Вакансии

Location: Remote This role may require in-person interview/s in Austin, Texas About Osano: Osano is an innovative B-Corporation built around a simple belief: privacy is a fundamental right. Since day one, we’ve been focused on giving modern enterprises the ability to innovate quickly, stay competitive, and earn customer trust by respecting data privacy and complying with consent guidelines. Our products help organizations operate confidently in a rapidly evolving regulatory and technological landscape. About The Role: We're looking for a product-minded Senior Software Engineer to own meaningful parts of the Osano platform end to end, from shaping a problem with Product to running the result in production. This role is for an engineer who treats AI tooling as a real force multiplier. You use coding agents and AI-assisted workflows to explore unfamiliar code faster, ship more and remove repetitive work. You also have the judgment to verify everything that goes out under your name. We want someone whose impact goes beyond what they write by hand, and who helps the engineers around them do the same. You'll work across our React front end, Node.js services, PostgreSQL data stores and AWS infrastructure. You'll partner closely with Product, Design, QA and Security. This is a remote role. You must be based in, and authorized to work in, the United States. What you'll do: Build and ship product, end to end Lead multi-sprint projects from design through rollout: turn a loosely defined problem into a plan, break it into work that you and others can action, and deliver close to estimate. Design systems that hold up, and write design docs and decision records that weigh the alternatives. Partner with Product on scope: propose MVP cuts, phasing and tradeoffs, and measure whether what we shipped actually helped customers. Engineer with AI to multiply your impact Use AI coding agents and assistants across the whole development lifecycle: exploring codebases, scaffolding, writing tests, debugging, refactoring, migrations and code review. Stay accountable for every line you ship. You understand and can explain AI-generated code, and you know where AI shouldn't be trusted. Turn repetitive engineering work into automation: scripts, agent workflows, and checks that save your team time every week. Share what works: help define how our teams use AI tools, and how we review and verify AI-assisted work. Use AI responsibly. Customer and personal data stays out of AI tools except through approved, privacy-safe paths. This is non-negotiable at a privacy company. Own what you ship in production Build observability, feature flags and rollback paths into your work from the start. Take turns on our triage and on-call rotation. Lead incident response for your team's systems, and see postmortem follow-ups through to completion. Identify tech debt, size it, and make the case to get it into the plan. Build with privacy and security by design Apply data minimization, residency, retention and access controls to the systems you design, especially those that handle customer and personal data. Write secure code and fix vulnerabilities in your area as part of normal work. Raise the bar and grow others Give code and design reviews that change outcomes, not just approvals. Mentor engineers earlier in their careers, and make your team better at testing, reviewing and operating software. Interview candidates and help us hire well. About you: Delightful Experience. You care about the customer problem, not just the ticket, and you push for what actually helps. Own Your Impact. You take full responsibility for outcomes, from the first design doc to how the feature behaves in production at 2 a.m. Stronger Together. You put team success ahead of individual wins, give direct and kind feedback, and treat documentation and async communication as first-class work. Growth Mindset. You're curious and keep learning, especially as AI changes how software gets built. You're excited about what it can do without overselling it or ignoring its limits. You're comfortable with ambiguity and create clarity for others through good design and clear writing. Must-haves: Typically 5+ years building and shipping production software. We care more about what you've owned than the number of years. A track record of leading multi-sprint projects from design to production in a team setting. Strong JavaScript/Node.js and React experience, and solid relational database skills (PostgreSQL preferred). Strong system design fundamentals: data modeling, API design, and naming the tradeoffs. Experience owning production systems : on-call, incident response, observability. Hands-on, day-to-day use of AI coding tools such as Claude Code, Cursor or Copilot, with concrete examples of how they made you or your team more effective, and how you verify their output. Experience mentoring other engineers. Strong written communication in a remote, async environment. Nice-to-haves: AWS experience (ECS/Fargate, Lambda, S3, RDS), especially multi-region or data-residency work. Privacy, security or compliance-sensitive B2B SaaS (GDPR, CCPA, SOC 2). Building AI-powered automations, agent workflows or LLM-based product features. Data and analytics tooling (Redshift, Athena) or event-driven architectures. CI/CD, preview/ephemeral environments, end-to-end testing (Cypress). How we work: Fully remote, with at least four hours of overlap each day with your team's core hours. Collaborative and video-on for meetings, and async-first for everything else. Bring people in when they are needed and share what you’re working on with the team. Regular 1:1 checkins with your manager, with a focus on growth conversations. Why Us: We're a welcoming team that's dependable, curious, moves fast, and full of talented people We're a B-corporation with a mission that matters, in a high-growth space with significant potential You'll have access to our training program, well-defined career paths, and a leadership team that values professional development Benefits: Competitive-pay compensation and ownership interest/equity Unlimited paid time off, plus a requirement to take at least two weeks off per year We're a Best Place for Working Parents and offer paid parental leave for all new parents Osano sponsors individual premiums on base plans at 100% and dependent premiums at 50% for Medical, Dental, and Vision insurance via Aetna A fully and permanently remote company, so you can work from anywhere in the U.S. Receive a MacBook and $600 to craft your home workspace Annual company trip designed to foster connection, creativity, and fun Mental health benefits with free memberships to mindfulness and talk therapy services A Bit More About Osano: Osano is a leading data privacy platform that helps organizations quickly and confidently comply with laws like GDPR, CCPA, and other global privacy regulations. From consent management to vendor risk monitoring, Osano makes complex privacy tasks refreshingly simple, so companies can focus on what they do best, while we handle the rest. We’re backed by top-tier investors, including Baird Capital, Jump Capital, and LiveOak, and we’re scaling fast with a multi-year runway and ambitious growth plans. We’ve also been recognized as a Great Place to Work for four years running, with 97% of employees saying Osano is a great place to work. Osano is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, genetic information, disability, veteran status, or any other characteristic protected by applicable law. A Bit More About Osano Osano is a leading data privacy platform that helps organizations quickly and confidently comply with laws like GDPR, CCPA, and other global privacy regulations. From consent management to vendor risk monitoring, Osano makes complex privacy tasks refreshingly simple, so companies can focus on what they do best, while we handle the rest. We’re backed by top-tier investors including Baird Capital, Jump Capital, and LiveOak, and we’re scaling fast with a multi-year runway and ambitious growth plans. We’ve also been recognized as a Great Place to Work for four years running, with 97% of employees saying Osano is a great place to work. As we grow, we're looking for individuals who lean into modern technologies and smarter systems to drive efficiency, clarity, and speed; both in our product and in how we operate. If you're excited by the idea of helping build a high-growth, privacy-first company that embraces thoughtful automation, emerging tech, and intentional collaboration, we’d love to hear from you. Osano is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, genetic information, disability, veteran status, or any other characteristic protected by applicable law.

- Обеспечение информационной безопасности информационных систем, сервисов и цифровой инфраструктуры Университета. - Мониторинг событий информационной безопасности и выявление потенциальных угроз и инцидентов.

