Location: United Kingdom; Brazil; United Arab Emirates; Ireland; Peru; Sweden; Colombia; Argentina; Romania; Cyprus; Switzerland; Portugal; Lithuania; South Africa; Czech Republic; Canada; Hungary; Mexico; Chile; Poland; Spain; Bulgaria
Workplace: Remote
BUILDING THE FUTURE OF OPEN FINANCE
Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.
Before you apply, we encourage you to explore our culture page https://www.kraken.com/culture to understand what drives us and how we work.
THE TEAM
Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients.
We are seeking a skilled & hands-on Senior Security Architect for Kraken Security Labs. Kraken Security Labs provides boutique-style, deeply technical internal security consulting on current and future products.
We don't merely provide high-level guidance but indeed get deeply embedded in the different engineering teams and do not mind hands-on work.
Our projects span from classical infrastructure security projects, over cryptography, web3, and complex Rust projects, to securing our next generation of AI products.
You will work in a small, highly technical team and collaborate with teams all across the company & world.
THE OPPORTUNITY
- Design, review & verify robust security architecture in a heterogeneous environment
- Conduct thorough security assessments and audits of existing architectures, recommending practical improvements
- Stay updated with latest (blockchain) security trends, threats and mitigation techniques
- Provide expertise to our blockchain teams, ensuring secure operational practices
WHAT YOU BRING
- Proven experience as an IT security expert, with a strong background in application security
- Experience in security testing diverse application
- Experience with infrastructure security
- Basic familiarity with security frameworks (OWASP, NIST, etc)
- Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environment
- Strong communication and collaboration skills to effectively remotely work with stakeholders across the organization
Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.
Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.
We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.
OUR COMMITMENT
Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto.
We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.
As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.
Stay connected
Follow us on Twitter https://twitter.com/krakenfx
Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address
Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/
Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice
УдалённоUnited Kingdom; Brazil; United Arab Emirates; Ireland; Peru; Sweden; Colombia; Argentina; Romania; Cyprus; Switzerland; Portugal; Lithuania; South Africa; Czech Republic; Canada; Hungary; Mexico; Chile; Poland; Spain; Bulgaria
Location: Canada; England; Portugal; Spain; Italy; Germany; United States
Workplace: Remote
ABOUT DOCKER
Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.
We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
_______________________________________________________________________
As a Senior Security Engineer embedded in the Desktop engineering team, you will own the security posture of a complex, cross-platform product that sits at the intersection of identity, OCI runtimes, and Linux kernel internals. You will be the team's primary security voice, reviewing features and code before they ship, partnering with our central security organization, and serving as the first line of triage for reported vulnerabilities.
This is a hands-on engineering role for someone who thinks in threat models and communicates clearly with both product engineers and security specialists alike.
RESPONSIBILITIES:
- Partner with engineering and product teams throughout the development lifecycle to identify security risks early, from design review through code review and release.
- Conduct threat modeling and security design reviews for new and evolving product features, with particular focus on authentication, authorization, and container runtime security.
- Serve as the team's primary liaison to the organization's security group, attending security syncs, relaying guidance, and translating central policy into practical engineering decisions.
- Act as the first point of contact for incoming vulnerability reports and CVEs: validate severity, reproduce issues, coordinate disclosure timelines, and drive remediation with the relevant engineers.
- Review Go code with a security mindset, identifying classes of issues such as privilege escalation, insecure defaults, injection risks, and improper credential handling.
- Contribute security-focused improvements directly to the codebase where appropriate.
- Develop and maintain internal security documentation, guidelines, and runbooks for the team.
- Stay current on the Linux security landscape as it pertains to containers: namespaces, cgroups, seccomp, AppArmor, capabilities, and the evolving OCI ecosystem.
- This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed.
QUALIFICATIONS:
- 6+ years of experience in security engineering, application security, or a closely related discipline, with a track record at senior or staff level.
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
- Strong proficiency in Go, with the ability to review and contribute to production-grade code.
- Deep understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries.
- Solid grasp of OCI specifications and container runtime security (e.g. runc, containerd, BuildKit).
- Hands-on experience with identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts.
- Experience performing security design reviews, threat modeling, and participating in secure development workflows.
- Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters.
- Strong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team.
WHAT TO EXPECT
FIRST 30 DAYS
You will onboard into the team and get hands-on with the Docker Desktop codebase, architecture, and development workflow. You will meet your counterparts in the central security organization and learn how vulnerability reports are currently handled. The goal is to listen, ask questions, and build a clear picture of the product's current security posture, not to change anything yet.
FIRST 90 DAYS
You will be an active participant in design and code reviews, bringing a security lens to features in flight. You will have taken ownership of the vulnerability intake process, handling your first end-to-end triage cycles with minimal guidance. You will have a working relationship with the engineers on the team and a growing sense of where the most meaningful security investments should be made.
ONE YEAR OUTLOOK (FIRST YEAR)
You will be the team's trusted authority on product security. You will have driven meaningful improvements to how the team approaches security across the development lifecycle, whether that's better threat modeling practices, improved auth flows, stronger container isolation defaults, or reduced time-to-remediation for reported issues. you will be a known presence in the broader security organization, and your work will be directly visible in the security and resilience of a product used by millions of developers every day.
Docker considers visa sponsorship on a case-by-case basis based on business needs.
Compensation & Equity
Canada: CA$271,150 – CA$434,000 + equity
United States: $194,150 – $312,950 + equity
EU: €113,860 – €186,780 + equity
______________________________________________________________________
POSTING INFORMATION
- Open vacancy: This posting is for an existing open role.
- AI in hiring: Docker may use AI-assisted tools during our recruiting process.
- Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.
______________________________________________________________________
PERKS & BENEFITS
- Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
- Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
- Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
- Home office support – Set up your workspace for comfort and success.
- Technology stipend – Equivalent to US$100 net per month to help support your work.
- Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
- Parental leave – 16 weeks of paid parental leave after six months of employment.
- Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
- Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
- Docker swag – Because representing the whale never gets old.
Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.
#LI-REMOTE
Location: Seattle, WA
Workplace: Remote
ABOUT DOCKER
Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.
We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
_______________________________________________________________________
We're building AI-native development practices into how this team works at a foundational level. That means infrastructure design needs to account for a new kind of collaborator: AI agents that generate, deploy, and operate software. The Senior Software Engineer, Billing on this team will keep systems running, help define what safe, observable, AI-assisted infrastructure operations look like in practice, and model that standard for the rest of the team.
