threat modeling, risk prioritization, and practical security controls across applications, infrastructure, and cloud environments. - Practical experience using AI tools in security workflows, along with sound judgment about AI-specific risks such as prompt injection, data leakage, excessive tool access, and weak auditability. - Excellent analytical, communication, and cross-functional collaboration skills, especially in environments where security needs to move quickly with product and engineering teams. - Drive and proactivity - everyone here is a builder and executor WHAT WE OFFER - Competitive salary, stock options, and benefits from Day 1 - Comprehensive health insurance coverage (health insurance, accident and disability insurance, term life insurance), including mental health support and wellness programs - Hybrid work model (Bengaluru office three days a week), various time off programs (vacation, sick, other paid leaves, and paid regional holidays) - Monthly transport and work-from-home allowances - A high-growth, mission-driven, inclusive culture where your work has real impact STANDARD INTERVIEW PROCESS Our process varies by role. Most candidates go through: - AI-assisted initial screen - Interview with Talent Partner - Technical or Hiring Manager Interview - Team Interview - Executive Interview - Offer! EQUAL EMPLOYMENT OPPORTUNITY To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us at talent@onepay.com.

- Владение production-инфраструктурой и Kubernetes-кластерами. - Развитие инфраструктуры на Terraform/Terragrunt: network, data и identity.

Take full ownership of our IT security environment, policies, and risk management. Manage key security tools including FortiGate firewalls, CrowdStrike Falcon, and ManageEngine.

• 5–8 лет опыта в Information Security; • От 2 лет в FinTech / Payments / iGaming или других high-risk направлениях;