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. Role Description As a Real Estate Analyst at Checkout.com, you will provide dedicated administrative, data management, and operational support to the Head of Real Estate, focusing on mitigating risk and increasing efficiency across the global portfolio. This role is essential for managing high-risk operational tasks, such as lease event tracking, lease administration, budgeting and data reporting to ensure a structured approach and prevent critical errors. Key Responsibilities 1. Lease Administration & Governance - Proactively track, monitor, and manage critical dates for all lease events, including renewals and break clauses, acting as the primary conduit for populating and managing the tools that host our Real Estate data. - Support the execution of Real Estate contracts by coordinating with Brokers, Procurement, Legal etc. to finalise signing, updating project budgets, and archiving completed agreements. - Manage operational risk by ensuring all key details related to lease obligations are accurately recorded, tracked and action is taken. - For business case generation, gather comparable evidence, property valuations, and market data to drive strategic negotiations. - Liaise with regional, business and central teams to capture the justification and data necessary for business case approval. - Manage subleasing activities, including monitoring sub-tenant compliance, tracking sublease income and key milestones, and coordinating with legal and property management teams. 2. Financial and Procurement Reporting - Coordinate with Finance, Tax and Procurement teams for Real Estate budgets, including updating and managing the Real Estate OPEX and CAPEX budget tracking tools. - Act as the central point of contact for all property-related budget reporting, preparing quarterly reviews in a clear, digestible format that includes Real Estate and Workplace costs - giving an all inclusive cost per desk / square foot / head. - Assist in reporting refurbishment or new office delivery costs, against business as usual spend for operational office locations. - Support the coordination of financial and legal documentation required for transactions, such as preparing group structure charts and financials for external parties (e.g., landlords). 3. Corporate Social Responsibility (CSR) Data Collation - Lead the coordination and collection of energy, water, and utility consumption data across the global portfolio to support future CSR reporting requirements. - Manage the challenge of obtaining utility data in co-working and serviced spaces where direct meter readings are complex, including liaising with local teams, operators and landlords to gather the necessary information. - Act as the conduit between the CEO Office and ESG/CSR teams to ensure our portfolio meets the needs of Sustainability policies and or regulatory requirements. 4. Departmental Administrative Support - Assist in due diligence and preparation of business cases by researching and reporting on regional office statistics (e.g., desk counts, utilisation, attendance, capacity & commercials). - Act as a key liaison for business case presentation and refinement. - Maintain dynamic headcount forecasts to ensure space planning aligns with evolving business needs, particularly for high-growth regions. - Monitor and document team shift patterns to inform workspace strategy (e.g., HVAC service requirements, after-hours access, and desk rotation models). - Monitor and manage utilisation reports for Serviced Offices, along with onboard and offboard leaves to locations where we do not directly manage access control. - Maintain the central digital repository for all property documentation (leases, contracts, floor plans, and insurance certificates), ensuring strict naming conventions, accessibility, and version control are met to ensure 100% audit-readiness. - Schedule and prepare agendas, collate pre-read materials, and document meeting minutes for key real estate governance forums, proactively tracking action items to ensure timely closure by stakeholders. - Managing the administrative aspects of the "joiner/leaver" process for office access where no assigned Workplace / People person is assigned. - Act as the primary administrator for processing property-related invoices, performing the initial "first-pass" review to flag discrepancies against purchase orders (POs) and ensuring all costs are accurately coded before final submission to Finance. 5. Health, Safety & Physical Security Management - Coordinate the global H&S audit schedule in partnership with SMEs, managing the central audit database, evidence library, action log, and training records to track progress and compliance. - Support the weekly, monthly, quarterly, and annual reporting framework to surface risk trends and audit completion status, allocating audits to regional teams for execution. - Own the scheduling, chasing, and evidence trail for the audit lifecycle, acting as the primary administrative point of contact to ensure smooth execution. - Drive the audit lifecycle by ensuring all actions are identified, triaged, and managed to resolution, proactively identifying blockers and managing overdue items. - Ensure regional teams interpret and apply the central H&S framework in accordance with local laws while maintaining the global baseline standards. - Manage the integration of the H&S framework with wider Real Estate RACI to ensure clear accountability and prevent overlaps in responsibilities. - Implement and maintain physical security policies and standards across all global office locations. - Instruct periodic physical security risk assessments and audits to identify vulnerabilities and ensure compliance with security protocols. - Oversee visitor management processes and physical security measures to safeguard personnel and assets. Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Location: Ebene Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. As a Security Analyst at Checkout.com http://Checkout.com, you are a frontline defender of our global financial ecosystem. Joining our high-velocity 24/7 Security Operations Center (SOC), you won’t just watch dashboards—you will actively hunt, triage, and neutralize threats in real-time. This is a high-impact role where you’ll leverage a world-class security stack to protect millions of transactions and ensure the integrity of our global fintech platform. Key Responsibilities - Proactive monitoring using Azure Sentinel (SIEM) - End to end support for Security incident - Utilise Wiz and Qualtys to identify misconfiguration and vulnerabilities - Stay ahead of the curve by analyzing threat feeds and adapting our defenses against emerging fintech-specific attack vectors - Manage and optimize SentinelOne to ensure total visibility and protection across our organisation - Audit and secure access patterns within Okta and Active Directory, enforcing a Zero Trust philosophy - Support PCI DSS and SOC2 audits by maintaining rigorous evidence collection and control validation. - Analyze traffic patterns in Netskope to detect data exfiltration or anomalous user behavior. - Provide 24/7 security coverage on a rotational shift basis, including weekends and holidays, to ensure continuous monitoring of the environment. - Act as the first point of contact during assigned shifts, escalating high-priority incidents promptly. Skills & Experience Required - Experience: 2+ years in a Security Analyst or similar role, preferably within a tech or fintech environment. - Technical Skills: Hands-on experience with SIEM tools (e.g., Azure Sentinel), endpoint protection platforms, and vulnerability scanners. - Cloud Knowledge: Familiarity with cloud platforms like AWS, including basic understanding of cloud security best practices. - Networking: Basic understanding of network security concepts, including firewall configurations and IDS/IPS monitoring. - Compliance Knowledge: Awareness of PCI DSS and its relevance to security operations. - Incident Response: Understanding of incident response processes, including containment, eradication, and recovery. - Certifications: Relevant certifications such as CompTIA Security+, CEH, or GIAC are a plus. Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Location: Remote - US About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $136M ARR and is the leading specialized storage cloud, managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We’re seeking a Principal SRE to join our team! About the Role We are seeking a Principal Site Reliability Engineer (SRE) to help ensure the stability, scalability, and reliability of our production systems. The ideal candidate will have extensive experience collaborating in cross functional teams to manage the design, implementation and ongoing management of the Backblaze core infrastructure. You will be approved to demonstrate strong observability skills, process and service improvement and ability to leverage AI and automation to assist to mitigate issues faster and meet customer demand.. As a technical leader in Backblaze you will be expected to work across the organisation to achieve our goals. This will include working with our executives and customers. The role will focus long term strategic focus on platform stability. Key Responsibilities Service Reliability & Operations Own the availability and durability of critical services across production environments and accountability for outcomes. Ability to work independently, take ownership, and drive projects from problem discovery through resolution. Assist and advise on the design of service health metrics using SLIs, SLOs, and error budgets, and escalate issues when thresholds are at risk; partner with service owners to define/iterate SLIs/SLOs and establish error budget policies and alerting. Participate in leadership on-call rotations, incident response, and post-incident reviews to drive service improvements. Follow established ITIL/OSS processes (incident, change, problem, and capacity management). Architect and Design Design automation for common operational tasks, reducing manual intervention and toil. Collaborate with engineering on overall storage design, performance expectation against product SLAs. Define the monitoring, logging, and alerting frameworks (e.g., Prometheus, Grafana, Catchpoint, ELK), and help integrate runbooks with FireHydrant. Work with CI/CD pipelines, configuration management, and infrastructure as code tools (Terraform, Ansible, Jenkins). Write scripts (Bash, Python, Go, etc.) to improve system reliability and efficiency. Collaboration Partner with engineering, customer success, product, and operations teams to support resilient system design and operations. Work with customers to ensure stability prioritization is based around their needs and experiences in using Backblaze products. Work with vendors and service providers to troubleshoot service issues and track SLA performance. Document systems, share learnings, and help grow a reliability-minded engineering culture. Continuous Improvement Lead cross functional teams to identify gaps in observability, operations process and define overall prioritization strategy. Identify recurring issues and propose long-term improvements, and design action plans around implementing those improvements. Promote reliability-focused practices within development and operations teams. Qualifications Education & Experience Bachelor’s degree in Computer Science, Engineering, or related field (or equivalent experience). 