WHAT YOU'LL WORK ON
The Billing Platform Engineering team owns the systems that make Docker's commercial model real. You'll work on problems like:
- How do we design infrastructure that makes AI-generated deployments safe to ship and easy to roll back?
- How do we instrument billing systems so that failures — billing miscalculations, entitlement gaps, payment errors — are detected immediately and unambiguously?
- How do we build infrastructure that scales with usage-based billing workloads without manual intervention?
- How do we make the developer experience on this team faster and more reliable — local environments, CI/CD pipelines, deployment tooling?
RESPONSIBILITIES
- Own and evolve the infrastructure supporting Billing Platform services: compute, storage, networking, CI/CD, and observability
- Design and maintain IaC (Terraform) for billing system infrastructure on AWS; contribute to module patterns and standards for the team
- Build and own observability systems — metrics, logging, alerting — with a focus on billing accuracy and payment reliability
- Implement deployment patterns and runbooks that work well in an AI-agent-assisted development workflow: clear rollback procedures, safe promotion gates, automated validation
- Partner with software engineers on service design — bringing infrastructure constraints and operational requirements into the conversation before code is written
- Identify systemic risks in the team's systems and drive improvements, including work that reaches into adjacent teams or services
- Participate in incident response for billing system issues. This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed.
- Mentor engineers on the team; your technical judgment should help raise the bar for how the team builds and operates
QUALIFICATIONS
- 6+ years in platform, infrastructure, or SRE roles supporting production SaaS systems at scale
- Strong AWS expertise: ECS or EKS, RDS (Postgres preferred), networking, IAM, cost management — you've operated these systems under real load and real incidents
- Strong Terraform skills; you've built reusable module patterns and can improve the ones a team relies on
- Experience building and owning observability stacks (Datadog, Grafana, or similar) for production services — not just using them
- Strong familiarity with CI/CD systems — Jenkins, GitHub Actions, or equivalent — including pipeline design and developer experience
- Kubernetes at an operational and architectural level
- A track record of identifying systemic risks and driving improvements within your team and adjacent systems
- Security-first mindset: threat modeling, blast radius analysis, least-privilege by default, audit trails as a design requirement
- Strong written English; clear written communication is how you scale your work across the team
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
ON-CALL
Operational ownership is part of the job. You’ll join the rotation after onboarding and shadowing, and help improve on-call itself: better alerts, stronger runbooks, less toil, and blameless postmortems aimed at prevention.
WHAT SETS YOU APART
You don't wait for problems to be handed to you — you find them, frame them, and drive the solution. You've operated at a scope where your decisions affected the systems your team owns, and you know how to build alignment and move work forward without direct authority. You've thought seriously about what infrastructure needs to look like when AI agents are generating and shipping code — safe deployment patterns, strong observability, clean rollback — and you want to help define that standard here. Experience with billing, payments, or financial systems infrastructure is a meaningful plus.
WHAT TO EXPECT
First 30 days
You will ship code in your first week. We run an agent-first development workflow — infrastructure changes start with a plan, specifications are written before generation, and every change is reviewed before it merges — and onboarding is no exception. You will get hands-on with the infrastructure supporting Billing Platform services early, shadow on-call, and build a clear picture of the system before you start making bigger changes. By the end of 30 days you will have shipped real work and know where the most important problems are.
First 90 days
You will have taken ownership of one or more infrastructure components and delivered an improvement from design to production with measurable impact. You will be an active participant in deployment and reliability discussions, bringing infrastructure constraints and operational requirements into the conversation early — before code is written. You will be a full participant in the on-call rotation and will be contributing to the team's technical direction.
One year outlook
You will be one of the team's go-to engineers on billing infrastructure. You will have driven meaningful improvements to observability, deployment safety, or platform reliability — and your work will be directly visible in the resilience and correctness of systems that handle real financial transactions for millions of Docker users. You will have helped define what AI-agent-assisted infrastructure operations look like done right.
Docker considers visa sponsorship on a case-by-case basis based on business needs.
Compensation & Equity
United States: $160,900 – $260,700 + equity
______________________________________________________________________
POSTING INFORMATION
- Open vacancy: This posting is for an existing open role.
- AI in hiring: Docker may use AI-assisted tools during our recruiting process.
- Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.
______________________________________________________________________
PERKS & BENEFITS
- Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
- Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
- Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
- Home office support – Set up your workspace for comfort and success.
- Technology stipend – Equivalent to US$100 net per month to help support your work.
- Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
- Parental leave – 16 weeks of paid parental leave after six months of employment.
- Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
- Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
- Docker swag – Because representing the whale never gets old.
Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.
#LI-REMOTE
Location: New York, NY (HQ); Remote (Canada); Remote (US); Miami, FL
Workplace: Hybrid
ABOUT RAMP
Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books.
The problems are high-stakes, data-dense, and unforgiving.
We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome.
The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same.
If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it.
ABOUT THE ROLE
The Security Engineering team helps make Ramp the most secure place for our customers to collect, manage, and put to work their business’ financial information
Our work centers in three areas:
- Ramp builds products with an eye for security
- Ramp detects and responds to threats before they cause harm
- Security powers Ramp’s growth
Check out our Engineering Blog https://engineering.ramp.com/ for more on our tech stack, mission and values!
What You’ll Do
- Drive our cloud security roadmap: review our cloud deployments to identify opportunities for improvement
- Design and build security-focused infrastructure primitives and integrate them into our existing products and development processes
- Lead remediation of prioritized issues across our technology stack
- Partner with infrastructure, data, and devops teams to design and deploy solutions that are inherently secure
WHAT YOU NEED
- Minimum 5 years of experience building software
- Minimum 3 years of experience building in AWS (with Terraform)
- A strong sense of ownership: you need to drive projects from inception to scaling it in production
- Desire to work in a fast-paced environment, continuously grow, and master your craft
NICE-TO-HAVES
- Experience with Python (Flask) and Terraform
- Experience with Azure, GCP, and other cloud providers
- Experience improving the developer experience and security properties of a multi-service deployment
BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL)
- Flexible PTO
- Centralized home-office equipment ordering
- Health and wellness stipend
- Budget for intra-office travel
- Weekly coffee stipend
UNITED STATES
- 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents
- One Medical annual membership
- 401(k), including employer match on contributions made while employed by Ramp
- Fertility HRA (up to $10,000 per year)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay
- Pet insurance
- In-office perks: lunch, snacks, drinks, and more
- Relocation expense coverage to NYC or SF (if needed)
CANADA
- Group medical, dental, and vision coverage through Sun Life
- Life, AD&D, and disability coverage
- Fertility drug coverage (up to $4,000 lifetime)
- Group Retirement Plan with employer match (RRSP + DPSP)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay
- Employee Assistance Program and virtual care through Lumino Health
UNITED KINGDOM
- Private medical insurance through Freedom Elite
- Virtual GP and at-home care via eMed x Livi
- Workplace pension through Penfold, with salary sacrifice option
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay
REFERRAL INSTRUCTIONS
If you are being referred for the role, please contact that person to apply on your behalf.