Location: Europe, Remote About Zencoder At Zencoder.ai , we build and orchestrate AI agents that ship real work - code, research, operations, and more. What started as developer tooling is becoming a platform where people and agents collaborate across knowledge work tasks. The Opportunity We’re looking for a hands-on Senior or Staff Security Engineer to lead and own security across the company. Part of the job is the work every company needs and too few do well: hardened cloud infrastructure, least-privilege access, secure delivery, vulnerability management, penetration testing, and incident response. The threats in this space are increasing exponentially. The other part is an evolving domain with no playbook. Our product runs agents that read untrusted content, execute code, and hold credentials. Attackers now use AI to probe and fuzz faster than before. Prompt injection, data exfiltration through allowed channels, cross-session access, and insecure agent-written code reaching production are real risks for us today, not research topics. We want someone who will help us close the obvious gaps without being asked, and finds the problems nobody has written down yet. You'll work closely with our ITOps, platform and product engineers. Teams own their services and platform owns the monorepo pipeline. Your job is to improve our security posture without slowing delivery: build automated controls into existing workflows rather than rely on slow, blocking manual AppSec reviews. You'll test whether those controls hold, address critical risks, and take responsibility for security outcomes, not just recommendations. Key Responsibilities This is a hands-on role - you'll be in the code, infra, and pipelines yourself. Set security priorities and drive fixes through to verified completion; Find application vulnerabilities through code review, penetration testing and agent-specific red-team exercises; Work with ITOps, platform and product engineers to harden infrastructure and build security into delivery pipelines; Build detection for user and agent activity, and lead incident response. Essential Qualifications Strong application security background - you can spot exploitable flaws, and explain the fix; Hands-on penetration testing and offensive security experience across web applications, APIs, and cloud infrastructure; Solid infrastructure and cloud security fundamentals: IAM, network segmentation, containers and isolation, secrets management, logging; Experience building detections and running incident response, not only reviewing them; Real fluency with AI coding agents and LLM-based systems - how they work, where they fail, and how they can be manipulated; Enough software engineering skill to build your own tooling, automation, and test harnesses; Sound judgment under pressure: you can weigh a risk against a release, decide, and explain the decision to engineers and founders. Nice to Have Experience securing sandboxed or multi-tenant code execution environments; Red-team, bug bounty, or CTF track record; Experience with security programs and compliance frameworks (ISO 27001, SOC 2) in a small company. Why Join Zencoder? Impact AI is reshaping how work gets done, and you'll be at the forefront of that shift, building a product that enables teams to get more done with AI. We use our own products every day, so you'll see how your work lands right away. AI-First We use AI to expand what one person can accomplish. You'll constantly rethink how you work: what to hand over to AI, and where your own judgment matters most. Ownership We keep the team small and give people real scope, autonomy, and equity. You'll take initiative, make decisions, and see your work through to real outcomes, raising the bar with every iteration. High Talent Density A small team of highly capable people moves faster and builds better. You'll work directly with senior teammates and our founder, Andrew Filev, in a flat structure where ideas win on merit, not titles. Remote-First We hire globally, prioritizing talent over location, so you can work where you're most productive. Prefer in-person? We have a hub in Barcelona with weekly co-working. Zencoder is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Location: Cardiff, London or Remote (UK) 🚀 We’re on a mission to make money work for everyone. We’re waving goodbye to the complicated and confusing ways of traditional banking. After starting as a prepaid card, our product offering has grown a lot in the last 10 years in the UK. As well as personal and business bank accounts, we offer joint accounts , accounts for 16-17 year olds , a free kids account and credit cards in the UK, with more exciting things to come beyond. Our UK customers can also save , invest and combine their pensions with us. With our hot coral cards and get-paid-early feature, combined with financial education on social media and our award winning customer service, we have a long history of creating magical moments for our customers! We’re not about selling products - we want to solve problems and change lives through Monzo ❤️ 📍London/Cardiff/UK Remote | 💰£76,500 - £95,000 + Benefits ✨| ℹ️ This is a 12 month Fixed-Term contract Our Information Security team ⭐ At Monzo, we’re on a mission to make money work for everyone. Keeping our bank safe and secure is a big part of making that happen. Our Information Security Squad builds security processes that help us move at pace while protecting our customers. We work in partnership with teams across Monzo, including Product and Engineering, to help them create products our customers love. In this role, you’ll lead security projects, help teams understand and manage risk, and support the development of our Security Analysts. 🔑 You’ll play a key role by... Leading projects across our security programme, which has previously included third-party security, governance and vulnerability management. Representing Security in projects across Monzo, including product launches, and helping teams identify and manage security risks. Writing security policies and procedures with teams across Security and the wider bank. Mentoring and developing our Security Analysts. Keeping up with emerging security threats, technology and risks, and helping us prepare for what’s next. Working with our internal audit and risk teams to make sure security controls are implemented and regularly assessed for effectiveness. 🤩 We’d love to hear from you if… You’re excited about making a difference to how we deliver information security at Monzo. You’ve managed projects across a range of security domains and are comfortable leading several pieces of work at once. You’re working towards a recognised security qualification, such as CISSP. You communicate clearly in writing and conversation, and can explain complex topics to different audiences. You work confidently and independently, including when engaging senior stakeholders, and enjoy working in a fast-paced environment. You enjoy using data to measure and improve your work, can interpret technical requirements, regulations and procedures, and are open to new approaches and technologies, including GenAI. Not ticking every box? That’s totally okay! Studies show that women and people of colour might hesitate to apply unless they meet every single requirement. At Monzo, we’re dedicated to creating a diverse and welcoming team. If you’re passionate about this role and keen to learn and grow with us, we encourage you to apply—even if you don’t have everything that's listed just yet. Drop us your application, we’d love to hear from you! 🙌 What’s in it for you 💰 £76,500 - £95,000 ℹ️This is a 12 month Fixed-Term contract 📍 This role can be based in our London office, but we're open to distributed working within the UK (with ad hoc meetings in London) ⏰ We offer flexible working hours and trust you to work enough hours to do your job well, and at times that suit you and your team. 📚 £1,000 learning budget each year to use on books, training courses and conferences. 🏡 We will set you up to work from home; all employees are given Macbooks and for fully remote workers we will provide extra support for your work-from-home setup. ➕ Plus lots more! Read our full list of benefits . 🌈 The application journey has 3 key steps 20 min call with the recruiter 30 min hiring manager call 2 hours of technical and behavioural interviews This process should take around 4-5 weeks - your schedule is really important to us, so we promise to be as flexible as possible! We have some guidelines on using Artificial Intelligence (AI) to ace an application and interview at Monzo. You can read them here. We’ll only close this role once we have enough applications for the next stage. Please submit your application as soon as possible to make sure you don’t miss out. #LI-REMOTE #LI-OS1 Equal opportunities for everyone Diversity and inclusion are a priority for us and we’re making sure we have lots of support for all of our people to grow at Monzo. At Monzo, we’re embracing diversity by fostering an inclusive environment for all people to do the best work of their lives with us. This is integral to our mission of making money work for everyone. You can read more in our blog , 2026 Diversity and Inclusion Report and 2025 Gender Pay Gap Report. We’re an equal opportunity employer. All applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, or veteran, neurodiversity or disability status. If you have a preferred name, please use it to apply. We don't need full or birth names at application stage 😊