10+ years of experience in site reliability, systems engineering, or operations, experience with hyperscalers preferred. Exposure to large-scale, production-grade systems, including experience establishing operational procedures or runbooks and bringing others up to speed on them. Technical Skills Solid Linux systems administration and troubleshooting skills. Proven ability to leverage AI tools to improve platform stability and scalability. Knowledge of storage systems, performance, sharding and storage algorithms. Experience in load balancing services including IPVS. Security-minded operations (patching, hardening, identifying vulnerabilities). Familiarity with service reliability concepts — monitoring, alerting, incident response, and root cause analysis. Proficiency in at least one scripting language (Python, Bash, or Go). Experience working with containers (Kubernetes, Docker) and microservices concepts required; comfortable operating in a Kubernetes/Vitess-on-K8s environment (kubectl, mysqlsh, Vitess keyspaces). Experience with Hashicorp products (Nomad, Vault, Terraform). Preferred Attributes Experience in a SaaS, service provider, or distributed systems environment. Familiarity with ITIL/OSS practices and SLO/SLA’s. Strong problem-solving skills and willingness to learn new technologies. Experience with cloud platforms (AWS, GCP, or Azure). Backblaze Perks Healthcare for family, including dental and vision Competitive compensation and 401K RSU grants for full-time employees ESPP program Flexible vacation policy Maternity & paternity leave MacBook Pro to use for work, plus a generous stipend to personalize your workstation Childcare bonus (human children only) Fertility treatment and support Learning & development program Commuter benefits Culture that supports a healthy work-life balance Pay Transparency To provide greater transparency to candidates, we share pay ranges for all US-based job postings regardless of state. Final offer amounts are determined by multiple factors including candidate location, skills, depth of work experience, and relevant licenses/credentials. The pay range for this position is $215,000 to $250,000 per year. At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

Location: Remote - Colombia ; Remote - Costa Rica ; Remote - Mexico About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $136M ARR and is the leading specialized storage cloud, managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We’re seeking a Red Team Security Engineer to join our team! About the Role The Red Team Security Engineer continuously validates whether vulnerabilities, configurations, identities, applications, infrastructure, and AI-enabled systems can be exploited by realistic adversaries. The role combines traditional offensive security with AI-assisted and agentic adversary emulation to validate exposure and continuously improve defensive controls. Key Responsibilities Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents. Validate whether vulnerabilities and configuration weaknesses identified are reachable and practically exploitable. Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and other enterprise services. Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing. Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and other emerging attack classes. Validate compensating controls and mitigations before or after deployment. Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness. Translate offensive findings into actionable improvements to architecture, configuration, detections, and response capabilities. Qualifications Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering. Strong web, API, cloud, identity, operating-system, and network security fundamentals. Experience validating practical exploitability and developing realistic attack paths. Strong understanding of MITRE ATT&CK and modern adversary techniques. Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS. Scripting or software-development experience. Experience safely using automation or AI-assisted techniques in offensive-security workflows. Experience assessing cloud-native or AI-enabled systems, conducting purple-team exercises, or simulating autonomous adversaries is preferred. At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here. At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

Location: Lisbon, Portugal; Madrid, Spain; Prague, Czechia CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: cloudlinux.com We are currently hiring a Staff Security Engineer within the Imunify360 product. Imunify360 is CloudLinux's security suite for Linux web servers. It protects hundreds of thousands of hosting servers and the websites running on them, so it sees most large-scale web attacks early — often in the first hours. Check out our website for more information: https://imunify360.com/ Role Mission & Scope At Imunify360, protecting customers from evolving cyber threats requires close collaboration between security research, engineering, and other teams. Responding to complex attack campaigns involves more than identifying threats — it requires understanding attack techniques, developing effective detection and mitigation strategies, and ensuring customers are protected. As a Staff Security Engineer , you'll take end-to-end technical ownership of complex security challenges, from initial threat discovery and analysis to detection, mitigation, and post-incident review. This is a hands-on technical leadership role focused on practical security engineering rather than SOC monitoring, compliance, or purely theoretical research. You'll analyze malware and exploit code, develop detection and mitigation tools, anticipate emerging attack techniques, and ensure security findings translate into production-ready detections, mitigations, and fixes. You'll work closely with engineering, security research, support, external partners, and the broader security community to coordinate responses and drive continuous improvements in our security capabilities. As an individual contributor , you won't have direct reports or people management responsibilities. All security research and testing are conducted within authorized boundaries, with clearly defined scope and responsible disclosure practices. Your mission is to strengthen Imunify360's ability to detect, prevent, and respond to emerging threats, delivering measurable security improvements that protect customers at scale. What you will own Malware and campaign mitigation Lead response to large-scale exploitation and malware campaigns: triage, root cause, and mitigation across every protection layer of the product. Reverse-engineer malware and exploits targeting Linux servers and web applications. Track campaigns over time, not just individual samples: cluster indicators, connect activity to known actors and toolkits, anticipate the next variant. Define and run measurable outcomes per campaign: time to detect, time to protect, cleanup effectiveness, reinfection rate. Security response coordination Own the security incident and response process, both for threats against our customers and for vulnerabilities in our own product: severity model, runbooks, communication, escalation. Coordinate with external parties — software vendors, partners, CERTs/CSIRTs, abuse desks, other security vendors. Drive responsible disclosure where we find vulnerabilities. Be the technical voice in security advisories and partner briefings, together with Product and Support. Triage external vulnerability reports. Offensive security on our own product Red-team our product and infrastructure. Assume a capable attacker who already has a foothold. Threat-model new features before they ship; own the security review gate for high-risk changes. Turn findings into fixes with the owning teams, not just reports. Detection engineering and tooling Raise the quality bar of detections: false-positive budgets, test corpora, staged rollout with measurement gates and fast rollback. Build and automate the analysis pipeline: dynamic analysis, honeypots, telemetry-driven hunting, ML-assisted triage where it measurably helps. Write production code for these tools; expect 30–50% of your time to be hands-on building. Turn telemetry into intelligence: emerging exploits, attacker infrastructure, trends — shared as internal briefs and selected public research. People multiplier (no direct reports) Mentor analysts and engineers; raise the security skill level across teams. Bar-raiser in security hiring loops. Key Milestones 30 days: Analyzed real threats end-to-end. Mapped the current response flow and where it breaks. Shipped at least one detection or mitigation to production. 90 days: Security response process and severity model published and agreed. Led at least one real campaign response with a written post-mortem. Baseline response metrics in place. 6 months: Time from first sighting to protection measurably reduced vs. baseline. First red-team review completed, top findings fixed. Working relationships with key external partners. 12 months: Recognized internally and externally as the owner of security response. Public research or disclosures published. Teams can run a standard campaign response without you. Requirements Must have 10+ years in security engineering, malware research, incident response, or offensive security, with several years leading cross-team work at Staff/Principal/Lead scope. Deep hands-on malware analysis and reverse engineering skills. Strong web application security and practical exploitation experience. Deep Linux knowledge from both the attacker's and the defender's side. Proven incident response leadership on large-scale events: you have run the response, written the advisory, and closed the post-mortem. Production coding in Python plus a systems language (Go, Rust or C). Experience with coordinated vulnerability disclosure and working with the security community. Clear, short writing for both engineers and non-technical stakeholders; works well async across time zones. Daily user of AI tools for analysis and coding, with critical judgment about their output. Nice to have Background in hosting or large web ecosystems. Detection authoring at scale (signatures, WAF/IDS rules). Kernel-level monitoring and rootkit detection. Threat intelligence practice and actor tracking. ML for malware classification. Public track record: CVEs, published research, talks, CTFs, open-source security tools. Relevant certifications are a plus, not a requirement. Benefits What's in it for you? Stay hands-on technically while owning complex, high-impact engineering work. Work on challenging Linux, automation, and cybersecurity problems across mature and newer products. Influence technical direction and make meaningful architectural decisions. Work independently with a high level of ownership and autonomy. Fully remote work with flexible working hours. 24 paid vacation days, 10 national holidays, and unlimited sick leave. Private medical insurance compensation. Co-working and gym/sports reimbursement. Education budget. Opportunity to receive a reward for innovative ideas that the company can patent. By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.