OTHER NOTICES
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.
Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice
Location: San Francisco; Remote; Toronto; New York; Montreal; Seattle
Workplace: Hybrid
ABOUT BASETEN
Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products.
THE ROLE
We are seeking an experienced and proactive Security Engineer to help us build, maintain, and continuously improve the security posture of our rapidly growing ML infrastructure platform. As one of the first dedicated security hires at Baseten, you will work cross-functionally with engineering and operations teams to ensure we’re meeting the highest standards of confidentiality, integrity, and availability. You’ll have an opportunity to shape our security strategy and best practices from the ground up, influencing the way our platform handles sensitive data for both internal and external stakeholders.
RESPONSIBILITIES
- Security architecture and design: Collaborate with engineering teams to design and implement secure systems and infrastructure, including cloud (AWS/GCP) environments and container orchestration platforms.
- Vulnerability management: Lead proactive vulnerability assessments, pen tests, and remediation efforts to ensure our products and infrastructure remain secure.
- Incident response: Develop and maintain incident response processes, including detection, analysis, containment, eradication, and post-incident reviews.
- Identity and access management (IAM): Oversee IAM strategies and tools to ensure the right people have the right level of access to our systems and data.
- Security compliance and audits: Work closely with operations to ensure compliance with relevant standards (e.g., SOC 2, ISO 27001) and assist with audits, policy creation, and risk assessments.
- Employee security training: Develop and deliver security training programs and documentation to keep our team informed about best practices, social engineering threats, and secure coding standards.
- DevSecOps integration: Partner with DevOps teams to embed security into the CI/CD pipeline, automating security checks and fostering a culture of “security as code.”
REQUIREMENTS
- 3+ years of experience in a Security Engineer or similar security-focused role, preferably in a fast-paced startup environment.
- Strong knowledge of cloud security (AWS/GCP), container security, and infrastructure-as-code best practices.
- Hands-on experience with security tooling (SIEM, IDS/IPS, vulnerability scanners) and scripting languages to automate security tasks.
- Familiarity with compliance frameworks such as SOC 2, ISO 27001, and GDPR, and the ability to translate requirements into actionable security controls.
- Incident response expertise, including forensic analysis and root cause investigation.
- Excellent communication skills and the ability to collaborate with cross-functional teams to promote a security-first culture.
BENEFITS
- Competitive compensation, including meaningful equity
- (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents
- Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!)
- Paid parental leave
- Fertility and family-building stipend through Carrot
- (U.S. only) Company-facilitated 401(k)
- Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities.
Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you.
At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.
We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).
Location: San Francisco, CA • New York, NY • United States
Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us!
As a Security Engineer you will identify and drive impactful projects to improve the security of Figma’s product, platform, and IT systems. We are hiring for multiple teams within Security Engineering: AI Security, Platform Security, Product Security, and Anti-Abuse. This is a remote first role.
You will partner closely with teams across the company and focus on systemic security improvements and risk reduction. You will also participate in operational security responsibilities like security reviews, consulting, vulnerability triage, and security incident response.
Examples of what you may work on across teams:
AI Security
Perform technical security assessments, code audits, and design reviews for new AI infrastructure, platforms, and products.
Design and develop technical solutions to secure AI models, tooling, debugging workflows, and data pipelines.
Advocate for secure practices across Figma’s AI infrastructure, platforms, and data systems.
Build the next generation of internal AI-powered access insights and security tooling.
Help run penetration testing and offensive security exercises against Figma’s AI infrastructure, platforms, and products.
Platform Security
Perform technical security assessments, code audits, and design reviews for changes to Figma’s cloud and corporate infrastructure.
Design and develop solutions to prevent or mitigate cloud and corporate security risks.
Advocate for secure practices within Figma’s cloud and corporate infrastructure.
Build platforms and tooling to detect and respond to infrastructure and corporate security threats.
Product Security
Perform technical security assessments, code audits, and design reviews for new product features.
Design and develop solutions to prevent or mitigate product security vulnerabilities.
Advocate for secure development practices across Figma’s products and services.
Help run penetration testing, offensive security exercises, and support our bug bounty program.
Help respond to product security incidents.
Anti-Abuse
Design and build technical systems to prevent spam, fraud, and abuse.
Partner closely with product teams to identify and address potential abuse vectors.
Develop new signals and improve the use of existing signals to detect abusive behavior.
Help respond to spam, fraud, and abuse incidents.
This is a full-time role that can be held from one of our US hubs or remotely in the United States.
We’d love to hear from you if you have:
5+ years of proven engineering experience working in either a Security Engineering or a Software Engineering role. In the case of the latter, some security experience is preferred.
Strong security judgment in threat modeling and risk prioritization
and/or
strong technical judgment in designing and building maintainable, scalable systems.
Proficiency in at least one general-purpose coding language.
Strong communication and interpersonal skills, with demonstrated experience collaborating across functions.
While not required, it’s an added plus if you also have:
Subject matter expertise in Application Security, Cloud Security, Corporate Security, Data Access Governance, and/or IAM (Identity and Access Management).
Demonstrated ability to make hard prioritization decisions in security controls.
At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.
#LI-Remote
Pay Transparency Disclosure
Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location.
Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law.
Annual Base Salary Range:
$153,000
—
$376,000 USD
At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an
equal opportunity workplace
- we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status
,
or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.
We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to
accommodations-ext@figma.com
. These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities.
Examples of accommodations include but are not limited to:
Holding interviews in an accessible location
Enabling closed captioning on video conferencing
Ensuring all written communication be compatible with screen readers
Changing the mode or format of interviews
To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding.
By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with
Figma's Candidate Privacy Notice
.
Application limits:
To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles:
Candidates may submit up to 5 applications during any rolling 30-day period.
Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection.
Once the applicable days has passed, candidates are welcome to apply again.
Location: New York, NY (HQ)
Workplace: Hybrid
ABOUT RAMP
Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books.
The problems are high-stakes, data-dense, and unforgiving.
We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome.
The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same.
If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it.
About the Role
The Product Security team helps make Ramp the most secure place for our customers to collect, manage, and put to work their business’ financial information.