Location: Remote Workplace: Remote Blockstream https://blockstream.com/ was founded in 2014 by Dr. Adam Back https://en.wikipedia.org/wiki/Adam_Back and a group of fellow cryptographers and engineers who are passionate about Bitcoin and its potential to change the world. Today, Blockstream is the leading Bitcoin company, providing cutting-edge infrastructure solutions for enterprises, institutions, and individual Bitcoin users. We develop industry-leading Bitcoin self-custody solutions, Bitcoin-based financial products, second-layer scaling technologies, and enterprise-grade blockchain infrastructure. We’re looking for an experienced Security Architect to design, implement, and oversee secure systems and applications across Blockstream’s enterprise products and infrastructure. The ideal candidate is a full-stack engineer with a strong backend focus, deep understanding of secure application design, and prior experience building or securing platforms in fintech, banking, or blockchain. You’ll partner closely with product, DevOps, and engineering teams to ensure Blockstream’s systems and data are protected from evolving threats — without compromising innovation or performance. What You’ll Be Doing (Responsibilities): - Define and drive security architecture across applications, services, and infrastructure. - Partner with engineering teams to design and implement secure software systems, focusing on backend and data security. - Conduct threat modeling, risk assessments, and security reviews for new and existing products. - Develop and enforce secure coding practices, frameworks, and review processes. - Collaborate with DevOps on cloud and container security, CI/CD hardening, and access controls. - Evaluate and integrate security tools for code scanning, vulnerability management, and incident response. - Guide and mentor engineers on best practices for secure application development. - Stay ahead of emerging security trends, compliance standards, and attack vectors — particularly in fintech and blockchain domains. What We Look For in You (Required Qualifications): - 10+ years of experience in software engineering or security architecture roles. - Strong full-stack background with deep backend security expertise (Python, Go, C/C++, Rust, or similar languages). - Demonstrated experience designing and securing systems for enterprise fintech, banking, or blockchain environments. - Knowledge of cryptography, authentication, and key management. - Hands-on experience with cloud security (AWS, GCP, or similar). - Familiarity with threat modeling, secure SDLC, and modern application security frameworks (OWASP, NIST, ISO 27001). - Excellent communication skills — able to clearly articulate risks and solutions to both technical and non-technical stakeholders. Nice To Haves (Preferred Qualifications): - Experience with Bitcoin, Lightning, or blockchain protocols. - Contributions to open-source security tools or projects. - Security certifications (CISSP, OSCP, CEH, or equivalent) are a plus but not required. 🔒 Stay Safe from Job Scams All official Blockstream communication will come from an @blockstream.com email address. We will never ask you to share sensitive information or purchase equipment during the hiring process. If in doubt, contact us at hr@blockstream.com. Learn more about avoiding job scams here https://consumer.ftc.gov/consumer-alerts/2022/05/want-work-home-spot-scams-first.

Нужен специалист по безопасности кода: развивать S-SDLC и автоматизацию статического анализа веб-приложений, проводить ручной анализ и аудит кода, искать секреты. Ещё предстоит участвовать в проектировании безопасной архитектуры, формулировать требования, консультировать разработчиков и контролировать исправление уязвимостей.

Location: Remote - US Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary The Manager, Security Operations is responsible for leading a team of Security Consultants while ensuring the timely and accurate triage, validation, and resolution of security submissions. This role requires a strong technical foundation in application security, incident response, and vulnerability assessment, combined with proven people leadership skills. The ideal candidate is an experienced security professional who excels at developing team members, driving operational excellence, improving processes through data and automation, and partnering cross-functionally to deliver exceptional outcomes for customers. Essential Duties and Responsibilities Lead, coach, and develop a team of Security Consultants through regular feedback, career development, and performance management. Serve as a subject matter expert in at least one security specialty (web, network, cloud, or mobile) and provide technical guidance to internal and external stakeholders. Demonstrate expertise across all vulnerability submission types and support complex escalations and appeals, partnering with other business units as needed. Drive operational excellence by measuring team performance, identifying opportunities for automation, and implementing process improvements. Plan, prioritize, and manage team workloads while adapting to changing business needs and customer priorities. Mentor team members and contribute to the growth of the broader security organization through knowledge sharing and technical leadership. Build strong cross-functional partnerships to improve workflows and deliver high-quality customer outcomes. Lead effective meetings, clearly communicate priorities, and ensure timely execution of action items. Act as a trusted advisor to leadership and customers by providing sound technical judgment and operational insight. Stay current on security industry standards, emerging threats, and best practices to continuously improve team capabilities. Education, Experience, Knowledge, Skills, and Abilities 5+ years of experience in Security Operations, Application Security, Incident Response, Vulnerability Management, or a related field. Previous experience leading, supervising, or mentoring technical teams. Strong understanding of common vulnerability classes, including the OWASP Top 10. Experience with incident response, vulnerability triage, and validation. Excellent analytical, problem-solving, organizational, and decision-making skills. Exceptional written and verbal communication skills with the ability to influence technical and non-technical stakeholders. Preferred Experience Proven ability to manage multiple priorities in a fast-paced environment. OSCP or a comparable security certification, or equivalent hands-on offensive security or vulnerability research experience. Experience using Python to automate workflows or process operational data. Experience using Tableau or similar business intelligence tools to create dashboards and drive data-informed decisions. Demonstrated success implementing operational improvements through metrics, automation, and continuous improvement initiatives. Working Conditions and Physical Requirements This role will require periodic travel to support business needs. The Manager, Security Operations is expected to attend onsite events such as Bug Bashes and other customer-facing engagements, as well as participate in in-office events at irregular intervals. Travel will vary depending on business priorities but should be anticipated as a recurring responsibility of the position. Pay Range Disclosure At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business. The national estimate for the current base range for this position is $129,280- $161,600. This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

Airtm is looking for a Head of Security to lead security.