Location: San Francisco, CA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As an Integrity and Authenticity Policy Manager, you will be responsible for developing, refining, and maintaining policies that prevent the misuse of AI systems for deception, manipulation, and unauthorized monitoring at scale. You will serve as the policy owner for risks related to inauthentic behavior, influence activity, surveillance, and the profiling of individuals and groups, and you will help shape policy frameworks across several areas, including authenticity, information integrity, and privacy and surveillance. Your initial focus will be on translating the Integrity and Authenticity risk framework into clear, enforceable policies, ensuring policy language addresses emerging threats identified by partner teams, and establishing guidelines that enable consistent enforcement decisions. Many of the most serious harms in this space begin with upstream steps that look routine on their own, such as compiling records about a person, automating account creation, or sorting users by inferred identity. Part of your work will be defining where those steps become prohibited. The role will expand as AI capabilities advance. Safety is core to our mission. You will help ensure our products cannot be used to deceive people at scale, monitor and profile people without their knowledge or consent, or sort and target populations based on sensitive characteristics. Important context for this role: In this position you may be exposed to and engage with explicit content spanning a range of topics, including those of a sexual, violent, or psychologically disturbing nature, as well as detailed descriptions of privacy violations, surveillance abuses, and deceptive campaigns targeting vulnerable people. Key responsibilities Develop and define policy boundaries for covert monitoring, tracking, and surveillance across different contexts, drawing the distinction between malicious behaviors and compliant dual-use scenarios Write policy guidance on facial recognition, voice cloning, and geolocation inference, specifying which uses require consent and which are prohibited outright Map the surveillance lifecycle, from target selection and data collection through analysis and covert deployment, and define the policy line at each stage so that interventions can occur early in the chain Design and oversee evaluations that measure the model's capability to support social media monitoring, people-finding, predictive profiling, and the identification or tracking of specific people, to build, develop and improve safeguards with cross-functional partners to prevent malicious behaviors Write and refine external-facing Usage Policy language and develop training guidelines, assessment rubrics, and evaluation protocols for enforcement teams, with emphasis on indicators of covert monitoring and population-level targeting Validate enforcement decisions and automated assessments, provide policy guidance on complex edge cases such as investigative research into surveillance tools, coordinate with civil society, privacy experts, threat intelligence researchers, and academics, and serve as the escalation point for complex integrity and surveillance cases Minimum qualifications Working knowledge of how deceptive campaigns and covert monitoring operate in practice, including account networks, bot operations, data aggregation pipelines, and attribution methods Familiarity with surveillance technologies and their misuse, including social media monitoring tools, people-search services, location tracking, spyware, facial recognition, and open-source intelligence techniques used against individuals General knowledge of the global regulatory landscape around data protection, privacy, platform regulation, and digital services accountability Strong policy writing skills, with the ability to translate complex threat frameworks into clear, enforceable guidelines Experience designing policies and workflows that enable both clear human enforcement decision-making and technical implementation in ML classifiers and detection pipelines Strong collaboration skills and extensive experience partnering with Engineering, Data Science, Legal, Threat Intelligence, and Policy teams on cross-functional initiatives Excellent written and verbal communication skills, with the ability to explain deceptive tactics, surveillance methods, and policy rationales to diverse audiences, including non-specialists and policymakers Preferred qualifications 5+ years of experience in policy development, trust and safety, threat intelligence, or platform integrity, with hands-on work on inauthentic behavior, surveillance-related abuse, or data misuse Experience in privacy policy, privacy engineering, or data protection work, including familiarity with privacy impact assessments and data minimization principles Experience in intelligence roles, state-aligned monitoring operations, or covert data collection campaigns Experience investigating inauthentic networks, covert monitoring, or surveillance abuses at a platform, research organization, or government body Background in digital forensics, open-source intelligence, or threat attribution Knowledge of persuasion theory, cognitive biases, and deceptive communication techniques, including social engineering and pretexting methods Familiarity with human rights and privacy frameworks as they apply to surveillance, including protections for journalists, activists, and marginalized communities Experience with trust and safety operations involving content moderation evasion, bot detection, or platform scraping enforcement Experience working with EU institutions, regulatory bodies, or policy organizations on AI governance or digital platform regulation Experience conducting adversarial testing, red teaming, or vulnerability assessments for AI systems or platforms, particularly for misuse involving monitoring or profiling Familiarity with generative AI capabilities and an understanding of how LLMs can be used for synthetic personas, social engineering, predictive profiling, or surveillance at scale The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $245,000 — $285,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Poland; Brazil; Peru; Sweden; Argentina; Romania; Cyprus; Czech Republic; Hungary; Mexico; Chile; Bulgaria Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM xStocks brings real-world assets on-chain as tokenized securities that are regulated, fully-backed, and tradable across multiple blockchains. Built within Payward, the xStocks team runs the infrastructure that issues, custodies, and settles these instruments across EVM, Solana, TON, Tron, and more. The platform moves real value, so security is not a feature bolted on at the end. It is a property of everything the team ships. This is a hybrid engineering and security seat built for someone who is genuinely both: you ship products alongside the engineering team when the security queue is quiet, and you own security work end to end when it lands. You report into engineering and partner closely with the Payward security, CISO, and compliance functions. THE OPPORTUNITY - Own security deliverables end to end. Coordinate and review smart-contract audits, respond to security questionnaires and due-diligence requests, support CISO and compliance initiatives, and turn findings into tracked, closed-out fixes. - Run offensive assessments against our own platforms. Pentest the web apps, APIs, backend services, and on-chain components, and build the tooling to do it repeatedly rather than once. - Continuously assess posture. Threat-model new and existing systems, review architecture and key-management flows, and maintain a living view of the risks and their mitigations. - Review code for security. Be a default reviewer on changes touching auth, cryptography, custody, signing, and fund movement across our chains. - Harden the platform. Improve secrets handling, IAM and least-privilege, dependency and supply-chain hygiene, and detection and logging for security-relevant events. - Secure custody and signing workflows. Review and harden transaction signing flows, MPC and HSM integrations, signer permissions, admin roles, approval policies, and break-glass procedures. - Contribute to product engineering. Pick up regular backlog work in TypeScript so you stay close to the codebase you are defending. - Support incidents. Help with detection, triage, response, and post-mortems, and feed the lessons back into the program. WHAT YOU BRING - An engineer first. You write and review production code comfortably, TypeScript and Node.js in our stack, and you understand systems deeply enough to break them. - Strong application and infrastructure security fundamentals. The OWASP-class vulnerability landscape, authn and authz, injection, SSRF, supply-chain risk, and secure design. You have done real offensive work in pentesting, vuln research, or red-team. - Applied cryptography and blockchain security. Symmetric and asymmetric primitives, hashing, signatures, and key management, plus the security model of EVM, Solana, and ideally TON or Tron. You can read a smart contract and reason about how it fails. - Ownership. You can take an ambiguous security item, an audit, a questionnaire, or an incident, and drive it to closure without being managed through it. - Clear communication. You can explain a risk to engineers, to a CISO, and to an auditor, and tailor the message to each. - An automation instinct. You do not want to catch the same issue manually twice, so you turn findings into tests, alerts, controls, documentation, or platform improvements. - Risk judgment. You can tell a theoretical issue from a material one, and communicate severity, likelihood, impact, and remediation tradeoffs clearly. NICE TO HAVE - Experience commissioning or remediating third-party smart-contract audits. - Familiarity with custody and signing infrastructure such as HSMs, MPC, and ForDefi-style providers, and with on-chain transaction security. - Cloud security depth in GCP or AWS, IAM, and container and runtime hardening. - Detection engineering and security observability, including SIEM and log-based detections. - Relevant certifications such as OSCP, OSWE, or GWAPT. - Prior work in a regulated fintech or tokenization/DeFi environment. Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: EMEA - Remote Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role. Money is moving onto the internet, and the shift has a name: Open Money. This is money that is open, portable, agentic, and owned by you. MetaMask spent the last ten years building it; with 100M+ downloads, users in ~190 countries, and trillions in cumulative transaction volume, it's the most trusted self-custodial financial platform on the internet. Now we're building the operating system for your money: one place to hold, move, grow, and use anything you own.  Join a remote-first, global team rebuilding how money works: a problem that touches everyone, every day. About the role MetaMask is a self-custody wallet that does not hold users’ private keys. Blockchain transactions are generally irreversible, meaning a vulnerability in the product or its software delivery chain can lead directly to financial losses for users. As a result, MetaMask attracts sustained attention from financially motivated attackers and sophisticated supply chain actors. We are looking for a Senior Manager, Application Security to lead application security across the MetaMask extension, mobile app, Snaps, backend services, DeFi primitives, stablecoins, and supporting smart contracts. The role covers architecture, code, dependencies, build and release controls, security testing, and vulnerability disclosure. This is a hands-on leadership role. You will set the strategy and operating model, lead a small senior team, and remain directly involved in code review and threat modelling. You will report to the Head of Security and work closely with MetaMask Engineering leadership to ensure security risks are understood, owned, and addressed. Responsibilities Leadership and planning Lead and develop the Application Security team, including hiring, performance management and career development, while remaining directly involved in technical work. Set the Application Security strategy, annual goals and quarterly OKRs in line with company objectives and the approved Target Operating Model. Define and track KPIs to measure performance and progress. Report AppSec progress, coverage, remediation performance and material gaps to Security leadership and contribute to Risk Committee reporting. Secure design and delivery Define security review requirements across development and release, assess whether they are met and escalate unresolved risks. Lead threat modelling and security design reviews across clients, APIs and backend services, including authentication, key management, signing and delegated actions. Assess trust boundaries across the full system and participate in architecture and RFC reviews. Define software supply chain security requirements and work with engineering teams to implement and validate controls for dependencies, builds, artefacts and publishing. Lead security code reviews across MetaMask applications and smart contracts, working with engineers and relevant specialists to address findings. Define and evolve the secure development lifecycle to incorporate AI agents, including their access, actions and human review requirements. Set security standards for AI development tools, generated code and AI components in products. Integrate security testing into development and delivery workflows, including static and dynamic analysis, dependency scanning, secrets detection and AI scanning. Evaluate tools and validate their findings. Help engineers prevent recurring vulnerabilities through secure coding guidance, reusable libraries, training and the security champions programme. Vulnerability management and external testing Own application vulnerability assessment, triage, prioritisation and remediation tracking within the organisation’s vulnerability management framework. Correlate findings across clients, services and supporting infrastructure with the relevant owners to assess combined impact. Ensure findings have clear owners and deadlines, verify fixes and escalate overdue risks. Set the scope and proposed investment for bug bounty, penetration testing and AI security scanning based on risk and results. Manage external providers, researcher relationships, rewards and payouts, and coordinate vulnerability disclosure. Assurance and incident support Provide evidence of application security controls for audits and assurance reviews, and support customer and partner due diligence. Provide application security expertise during incidents, including vulnerability analysis and remediation support. Qualifications Required : At least eight years in application security or software engineering with a security focus, including two years leading people. Strong practical code review skills in TypeScript/JavaScript, Go or Solidity across browser extensions, mobile applications and backend services, with the ability to identify vulnerabilities and work with engineers to fix them. Proven experience securing applications across clients and backend services, including distributed authentication, authorisation and key management. Experience building or substantially improving an AppSec programme, including security reviews, automated testing, AI scanning, vulnerability management and developer support, with sound judgement on where AI adds value and how to validate its findings. Practical experience securing software supply chains, including dependency policies, software composition analysis, npm, artefact integrity and CI/CD. Experience running bug bounty and penetration testing programmes, including selecting and managing external providers. Working knowledge of EVM smart contract security, including common vulnerabilities, review methods, upgrade and admin controls, and assessing external audits. A record of delivering security improvements through engineering teams outside your reporting line. Clear written communication, from actionable threat models to concise summaries of risk for executives. Preferred : Offensive security qualifications such as OSCP, OSWE or OSWA, or a proven record in bug bounty programmes or CTF competitions. Experience securing browser extensions or mobile applications. Experience securing development workflows that use AI, or AI components in production applications. Experience in crypto, Web3 or another sector facing sustained attacks, such as fintech, payments or infrastructure. Knowledge of or a strong interest in applied cryptography. Familiarity with attacks by state actors against software companies, particularly DPRK supply chain and social engineering campaigns. Experience providing evidence of secure development controls for SOC 2 or ISO 27001 assessments. Don't meet all the requirements? Don't sweat it. We’re passionate about building a diverse team of humans and as such, if you think you've got what it takes for our chaotic-but-fun, remote-friendly, start-up environment—apply anyway, detailing your relevant transferable skills in your cover letter. While we have a pretty good idea of what we need, we're ready for you to challenge our thinking on who needs to be in this role. In the rapidly evolving Web3 space, we believe that everyone is a builder. This expansive paradigm requires a range of backgrounds, talents, skills, and experiences to influence and shape the future. At MetaMask, this diversity fuels our ability to shift control and redefine the realm of possibility. We are committed to ensuring that our technology empowers people and communities through decentralized technologies. We welcome the range of perspectives and differences and celebrate them. We're excited to see how your unique skills as a builder can contribute to our vision, drive innovation, and help us shape a more inclusive Web3. MetaMask is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law. MetaMask is aware of fraudulent recruitment practices and we encourage all applicants to review our best practices to protect yourself, which can be found on our page. MetaMask may use artificial intelligence (AI) tools to support parts of our recruitment process, such as reviewing applications, screening resumes, or conducting initial candidate assessments. These tools are designed to assist our recruiting team and improve efficiency — they do not replace human judgment. A human recruiter or hiring manager reviews every candidate, and all final hiring decisions are made by people, not AI. It is a requirement of employment in this position that applicants may be required to submit to background and identity verification checks, including but not limited to employment, education, criminal record checks, and other such checks as determined necessary by the company.