Our work centers in three areas:
- Ramp builds products with an eye for security
- Ramp detects and responds to threats before they cause harm
- Security powers Ramp’s growth
Check out our Engineering Blog https://engineering.ramp.com/ for more on our tech stack, mission and values!
What You’ll Do
- Build security-focused application primitives and integrate them into our existing products
- Design and deploy platform-level mitigations to common security issues
- Lead remediation of prioritized issues across our technology stack: collaborating with other engineers to triage and fix vulnerabilities discovered internally, through penetration testing, and through our bug bounty program
- Partner with engineering teams to design and deploy solutions which are inherently secure
- Champion the use of tooling (linters, static analysis, posture assessment scanners, query inspectors, etc.) which help Ramp engineers build secure systems more quickly
What You Need
- Minimum of 5 years of experience building software
- Minimum of 2 years of experience focused on platform, infrastructure, and/or security
- Desire to work in a fast-paced environment, continuously grow, and master your craft
- Ability to turn business and product ideas into engineering solutions
- Alignment with Ramp’s core values of enabling businesses to grow more by spending less
Nice to Haves
- Experience with Python (Flask), Elixir, and AWS (ECS, as well as other core services)
- Experience analyzing and improving the security posture of infrastructure in AWS
BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL)
- Flexible PTO
- Centralized home-office equipment ordering
- Health and wellness stipend
- Budget for intra-office travel
- Weekly coffee stipend
UNITED STATES
- 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents
- One Medical annual membership
- 401(k), including employer match on contributions made while employed by Ramp
- Fertility HRA (up to $10,000 per year)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay
- Pet insurance
- In-office perks: lunch, snacks, drinks, and more
- Relocation expense coverage to NYC or SF (if needed)
CANADA
- Group medical, dental, and vision coverage through Sun Life
- Life, AD&D, and disability coverage
- Fertility drug coverage (up to $4,000 lifetime)
- Group Retirement Plan with employer match (RRSP + DPSP)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay
- Employee Assistance Program and virtual care through Lumino Health
UNITED KINGDOM
- Private medical insurance through Freedom Elite
- Virtual GP and at-home care via eMed x Livi
- Workplace pension through Penfold, with salary sacrifice option
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay
REFERRAL INSTRUCTIONS
If you are being referred for the role, please contact that person to apply on your behalf.
OTHER NOTICES
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.
Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice
Location: United States & Canada
Workplace: Remote
About WorkOS 🚀
WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations.
We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid.
As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products.
About the role 💭
The Radar team builds our real-time identity intelligence layer that helps developers detect risk, prevent threats, and protect their apps. Radar ingests high-volume authentication and identity events, enriches them with signals, and powers workflows that customers use to take action: enforcing challenges, blocking suspicious behavior, or triggering reviews.
Our mission is to give developers a turnkey platform for identity security and risk evaluation. The hard and interesting part for engineers is detection quality: catching real threats with high precision and very few false positives, in real time, against adversaries who are actively trying to get around us.
Engineers on Radar care deeply about correctness, performance, observability, detection quality, and the developer experience. We measure our work by real impact, often in the millions of dollars of fraud and abuse we save customers.
The engineers who thrive here are fascinated by data. Radar serves some of the fastest-growing AI companies in the world, which gives us one of the richest fraud-and-abuse datasets in the identity space.
Responsibilities ✔️
- Design and build performant, resilient systems for real-time identity event processing
- Craft intuitive APIs and developer workflows that make Radar easy to adopt
- Dig into large-scale authentication data to find fraud and abuse patterns, then design, test, and measure the signals and models that detect them
- Develop a deep understanding of the identity-security landscape and shape Radar’s product direction
- Work directly with customers, including some of the biggest names in AI, to understand their fraud problems, prototype solutions for them, and become a trusted expert they rely on
- Maintain a strong focus on reliability, security, correctness, and observability across the stack
- Collaborate with other product teams, solutions engineering, and our go-to-market team
- Work directly with leadership on greenfield ideas
- Help recruit and assess future engineering team members
Qualifications 🌟
- 5+ years of industry software development experience
- Comfort working with data at scale - querying, analyzing, and drawing sound conclusions from large datasets
- Background in large-scale systems, real-time pipelines, or event-driven architectures
- Intellectually curious and data-driven, with a scientific mindset - you like forming hypotheses, testing them against data, and measuring the impact of what you build
- A growth mindset, high emotional intelligence, and strong communication skills
- Bonus: Experience with machine learning, anomaly detection, or fraud and abuse detection
- Bonus: Experience in B2B SaaS, developer tools, or a related industry
Benefits and Perks (US Only) 💖
At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.
- 401k matching
- Competitive Equity
- Healthcare, dental and vision coverage
- FSA, ST/LT Disability, Voluntary Life
- Carrot fertility benefits
- 20 days paid vacation + 10 holidays + unlimited sick leave
- 12 weeks fully paid parental leave
- Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
- Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being
- Commuter benefits for hybrid employees in SF/NYC
- Unlimited token usage!
Please inquire directly with our recruiting team for benefits available to those working outside the US.
Equal Opportunity Employer
WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Location: Foster City, CA
Workplace: Hybrid
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
ABOUT THE ROLE:
We’re looking for a Senior Product Marketing Manager to help accelerate the growth of Replit Agent— a core part of our mission to allow anyone to build software, without any coding experience.
This role sits at the crossroads of product, engineering, and go-to-market, ensuring that every new feature we ship lands with clarity, excitement, and impact. You’ll work closely with our engineers, PMs and Partnership teams to understand the product roadmap, then translate those innovations into compelling narratives that resonate with builders of all kinds — from solo builders to enterprise teams. You’ll also leverage your storytelling expertise to collaborate with our partner ecosystem, crafting compelling “Better Together” narratives that elevate our joint value and propel partner marketing initiatives.
Replit moves fast — we ship continuously, experiment relentlessly, and aim to make every builder more productive and creative. We’re looking for someone who thrives in that environment: part strategist, part storyteller, and part operator.
WHAT YOU’LL DO:
- Lead Product Marketing for our Launches
Develop and operationalize Replit’s launch motion — from early roadmap planning through public release. Create repeatable frameworks that keep launches fast, clear, and coordinated.
- Shape Messaging & Positioning
Craft technically fluent, developer-first narratives that highlight how Replit’s AI coding agent accelerates creativity and productivity. Tailor messaging to different developer segments and channels.
- Create Sales & Growth Enablement
Build the first generation of enablement materials (decks, demos, battlecards, FAQs) that empower GTM teams and partners to tell Replit’s story confidently.