Location: US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: As an AI Security Engineer on Tenable's Information Security team, you will help shape and mature our approach to securing AI both within Tenable's products and across the enterprise. AI introduces a new class of risk at the intersection of application security, cloud risk, and data governance, and you will be on the front lines of defining how we assess, test, and address it. You will apply hands-on AI engineering experience alongside product security and application security skills to design security controls for AI systems, lead assessments, and help engineering teams ship AI features securely. You will establish security standards for responsible AI use, influence decisions across the organization, and build tooling that raises our security posture. This role is ideal for a practitioner who has spent time building or tinkering with AI systems, looking under the hood of model internals, and wants to channel that experience into a security specialty. Your Opportunity: Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle. Assist in the implementation of robust security guardrails, controls, and boundary mechanisms for Large Language Models (LLMs), Small Language Models (SLMs), and open-source models. Continuously monitor the AI landscape for novel vulnerabilities and attack techniques, applying deep engineering experience to proactively defend enterprise AI deployments. Assist in developing security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses. Deploy controls to ensure model integrity, governance, and proper access control across models and feature stores. Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, vulnerability management, third-party risk, and emerging AI threat vectors. Perform AI safety, security assessments, threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks. Collaborate with software engineers, and product teams to integrate security best practices into AI development, training, validation, and deployment processes. Create security guidance, documentation, and training for internal engineering and development teams; develop metrics that drive desired security behaviors and outcomes. Assist in researching emerging trends in AI security and contribute to innovative solutions that support Tenable's AI initiatives. What You'll Need: 2 or more years of professional experience in information security or application security, with at least a demonstrated interest on securing AI/ML systems. Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or a related field preferred. Awareness of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks. Knowledge of data security principles, including encryption, masking, and tokenization. Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling. Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices. Ability to work cross-functionally across engineering, product, and business teams. Strong written and verbal communication skills; able to clearly translate complex AI security risks for both technical and non-technical audiences. Strong problem-solving skills, attention to detail, and ability to lead projects with end-to-end ownership. Self-motivated and effective working independently and across distributed teams. And Ideally: Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments. Basic coding experience in Python and/or Go. Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar. Strong understanding of the ML/AI lifecycle and the security risks associated with each stage. Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc.) Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services. Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications are a plus, but not necessary. #LI-Hybrid #LI-MS1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $102,500 — $136,500 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: Lisbon, Portugal About the Role iCapital is looking to hire a Cyber Security Operations Associate to join the Information Security team. This role is a first responder for reviewing and responding to cyber security alerts.  The Associate will work alongside the security engineering team to provide situational awareness through detecting, containing and resolving cyber security threats using a comprehensive set of cyber security technologies including IDS, IPS, DLP, SIEM, AWS and firewall technologies. Responsibilities Monitor and respond to security events and alerts from a variety of signals. Triage incidents quickly and effectively, escalating priorities to the appropriate business units. Perform routine tasks to measure and report on the state of cyber security defenses at the company. Develop and curate security detections through the security technology stack. Take charge of responding to and remediating cyber security intrusions. Compile and maintain detailed incident response reports. Assist in developing and updating security procedures, playbooks, and knowledge bases. Conduct open-source threat intelligence research to seek out and investigate new indicators of compromise for application. Qualifications 3-4 years security related experience or in a similar field Bachelor’s degree in information security, information technology or computer science preferred Experience in Splunk or other SIEM; Search and analysis, log aggregation etc. Basic understanding of Agile Frameworks Knowledge of common cyber threats, attack vectors, and security frameworks (NIST, MITRE ATT&CK) Good understanding of TCP/IP protocols Knowledge of Linux, Windows and macOS operating systems Experience with cloud infrastructure systems like AWS is preferred Fast learner with desire to always learn combined with the ability to multi-task Attentive, organized, and detail-oriented Solid problem-solving and analytical skills Excellent communication skills We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday). Benefits iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO). For additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc

Isomorphic Labs is looking for a Security Engineer to implement corporate security controls, manage identity systems, improve incident response, and automate security operations.

Основные задачи: исследование устройств и встроенного ПО на наличие НДВ и уязвимостей, приводящих к НСД; разработка демонстрационных PoC по результатам анализа;