Location: San Francisco, CA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic’s Applied AI team helps the world’s largest organizations put Claude to work. As a Cybersecurity Specialist on Applied AI, you’ll be part of an overlay team of domain experts who sit alongside our enterprise account teams and bring deep security expertise to the accounts where it matters most. You won’t own an account. You’ll be the security expert the account team pulls in to win and grow the most important security conversations: helping CISOs and security leaders see where Claude can take on real security work, then guiding them from early pilots to durable, production workloads. You’ll cover a portfolio of enterprise accounts across regulated industries like financial services, insurance, and healthcare, strategic accounts like semiconductors (IP protection, industrial control systems, export controls), and digital natives and public sector agencies, each with its own threat model. How this team works You partner with account executives, account architects, and generalist Applied AI engineers, who own the customer relationship and the broader technical engagement. You bring the security depth they don’t have time to build. You work across many accounts at once, so the playbooks, reference implementations, and evaluation approaches you build are reused across the field, not just for one customer. You are the connection point between the field and Anthropic’s Product, Research, and Engineering teams, turning what you see in customer security programs into product feedback. You work alongside ISVs, systems integrators, and managed security providers who already serve these customers, enabling them where they own the engagement rather than competing with them. Responsibilities Join account teams to understand a customer’s security program, identify where Claude can do meaningful security work, and turn that into a technical plan and business case Serve as the security-domain technical advisor on strategic enterprise accounts, from discovery through deployment Move customers from one-time code scanning to sustained security workloads: application security in the SDLC, continuous automated penetration testing, alert triage and investigation, and threat intelligence that answers “does this new vulnerability affect us, and where” Build and maintain reference implementations, harnesses, and evaluation approaches, and help customers adapt them to their own environments and controls Run workshops and hands-on sessions where customer security teams use Claude on their own code and workflows Equip partners to deliver Claude-powered security outcomes, with a clear line between what Anthropic delivers and what partners deliver Speak credibly to every audience, from appsec engineers to CISOs and executives, including how to explain the value and risk of security work in business terms Define and track adoption depth for each security workload across your accounts, and work with Product and Engineering on the telemetry to measure it Write the playbooks and best practices the rest of the field can reuse, including how Claude complements the security tooling customers already own Develop reference customers who can speak to the value they’re realizing Stay current on frontier LLM capabilities and the new classes of vulnerabilities and attacks they surface Travel occasionally to customer sites for workshops and technical deep dives You may be a good fit if you have 5+ years in security roles, with hands-on depth in at least two of: application security and secure SDLC, offensive security and penetration testing, detection and response, or threat intelligence and vulnerability management Experience in a technical customer-facing role (Solutions Architect, Sales Engineer, security consultant, TAM), or on a security team where you had to win investment from leadership Experience with large enterprise customers and complex, multi-stakeholder buying cycles, including working alongside the vendors and partners already in the account The ability to translate between security teams, engineering teams, and executives Comfort with Python, CI/CD, and cloud environments, plus hands-on experience using LLMs for security work such as code review, vulnerability discovery, triage, or investigation A love of teaching and a collaborative approach to working across teams and balancing competing priorities The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $300,000 — $400,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA • New York, NY • United States Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As a Compliance Engineer at Figma, you will play a critical role in designing, implementing, and testing security controls across multiple compliance frameworks, including FedRAMP, SOC 2, ISO 27001, and NIST. You will collaborate closely with security, infrastructure, and product engineering teams to translate regulatory requirements into effective technical controls, evaluate control effectiveness, and identify opportunities to improve security and compliance processes. You will also help advance Figma’s compliance engineering capabilities by leveraging automation, machine-readable control definitions (JSON), APIs, and AI-assisted development tools to streamline control testing, evidence collection, and continuous monitoring. This role combines deep security compliance expertise with technical problem-solving to build scalable, repeatable, and effective compliance practices. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you’ll do at Figma: Develop and verify technical security controls that satisfy multiple compliance frameworks Collaborate with security, infrastructure, and product engineering teams to translate compliance requirements into effective technical controls Design and execute control testing procedures to assess control performance, surface gaps, and verify that remediation is complete Establish repeatable control assessments and continuous monitoring processes to evaluate compliance effectiveness Translate security requirements into structured, machine-readable JSON definitions to support control management, testing, and automation Build and maintain API integrations and automated workflows to streamline evidence collection, control validation, and compliance processes Identify opportunities to improve control effectiveness, reduce manual effort, and scale compliance operations across multiple frameworks We’d love to hear from you if you have: 5+ years of hands-on experience in security compliance, security assurance, IT audit, or compliance engineering Experience with security compliance frameworks, including FedRAMP, SOC 2, ISO 27001, and NIST 800-53, designing, implementing, and testing technical security controls in SaaS or cloud environments Experience testing security controls for design and operating performance, including surfacing gaps and confirming fixes Understanding of cloud security concepts, including identity and access management, vulnerability management, logging, and security configurations Experience working with engineering teams to implement compliance requirements as technical solutions Experience with JSON, REST APIs, and automation, applied to compliance engineering challenges While it’s not required, it’s an added plus if you also have: Experience developing JSON-based control definitions, JSON Schema, or machine-readable compliance documentation, and REST API integrations and custom automation workflows Familiarity with Open Security Controls Assessment Language (OSCAL) Proficiency in Python or similar scripting languages for compliance automation, including experience with compliance automation platforms and automated evidence collection Experience using Git, version control, and collaborative development workflows Hands-on experience with cloud security technologies, particularly AWS At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. Pay Transparency Disclosure Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law. Annual Base Salary Range: $169,000 — $296,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: Japan - Office - Tokyo Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: Tenable has an immediate need for a Customer Success Manager who will be responsible for establishing and driving sales activities for our software products within a designated geography. Companies today are grappling with an ever expanding IT landscape encompassing traditional IT devices and modern assets such as IoT, DevOps and operational technology. In this era, it is more important than ever before for companies to have visibility of their attack surface and the vulnerabilities therein.  