- Lead Competitive and Market Insights
Stay ahead of the fast-moving landscape in AI coding assistants and app development platforms. Identify key trends, threats, and whitespace opportunities that shape how Replit stands out.
- Co-market with our Partner ecosystem
You’ll also leverage your storytelling expertise to collaborate with our partner ecosystem, crafting compelling “Better Together” narratives that elevate our joint value and propel partner marketing initiatives
- Analyze & Learn
Define metrics, gather insights, and feed back learnings from the field and community to inform product and marketing strategies.
YOU'LL BE A GOOD FIT IF YOU:
- Have 8+ years of work experience, including 6+ years in product marketing (ideally within the app development space)
- Love building from scratch — frameworks, processes, teams, and strategy
- Excellent written communication and storytelling skills, with the ability to simplify complexity
- Are equally comfortable writing a launch announcement, building a competitive teardown, or running a cross-functional sync
- Have a founder mindset: you identify gaps and fill them, move quickly, and don’t wait for someone else to define the playbook
- Proven ability to partner directly with engineers and product managers, turning technical concepts into simple, powerful stories
- Strong project management skills — you can juggle multiple launches and keep teams aligned under pressure
- Experience with sales enablement and competitive positioning for technical audiences
- A collaborative, low-ego approach and willingness to dig into the details
BONUS POINTS:
- Experience in app development space or marketing to product managers, designers, sales, marketing or operations teams
- Experience with Partner/Ecosystem Marketing- to start with, we are looking for a generalist who can also help out with Partner Marketing
- Experience at a startup or high-growth environment where speed and adaptability matter
- Understanding of AI and machine learning technologies
- A track record of successful launches for developer-facing products
EXAMPLE PROJECTS:
- Establishing a repeatable launch rhythm for major features and smaller updates
- Building a competitive intelligence framework for the AI coding assistant space
- Developing persona-driven messaging for builders across different segments and company sizes
- Launching and executing co-marketing initiatives with Replit’s partner ecosystem
- Coordinating cross-functional launches with engineering, product and marketing
- Defining metrics and feedback loops between product, marketing, and the our builder community
This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office & US Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
- Self-driving Company https://replit.com/blog/self-driving-company
- Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale
- AI Adoption https://replit.com/blog/ai-adoption
- Build Open-Source Apps https://replit.com/build/open-source-app-builder
Interviewing + Culture at Replit
- Operating Principles https://blog.replit.com/operating-principles
- Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Location: Remote: United States; Remote: Canada
Workplace: Remote
At Render, we’re building the modern cloud platform for developers creating AI-native, full-stack, multi-service applications. Our mission is to eliminate the tradeoff between the power of hyperscalers and the simplicity of developer-friendly platforms—so teams can ship fast, scale reliably, and focus on their product, not infrastructure.
Unlike complex hyperscalers or ephemeral edge/serverless solutions, Render offers a developer-first experience with persistent compute, dynamic autoscaling, built-in orchestration, and observability, allowing teams to launch, scale, and manage real-world applications without writing infrastructure code or managing servers. Whether you're building LLM-powered applications, scalable SaaS products, or async processing pipelines, Render empowers teams to move fast and scale confidently from MVP to millions of users.
Our platform is trusted by over 7 million developers worldwide and continues to grow rapidly. In February 2026, we raised an additional $100M in Series C financing, bringing our total funding to $260M, to accelerate our vision of making cloud infrastructure both powerful and intuitive—designed for the speed of modern AI development.
We’re a diverse and talented team that values craft, velocity, and user experience. If you’re excited to help shape the future of the intelligent cloud and empower developers everywhere, we’d love to hear from you.
APPLYING TO RENDER
We're seeking candidates who possess high integrity, humility, and an insatiable drive to learn. Through reasoned discussions and continuous feedback, we strive to improve both individually and collectively. We foster an environment of mutual trust and respect, empowering effective debate to achieve the best outcomes for our customers and team.
We especially encourage members of underrepresented groups in the tech community to apply and understand that not all successful candidates will meet each requirement listed.
Our interview process is unique to each role, and we value the candidate experience just as much as our customer experience. We hope your conversations with us reflect a thoughtful process that is illuminative, enjoyable, and respectful of your time.
ABOUT THE ROLE
The Render Security team is a small, dedicated team of engineers that runs all things security at Render.
- Full-Stack Security Ownership - We don't just monitor; we build. From custom security tooling to comprehensive threat assessment, we own the entire security lifecycle at Render.
- Engineering-First Approach - We are a team of engineers that understand security deeply, we create solutions that integrate seamlessly with development workflows rather than creating friction.
- Proactive - We stay ahead of threats through continuous assessment, automated monitoring, and rapid response.
By joining Render at an early stage, you will be directly involved with building out foundational security for Render and make decisions that will shape our product and company, directly impacting developers around the globe.
YOU WILL:
- Build internal tooling to enable secure access to resources (e.g., wrappers, utilities, authentication services, and proxies).
- Implement detection and monitoring systems that alert the team to high signal vulnerabilities
- Analyze and assess security issues identified through threat modeling, penetration testing, security scans and vulnerability disclosure.
- Work with developers on sensitive code paths and educate them on secure design patterns.
- Liaise with customers regarding their security and compliance needs, and in return, inform our security program.
- Communicate security risks and solutions to technical and non-technical stakeholders as part of company-wide planning and prioritization processes.
- Stay up-to-date with the latest security threats, vulnerabilities, and best practices and make recommendations for improvements to our security posture.
- Partner with product engineering teams to inform and build thoughtful security features for our customers.
- Continually ensure that our systems have appropriate authentication, authorization, and accounting with low internal overhead.
WE'RE LOOKING FOR:
- 6+ years of professional experience in software engineering or security.
- Experience designing and building secure web applications, tools, and APIs.
- Experience with vulnerability review and analysis
- Strong incident leadership and diligent response.
- Empathy toward the rest of the team and our customers
- Strong sense of ownership and ability to make pragmatic decisions about your work.
NICE-TO-HAVES:
- Detection engineering experience through implementation and maintenance of a SIEM.
- Experience with any of the technologies the Render product runs on: Go, Typescript, Kubernetes, Postgres, Terraform, Temporal.
- Experience with compliance frameworks such as SOC 2, ISO 27001, HIPAA or PCI.
- Proven expertise in exploiting common security vulnerabilities, demonstrating practical experience in identifying and leveraging vulnerabilities to assess security posture.
- Experience securing applications and systems through threat modelling and risk assessments.
- Active participation and contributions to the security community through public research, blogging, presentations, and other means.
If this role excites you but you don’t meet every single requirement, we’d still love to hear from you—your unique experience might be just what we need.
BENEFITS
- 4 weeks of paid vacation.
- 14 weeks of fully paid parental leave for all parents to bond with a newly born, adopted, or fostered child. We will also work with you to create a supportive plan of return.
- Long-term disability, life insurance, and 401K plans.
- 100% employer-paid medical coverage and 99% employer-paid dental and vision coverage for you and a dependent. FSAs and HSAs are available as well.
- Monthly lifestyle stipend for wellness, mental health and therapy, hobbies, etc.
- Monthly cell phone and internet subsidy.
- Commuter benefits for Renders in the Bay Area, and home office stipends for remote Renders.
- Continuous learning benefits & related support.
This position is generally not eligible for new visa sponsorship. At Render's discretion, the business may sponsor existing visa transfers. Applicants who require sponsorship must receive business authorization.
Render is an equal-opportunity employer. We know that employing a team rich in diverse thoughts, experiences, and opinions allows our employees, product, and community to flourish. We make all employment decisions including hiring, evaluation, termination, promotional, and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
We encourage all who are interested to apply. We can't wait to hear from you!
Render — CCPA Applicant Privacy Notice https://drive.google.com/file/d/1wKr9IejoT5McFrs9I2mahQnf6AFwb3z2/view
Render — GDPR Applicant Privacy Notice https://drive.google.com/file/d/1_8jtyXQ1HdRdTdQn9sZ7n-R-zAGBmsFa/view
Location: Hybrid - San Francisco, New York City
About Vercel:
Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.
Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.
About the role:
We are looking for a Software Engineer, Trust & Safety, to design, build, and operate the large-scale, real-time distributed systems that stop abuse and fraud on the platform, including fraud committed through AI agents, fraud that abuses deployments and compute resources, and payment fraud on token-based usage. You will write the services, detection systems, and large language model (LLM) tooling that disrupt abuse at internet scale. This is a hybrid role based in San Francisco or New York City, with three days a week in the office.
What you’ll do:
Design and build production services that detect and disrupt fraud committed through AI agents, fraud that abuses deployments and compute resources, and payment fraud on token-based usage
Build detection systems that find abuse patterns across large datasets
Ship LLM-driven systems for abuse detection, classification, and prevention, and build the datasets and evaluation pipelines that measure them
Build and maintain internal tools for trust and safety workflows
Analyze threat actor behavior to inform detection logic, and work with security, product, and infrastructure teams to move prototypes into stable production
What you need:
5+ years of software engineering experience building large-scale, real-time distributed systems
Wrote and shipped production code in JavaScript/TypeScript and Python, owning systems end to end from prototype through deployment and iteration
Hands-on LLM experience, including prompt engineering, evaluation, and fine-tuning
Operated production services on AWS
Bonus if you:
Shipped an AI-based trust and safety system to production
Worked in abuse prevention, trust and safety, or security engineering
Built or hosted a project on Vercel
Benefits & Compensation:
Competitive compensation package, including equity.
Inclusive Healthcare Package.
Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
Flexible Time Off.
We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
The San Francisco, CA base pay range for this role is $208,000 - $312,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.
Disclosures:
Privacy:
Please review our
Job Applicant Privacy Policy
for more information on how we handle your data.
Equal Opportunity:
Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.
Location: Home based - Worldwide
We have opened several senior/staff Security Operations Engineer (SOC) positions, creating a new team reporting to the CISO. We are looking for a range of experience in these positions - at the high end we are looking for deep experience defending highly contested critical assets and high-value cyber targets against advanced persistent threats and state-level actors. We have more junior roles for exceptional individuals with a proven personal interest an engagement in cyber attack and defence, and outstanding academic and career performance even if experience is limited.
Our goal is to build an entirely new level of assurance and observable rigour into the open source supply chain. We have our own estate to monitor, but more broadly our goal is to raise the robustness of the entire global Ubuntu estate through the work of this team.
The Security Operations (SecOps) team is responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack.
The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
What you will do in this role:
Implement and evolve Canonical's SecOps security standards and playbooks
Analyse and improve Canonical's security architecture
Evaluate, select and implement new security tools and practices
Identify, contain and guide the remediation of security threats and cyber attacks
Grow the presence and thought leadership of Canonical SecOps practice
Contribute to open source threat intelligence initiatives
Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical
Develop Canonical SecOps learning and development materials
Publish blog posts, whitepapers and conference presentations
Identify, implement and track SecOps KPIs
Plan and deliver SecOps work in the framework of Canonical's agile engineering practice
Work with Security leadership to present information and influence change
What we are looking for
An exceptional academic track record
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Expertise in threat modelling and risk management frameworks
Knowledge of security architecture and market-leading security tools
Experience contributing to, and consuming, threat intelligence feeds
Experience in security risk management frameworks such as NIST CSF
Experience with security standards such as ISO 27001
Optional things we value
Experience in a security operations team or a security operations centre (SOC)
Experience in offensive or defensive security teams with hands-on ability
Experience with state-actor and other advanced persistent threats
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
As the most widely used Linux distribution, Ubuntu underpins the security of the entire internet. The role of Security Engineering Manager directly impacts the safety and security of millions of users worldwide. Join a team of security experts dedicated to protecting the open-source ecosystem and driving innovation. Your leadership will be instrumental in addressing emerging threats, developing robust security measures, and ensuring the continued integrity of Ubuntu. This is an opportunity to make a tangible difference and leave a lasting legacy on the digital landscape.
As we place ever more trust in software and data security in our increasingly connected world, Canonical’s mission to deliver the world’s best open source platform comes with a responsibility: to set the highest possible standard for software security, not only for the OS, but also for the wide range of open source infrastructure and software that developers enjoy within the Ubuntu ecosystem. With Canonical’s Ubuntu being the leading open source platform for large-scale cloud and edge deployments, we are increasingly called upon to help customers meet strict security requirements such as FIPS, CIS, STIG, FedRAMP and the new CRA.
This role is about leading the charge to set the security standards for open source software across the Ubuntu platform, from desktops, servers and edge devices to cloud infrastructure, Kubernetes and OpenStack, by certifying core components to meet industry standards and guiding development teams across the company in security best practices. We work primarily within the areas of cryptographic modules (FIPS 140) and system hardening, where we collaborate with industry partners including CIS and DISA to define and build secure operating system deployments.