Tenable’s vision is to help our customers develop this visibility and manage their Cyber Exposure; significantly improving their IT security. Your role with involve working with designated existing customers as well as partners in your specified market place. Your Opportunity: Responsible for consultatively working with customers to define improvements in their IT security roadmap. Responsible for growing revenue via prospecting, qualifying, selling and closing from existing enterprise client accounts Responsible for Quarterly & Annual Revenue Targets Manage client relationship through all phases of the sales cycle Provide a consultative solutions sales process to prospects specifically to enhance customer’s security practices as it pertains to IT vulnerability management. Conducts one-on-one and group sales presentations Provide account management to an existing territory Responsible for tracking customer information, forecasts and reports Develop and maintain prospect and customer list based on strategic marketing data and other sources for sales leads Plan & Strategize marketing activities with the Marketing and Channel teams for the end users and channels What You'll Need: Must have experience selling On-Demand, SaaS (Software as a Service) solution or subscription based product to a diverse customer base BA/BS degree and 3+ years of sales experience focused on growing existing business or new business Large account management or project management experience Proven track record for closing large and mid size companies Ability to adapt, overcome objections, and learn complex solutions Strong time management skills Create new business opportunities through in-depth conversations and relationship building Proven track record of growing business from an established client base. Strong time management skills. Consistent and documented track record for achieving monthly/quarterly/annual target metrics Strong oral and written communication skills are a must Ability to work in a fast paced, team environment with revenue deadlines Working knowledge of computer applications such as Microsoft Office and Salesforce.com Ability to travel up to 40%, including critical customer meetings and business meetings. And Ideally: Network Security background #LI-Hybrid #LI-KM1 We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: North America Workplace: Remote At Linear, we're building the product development system for teams and agents. AI is fundamentally changing how software gets built, and we’re shaping the tools this new era requires. Founded in 2019, Linear has become the platform of choice for more than 30,000 companies (including OpenAI, Coinbase, and Ramp) to plan, build, and ship their products. Today, our team is distributed across North America, Europe, and Australia, and we’re continuing to grow internationally. What unites us is relentless focus, fast execution, and a deep care for software craftsmanship. At Linear, we are committed to quality. Security is an essential part of that quality — not a layer that we add later, but something we build in from the start. We have a foundational security program we're proud of but, as Linear evolves our product and scales into enterprise, there's meaningful work ahead: staying ahead of vulnerabilities as our attack surface grows, responding fast and cleanly when incidents happen, and hardening our product and infrastructure. As Security Engineer at Linear, you'll be operating in a high-autonomy role with real scope, doing hands-on security work across the product and infrastructure we build. Location & work mode Linear is a remote-first company. This role is open to candidates based in North America. You can work from anywhere within this region. We value deep focus and async collaboration, with intentional moments to connect in person through team off-sites, optional co-working, and occasional travel. What you’ll do Depending on your experience / skillset and our broader priorities, you could: - Operate, automate, and extend vulnerability management end-to-end: triage, prioritize, and drive remediation across product, infrastructure, and dependencies, and keep the program’s SLAs meaningful rather than theoretical - Run our bug bounty program: triage incoming reports, validate severity, work with engineering on fixes, and keep researcher relationships professional and responsive - Lead product security testing: threat model new features (including AI/agent-facing surfaces), review designs and code for security-relevant risk, and do hands-on testing (manual and tool-assisted) rather than relying solely on scanners - Be a primary responder for security incidents: lead investigation and containment, drive postmortems, and turn lessons into concrete hardening work - Own meaningful chunks of our cloud/infra security posture on GCP/k8s/Postgres: harden configurations, close gaps surfaced by audits or scanning, and partner with infra engineering on secure defaults - Build and maintain security tooling and automation, including using AI/LLM tooling to speed up triage, code review, and repetitive investigation work, so the program scales without linear headcount growth - Partner with the GRC/Trust function: feed real findings into the risk register and control evidence, and help make sure compliance requirements reflect actual engineering practice What we’re looking for - A generalist, senior-level security engineer (5+ years across security engineering, with real depth in at least two of: vulnerability management, product/appsec testing, incident response, and cloud security). We need breadth, rather than a narrow specialist in any one of these. - Hands-on and technical: you can read and reason about code (we use a lot of TypeScript), you’re comfortable in cloud environments (GCP a plus), and you can go deep on a finding rather than just filing a ticket for someone else to fix. You’re comfortable using AI coding/security tools as force multipliers (Linear Agent, Claude, Codex, etc). - Calm under pressure: you can lead an incident from first alert through postmortem without needing to be told what to do next - A builder: you’d rather write a script or ship a tool than repeat a manual process a third time - A pragmatic risk-reducer: you optimize for actually reducing risk, not for checking a box or maximizing findings count - Autonomy-oriented: comfortable setting your own priorities, working with significant independence, and knowing when to escalate - A clear communicator: able to explain a technical finding to a non-technical stakeholder and write it up so it’s actually actionable Our tech This is a hands-on security engineering role. You'll be running tools, reading/writing code, building detections, working in our cloud environment, and partnering closely with the engineers who build our product. Our stack is fronted by Cloudflare and runs on Google Cloud with k8s, Postgres, and Node. For day-to-day work, we use: - Linear, GitHub, Slack, and Google Workspace for collaboration - Claude and ChatGPT for general & engineering-specific AI tasks - Vanta for compliance automation and evidence collection Our security-specific tooling includes: - GitHub Advanced Security - RunReveal - SentinelOne What we offer We're a small, focused team that cares deeply about the quality of our work and the people we do it with. Here's what you can expect: - Competitive salary and equity - Employee-friendly equity terms including early exercise in the US and extended exercise windows - Daily meal and coffee stipend on every workday - Paid co-working space or desk - Health coverage (based on country requirements) - 5 weeks paid vacation, plus local statutory holidays - 4 months paid parental leave - Paid month off after 4 years & every 2 years thereafter - Regular team events and off-sites - Remote-first with no required commute Learn how we think and work - Read Me https://linear.app/readme a story about our mission - Our hiring process: How we hire at Linear https://linear.app/now/how-we-hire-at-linear - How we work: Designing remote work at Linear https://linear.app/now/designing-remote-work-at-linear - Why and how we do work trials https://linear.app/blog/why-and-how-we-do-work-trials-at-linear Linear blog post - How we use AI in design https://designerfund.substack.com/p/ai-design-linear feature of Linear's design team - Scaling our real-time sync engine https://linear.app/blog/scaling-the-linear-sync-engine talk by our cofounder, Tuomas Artman, at Linear's 2023 offsite - Our recent tender offer: Sharing Linear’s growth with the people building it https://linear.app/now/sharing-growth-with-the-people-building-linear Linear is an equal opportunity employer. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.

Anthropic is looking for a Cybersecurity Sales Specialist to build security pipeline and close enterprise security business.