An Engineering Manager is responsible for line management and career guidance. The ability to develop engineering talent, to represent your team and product from a technical perspective, and to drive collaboration with other teams and customers are all critical to success in this role.
What you will do in this role
Lead and develop a team of engineers, ranging from graduate to senior
Coach, mentor, and offer career development feedback
Identify and measure team health indicators
Implement disciplined engineering processes
Represent your team and product to stakeholders, partners, and customers
Develop and evangelise great engineering and organisational practices
Plan and manage progress on agreed goals and projects
Support our products and customers to meet strict product security requirements such as FIPS, CIS, STIG, FedRAMP and the new CRA
Support the work addressing specific cryptography modules (FIPS 140) and system hardening efforts with indrustry partners, including CIS and DISA
What we are looking for in you
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive, and a track record of going above-and-beyond expectations
Excellent verbal and written communication skills in English
A love of developing and growing people and a track record of it
Organised and able to ensure your team delivers timely, high quality results
Professional manner interacting with colleagues, partners, and community
Prior experience working on FIPS/Common Criteria certified products and in-depth knowledge of the underlying standards
Prior experience working directly with DISA-STIG or CIS benchmarks, including related audit + remediation tooling (e.g. Compliance as Code)
Knowledgeable and passionate about software and application security
Solid experience working in an agile development environment
A demonstrated drive for continual learning
Builds trust, relationships and confidence
Result-oriented, with a personal drive to meet commitments
Ability to travel twice a year, for company events up to two weeks each
Optional things we value
Hands-on domain knowledge of Linux cryptography libraries (OpenSSL, GnuTLS)
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
As the most widely used Linux distribution, Ubuntu underpins the security of the entire internet. The role of Security Engineering Manager directly impacts the safety and security of millions of users worldwide. Join a team of security experts dedicated to protecting the open-source ecosystem and driving innovation. Your leadership will be instrumental in addressing emerging threats, developing robust security measures, and ensuring the continued integrity of Ubuntu. This is an opportunity to make a tangible difference and leave a lasting legacy on the digital landscape.
The AppArmor team's first responsibility is to develop security features and capabilities for AppArmor, the security module protecting all Ubuntu users, by providing mandatory access control to confine programs and restrict their access to system resources.Your work will improve the security of millions of people. You will engage directly with our community and customers, as well as coordinating efforts across multiple engineering teams and projects to make this happen.
An Engineering Manager is responsible for line management and career guidance. The ability to develop engineering talent, to represent your team and product from a technical perspective, and to drive collaboration with other teams and customers are all critical to success in this role.
What you will do in this role
Lead and develop a team of engineers, ranging from graduate to senior
Coach, mentor, and offer career development feedback
Identify and measure team health indicators
Implement disciplined engineering processes
Represent your team and product to stakeholders, partners, and customers
Develop and evangelise great engineering and organisational practices
Plan and manage progress on agreed goals and projects
Be an active part of the security engineering leadership team, collaborating with other leaders
What we are looking for in you
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive, and a track record of going above-and-beyond expectations
Excellent verbal and written communication skills in English
A love of developing and growing people and a track record of it
Organised and able to ensure your team delivers timely, high quality results
Professional manner interacting with colleagues, partners, and community
Proficient in C and have a good understanding of Linux kernel development
Experience working with Linux Security Modules
Knowledgeable and passionate about software and application security
Solid experience working in an agile development environment
A demonstrated drive for continual learning
Builds trust, relationships and confidence
Result-oriented, with a personal drive to meet commitments
Ability to travel twice a year, for company events up to two weeks each
Optional things we value
Good understanding of containers/packaging formats
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
In security risk management we’re looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security risk management team is the primary owner of the strategy and practices of how we identify, track and reduce our security risk across everything we do.
To support this we need to use industry best practices paired with emerging threat information to to promote risk identification, quantification, impact analysis, and modelling to ultimately drive decision making. In this role, you will help establish and execute a broad strategic vision for the security risk program at Canonical. You will not only work within the team but also cross-functionally with various teams across the organisation. The team contributes ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attacks. Additionally, the team collaborates with our Organisational Learning and Development team to develop playbooks and facilitate security training across Canonical.
The security risk management team’s mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
What you will do in this role:
Define Canonical's security risk management standards and playbooks
Analyse and improve Canonical's security risk practices
Evaluate, select and implement new security requirements, tools and practices
Grow the presence and thought leadership of Canonical security risk management practice
Develop Canonical security risk learning and development materials
Work with Security leadership to present information and influence change
Participate in developing key risk indicators, provide inputs to the development of key control indicators, and key performance indicators for various programs
Apply statistical models to risk frameworks (such as FAIR, sensitivity analysis, and others)
Participate in risk management, decision-making, and collaborative discussions
Lead quantified risk assessments and understand the value of qualitative data for improvements to quality and engineering processes
Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action
Develop templates and materials to help with self-service risk management actions
Monitor and identify opportunities to improve the effectiveness of risk management processes
Launch campaigns to perform security assessments and help mitigate security risks across the company
Build evaluation methods and performance indicators to measure efficiency of security functions and capabilities.
What we are looking for
An exceptional academic track record
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Leadership and management ability
Excellent business English writing and presentation skills
Problem-solver with excellent communication skills, a deep technical understanding of security assessments and risk management
Expertise in threat modelling and risk management frameworks
Broad knowledge of how to operationalize the management of security risk
Experience in Secure Development Lifecycle and Security by Design methodology
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
The Canonical Security Operations team is hiring for a Senior or Staff engineer. The Security Operations team is responsible for designing, building, and operating a world-class Security Operations Center, and the successful candidate will provide leadership, mentorship, expertise, and outstanding individual contributions towards those ends.
This role involves aspects of:
Traditional SOC duties - security monitoring, threat hunting, and response.
Security engineering - assessing and protecting Canonical platforms and products.
Software engineering - building custom tools and platforms.
Site reliability engineering - deploying, maintaining, and automating security tools.
We are looking for individuals with engineering and security experience, as well as a history of remarkable achievement. Senior security operations personnel with engineering experience and senior developers with security experience are equally well-suited to this role.
Beyond securing Canonical’s digital estate, this position represents a unique opportunity to contribute to the open source ecosystem. Team members may present at industry conferences, share threat intelligence with the wider community, or publish open source security software.
Junior positions are also available for less-experienced individuals with a compelling academic or professional background.
In this role, you will:
Provide operational and engineering leadership.
Implement and evolve Canonical’s Security Operations Center.
Design and develop security software and platforms.
Monitor for, identify, respond to, and remediate security incidents.
Assess and improve Canonical’s security controls.
Mentor early-career Security Operations engineers.
Plan and deliver work within Canonical's agile engineering framework.
Contribute to open source security.
Publish blog posts, whitepapers and conference presentations.
We are looking for:
An exceptional academic track record.
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path.
10+ years of relevant professional experience
Professional cybersecurity experience, preferably working or leading a Security Operations Center.
Professional engineering experience.
An eagerness to contribute to open source security.
Proficiency in common scripting languages, such as Python and Bash.
Knowledge of Git, GitOps, Infrastructure-as-Code, and common orchestration platforms (e.g., Kubernetes)
Though optional, we value:
Familiarity with security frameworks such as the NIST CSF, CIS CSC, and ISO 27001
Knowledge of security architecture and market-leading security tools.
Experience in a security operations team or a security operations center.
Experience in offensive or defensive security teams with hands-on ability.
Experience with advanced persistent threats.
Proficiency in additional programming languages, such as Golang.
What we offer you:
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
This global leadership role in cyber security is to manage the Security Operations (SecOps) team responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack.
As a leader on cyber security in the company, the SecOps team manager will collaborate with our Organisational Learning and Development team to develop playbooks and facilitate SecOps training across Canonical. They will operate in a wider security organisation, run a high performing security team and improve Canonical's security posture. They will lead initiatives to integrate the team's insights into Canonical's broader software development process.
While this is a management position, we expect managers to be expert practitioners, able to lead by example, contribute at the highest level, and assess work based on their own professional experience and skill. Candidates should have deep, hands-on expertise with a range of open source and proprietary security tooling and practices, which they can integrate into a holistic next generation security solution across the breadth of Canonical's interests.
The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
This role reports to the CISO.
What you will do in this role:
Hire and mentor a team of outstanding technical security professionals
Define Canonical's SecOps security standards and playbooks
Own and drive the architecture and design of the SOC
Analyse and improve Canonical's security architecture
Evaluate, select and implement new security tools and practices
Identify, contain and guide the remediation of security threats and cyber attacks
Grow the presence and thought leadership of Canonical SecOps practice
Contribute to open source threat intelligence initiatives
Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical
Develop Canonical SecOps learning and development materials
Publish blog posts, whitepapers and conference presentations
Identify, implement and track SecOps KPIs
Plan and deliver SecOps work in the framework of Canonical's agile engineering practice
Work with Security leadership to present information and influence change
What we are looking for
Proven track record of mitigating with advanced threat actors and nation state threats
Expert technical understanding of SOCs from the ground up
In depth knowledge of SOC architecture and design including strategies for logging, firewalls, network segmentation, honeypots etc
Someone who understands how the SOC works not just how to use it
Expert in Linux security
Ability to define, implement, automate and measure effective incident response playbooks
Knowledge of security architecture and market-leading security tools
Experience contributing to, and consuming, threat intelligence feeds
Experience in security risk management frameworks such as NIST CSF
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Leadership and management ability
Excellent business English writing and presentation skills
Confidence to report security performance metrics with accountability for accuracy and completeness
Optional things we value
Experience in offensive or defensive security teams with hands-on ability
Experience with open source security tools
Experience with security standards such as ISO 27001
Experience with security posture management of corporate endpoitns
Location: Home based - Worldwide
Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution.
The company is founder-led, profitable, and growing.
Canonical is looking for exceptional security-focused software engineers to be integrated across product teams. While they also contribute to the product as engineers, their primary focus is to challenge the entire team to think more deeply about security through state-of-the-art practices such as threat modeling, table-top exercises, architecture and design reviews, static analysis tools, and fuzzing, among others.
These roles encompass all aspects of product security, including feature development, vulnerability response, proactive security, and open source community participation. Engineers in these roles collaborate closely with other Canonical teams, customers, and partners across the open source ecosystem.
Each product engineering team at Canonical reserves one or two openings for security-oriented software engineers. We also develop a number of products driven entirely by security needs, such as our AppArmor kernel investments and the Ubuntu Security Guide (USG). As the publisher of Ubuntu, we also handle long-term security response for the entire operating system and open source ecosystem. Working with tens of thousands of upstreams means that we need to be fluent in every major programming language and design, build, and adopt sophisticated tools that enable us to work at scale and speed with confidence.
Apply here if you are an exceptional security-focused software engineer, passionate about open source, and excited by Canonical's products and mission.
This role requires the ability to be productive in a globally distributed team through strong self-discipline and motivation. It also involves mandatory international travel at least twice a year, typically for one week.
Location: Worldwide, this is a globally remote role
What you'll do
Security roles might tackle any of the following:
Define, implement, and document new security features
Lead security-focused initiatives within a product engineering team
Analyze, fix, and test vulnerabilities in open source software
Contribute to Ubuntu and upstream open source projects to benefit the community
Audit and analyze source code for vulnerabilities
Integrate new tools into our security infrastructure, pipelines, and processes
Achieve and retain various security certifications
Extend and enhance Linux cryptographic components to meet country-specific compliance requirements, such as FIPS and Common Criteria (CC) certifications
Work with external partners to develop Center for Internet Security (CIS) benchmarks
Design and develop hardening automation for Ubuntu
Stay up to date with trends and developments in the security industry
Develop, test, and maintain new software capabilities
Provide guidance and support to other engineering teams on security best practices
What we are looking for in you
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
A track record of going above and beyond expectations
Thorough understanding of the common categories of security vulnerabilities and how to fix them
Knowledge of modern software engineering techniques
Familiarity with open source development tools and methodologies
Skill in one or more of C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/Typescript
Experience as a security champion
Experience driving security within a wider SSDLC process
Professional written and spoken English
Experience with Linux (Debian or Ubuntu preferred)
Excellent interpersonal skills, curiosity, flexibility, and accountability
Passion, thoughtfulness, and self-motivation
Excellent communication and presentation skills
Results-oriented, with a personal drive to meet commitments
Optional skills we also value
Clear and effective communication with both the team and Ubuntu community members
Experience working with the Linux kernel
Experience with security certifications and knowledge of FIPS and/or Common Criteria (CC)
Experience with OVAL (Open Vulnerability Assessment Language)
Knowledge of cryptographic modules such as OpenSSL and Libgcrypt
Knowledge of low-level Linux cryptography APIs
Demonstrated ability to learn quickly
Performance engineering experience
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
УдалённоseniorCanada; England; Portugal; Spain; Italy; Germany; United States
Зарплата не указана
УдалённоseniorSeattle, WA
Зарплата не указана
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.