Location: Bulgaria Company Background Our client is a travel technology company developing cloud-native, AI-powered software for airlines and hospitality brands. Its products help customers improve commercial performance, reduce costs, and evolve their digital commerce capabilities. The company’s technology is designed to work alongside existing airline systems, allowing customers to introduce new capabilities without replacing their current technology landscape. Project Description You will contribute to a large-scale greenfield travel-technology initiative supporting the launch of a new airline operation. The project uses a modern commercial platform to enable flexible retailing, pricing, and digital shopping experiences across travel products and ancillary services. Technologies GCP, AWS Wiz Cloudflare WAF, Bot Management, DNS, TLS, DDoS Protection and Rate Limiting Terraform SonarCloud and Dependabot Jira, PagerDuty and Slack Python and Bash What You'll Do Own and continuously improve cloud security posture across GCP organizations and AWS accounts, including connector coverage, runtime sensor deployment on production clusters, custom policy development, finding-triage baselines, and integrations with Jira, PagerDuty, and Slack; Operate and evolve the edge security layer, centralizing internet-facing protection through Cloudflare WAF, bot management, rate limiting, DNS/TLS, and origin routing for customer-facing production zones; Tune security rules using real production traffic, manage allow-list requests, and enable other teams to use edge-security tooling effectively; Support and automate vulnerability management and secure configuration, maintaining the intake of Wiz, SAST, penetration-test, and customer-reported findings, defining remediation baselines, and driving owners to closure; Participate in security incident response for cloud events, including DDoS and bot attacks, supply-chain alerts, credential exposure, and data-handling incidents, while creating and maintaining detection, triage, and mitigation runbooks; Help secure the software supply chain by owning SAST reporting in SonarCloud, dependency scanning with Dependabot, container base-image hardening, and the selection of SBOM and SCA tooling, and publish release-level security reports for engineering teams; Produce technical evidence for SOC 2, PCI DSS, ISO 27001, and NIS2, including evidence of log-sink configuration and retention, access reviews, authenticated scanning, and IAM remediation, and map Wiz controls to relevant frameworks to make evidence collection repeatable; Enable security self-service by training Platform, CloudOps, and Product Engineering teams on the tools they use, including Wiz and Cloudflare administration, mapping service catalogues to owners, and automating recurring customer-security and issue-triage reporting through scripting and AI-assisted workflows; Advise and partner with engineering teams on the security of new platform integrations and AI/RAG services, contributing to the annual cloud-security roadmap and target-state architecture; Job Requirements 5+ years of experience in cloud security or platform engineering with a security focus, including hands-on experience with GCP or AWS across IAM, audit logging, log routing, network security, and workload protection; Production experience with a CNAPP/CSPM platform, such as Wiz (preferably) / Prisma Cloud / Orca / Google Security Command Center, including policy authoring, integrations, and runtime protection; Hands-on administration of a WAF, CDN, and bot-management stack at scale; Strong Terraform experience, including building modules for security tooling and WAF configuration, reviewing changes, and managing configuration drift and legacy infrastructure; Experience with vulnerability management across cloud infrastructure, containers, and code, including SAST, SCA/dependency scanning, container image hardening, and penetration-test remediation tracking; Experience routing cloud security signals to a SIEM or security-monitoring platform, such as Wazuh, Microsoft Sentinel, Google Security Operations, or Datadog Security Monitoring, and integrating actionable alerts with PagerDuty and Slack; Scripting skills in Python or Bash for automation and security reporting; Security incident-response experience in a production environment, including developing runbooks and managing vendor escalations; Clear written and verbal communication skills, with the ability to train engineering teams and document security decisions; Nice To Have Experience automating security workflows, such as report generation and issue triage, with AI-assisted or LLM-based tooling; Experience working across both GCP and AWS, experience with Azure; Familiarity with Rego, OPA, or other policy-as-code languages; Experience with identity and access-management tooling, including Okta SSO/SCIM, PAM solutions, and least-privilege reviews for cloud IAM; Experience facilitating OWASP SAMM assessments, threat-modelling sessions, or security-champions programs; Airline or travel-industry experience, including PCI-scoped payment flows, partner integrations, and customer-facing security reporting; Experience supporting compliance with PCI DSS, SOC 2, ISO 27001, or NIS2; Certifications such as Google Professional Cloud Security Engineer, CCSP, or AWS Certified Security – Specialty; What Do We Offer The global benefits package includes: Technical and non-technical training for professional and personal growth; Internal conferences and meetups to learn from industry experts; Support and mentorship from an experienced employee to help you professional grow and development; Health insurance; Sports activities to promote a healthy lifestyle; Flexible work options, including remote and hybrid opportunities; Referral program for bringing in new talent; Work anniversary program and additional vacation days.

Самостоятельное выявление угроз, анализ рисков, расследование инцидентов и внедрение технических мер защиты. • Опыт в Cybersecurity / Information Security от 3 лет.

Location: Bangalore, India GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role Help us build the next generation of authentication services at GitLab. As a Senior Backend Engineer on the Authentication team, you'll build authentication features across the Rails monolith and GATE. GATE is our new service for issuing and validating tokens and managing identities, designed to support every GitLab deployment model. You'll expand authentication mechanisms, including support for identities used by artificial intelligence (AI) agents. You'll also help keep GitLab and its customers secure by building access management tooling and addressing vulnerabilities reported through our HackerOne program. GATE will become the foundation for token issuance, validation, and identity services across GitLab.com multi-tenant software as a service (SaaS), Self-Managed, Dedicated, and air-gapped environments. Your work will affect core components that customers, users, and GitLab teams rely on. Some of our projects include: Building GATE as the centralized service for token issuance and validation Consolidating tokens and migrating authentication paths out of the Rails monolith Building passkeys and passwordless authentication Developing composite identities that combine machine and human authorization for AI Improving service accounts and secure automation Enhancing Security Assertion Markup Language (SAML), Lightweight Directory Access Protocol (LDAP), OpenID Connect (OIDC), and System for Cross-domain Identity Management (SCIM) capabilities for automated user provisioning and single sign-on (SSO) What you'll do Shape the roadmap for GATE and GitLab's authentication services with the team. Design and implement token issuance, validation, and identity services in Go and Ruby across the Rails monolith and GATE, including new authentication mechanisms such as Workload Identity Federation. Migrate authentication and token management paths from the monolith into GATE while maintaining reliability across all deployment models. Build authentication mechanisms from the ground up, such as Workload Identity Federation. Strengthen security for users and organizations through access management tooling and by addressing vulnerabilities reported through our HackerOne program. Define and improve standards for style, maintainability, and engineering practices in a high-scale environment, and advocate for them through code review. Communicate publicly about GitLab initiatives, projects, and contributions from people not working for GitLab Inc. Reflect GitLab's values in these communications. Ship moderately sized features and improvements with moderate guidance and support from other team members, and collaborate on larger projects, including the build-out of GATE. Participate in the maintainer trainee program at your own comfortable pace while working toward becoming a project maintainer. What you'll bring Professional experience with Go and/or Ruby in scaling or mission-critical SaaS products. Familiarity with authentication and authorization technologies or techniques, such as OAuth, OIDC, SAML, SSO, SCIM, LDAP, JSON Web Tokens (JWTs), role-based access control (RBAC), or identity and access management (IAM). Knowledge of token systems, cryptographic signing, and key management. Experience building or contributing to a service from concept to production, including proposal, discussion, and execution. Proficiency in written and verbal English, with the ability to communicate complex problems and solutions clearly in a remote, largely asynchronous work environment. Experience diagnosing, preventing, and resolving performance and optimization problems. Experience working in an iterative software development process, managing your work effectively, staying organized, and following through on priorities. About the team Our mission is to empower GitLab system administrators with the toolkit they need to create their desired balance of security and accessibility for their GitLab experience. Authentication is the first impression a new customer has when they configure a new GitLab instance. We aim to make it as seamless as possible, from that first login to onboarding users and managing security rules for their instance in a secure, flexible, and scalable way. How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .