Вакансии

Location: USA (Remote); Canada (Remote) Workplace: Remote Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value. Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact. Mysten Labs is looking for a hands-on Security Engineer with strong application security fundamentals and a track record of finding and fixing real vulnerabilities. You’ll own bug bounty programs and external audits, secure our code and software supply chain, and build tooling that protects Mysten’s products and users across the Sui ecosystem. Responsibilities - Run Mysten's bug bounty programs: triage, severity, responses, internal escalations, fix validation, and the budget and payouts. Turn recurring report classes into automated checks. - Own audit engagements: scope and schedule external audits, act as the technical counterpart during the engagement, and track findings through remediation and fix validation. - Conduct code and design reviews of systems built by Mysten, its subsidiaries and partners (Rust, TypeScript, Move). Drive issues to conclusion, including investigation and incident response, and run variant analysis so each bug class is closed everywhere it occurs. - Own software supply chain security: dependency and CI/CD malware defenses, Endor Labs, the code security service (GitHub controls, merge bots), and the ongoing code security self-auditing service. Detect and respond to compromised packages, maintainers and build pipelines, and secure the provenance and signing of what Mysten ships. - Build and improve anti-scam and anti-abuse tooling for the Sui ecosystem: detect phishing sites, malicious dApps, drainer contracts and other threats that target Sui users, and work with wallet teams on mitigations. - Build security tooling: LLM-driven triage and review agents, and static and dynamic analysis (taint, call graphs, fuzzing) wired into CI and code review. Build in known-clean checks so people trust the results.   MINIMUM QUALIFICATIONS - Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience. - 3+ years of hands-on experience in security engineering, application security or product security, with a track record of finding real vulnerabilities (bug bounty reports, audit findings, CVEs or published research). - Strong Web2 security fundamentals: XSS, CSRF, SSRF, authorization flaws, injection, deserialization, software supply chain failures, cryptographic failures. - Proficiency in one or more of Rust, TypeScript, Python or Move, and experience reviewing and writing security-sensitive code. - Hands-on knowledge of software supply chain attack surface: package ecosystems (npm, crates.io http://crates.io, PyPI), CI/CD (GitHub Actions workflow injection, token exposure, unpinned actions), and build provenance. - Solid understanding of applied cryptography fundamentals and the common ways cryptographic systems are misused in practice. - Experience on either side of a bug bounty program or an audit engagement. - Strong written and verbal communication, including the ability to influence teams you have no formal authority over. - Interest in the web3 space is required.   PREFERRED QUALIFICATIONS - Smart contract or wallet security: Move, Solidity or Rust-based chains; Sui's object and capability model is a plus. - Static or dynamic program analysis: CodeQL, Semgrep, taint analysis, fuzzing, symbolic execution. - Experience building security tooling with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling has to do the work. - Anti-phishing, anti-fraud or trust & safety experience: domain and content monitoring, crawling, classifiers, threat intelligence. - Knowledge of recent crypto incidents and the defect classes behind them: drainer kits, DeFi frontend compromises, package-registry compromises. - Notable bug bounty rankings, CVEs, publications or conference talks. Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information. Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @mystenlabs.com http://mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers http://mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers. To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers. Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. We’re hiring an Intermediate Frontend Developer to join our Device Security team. 1Password helps people use technology safely, and our Device Security initiative is expanding that mission to the devices where work happens. As a mid-level Developer, you’ll help build administrative experiences such as device compliance dashboards and policy configuration tools while contributing to a new product initiative from the ground up. You’ll work closely with Engineering, Product, Design, and infrastructure partners to make complex security information easier for enterprise administrators to understand and act on. How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: - You have 2+ years of experience in software development, including building web experiences with React and TypeScript. - You have experience developing clear, maintainable frontend components and interfaces for complex product requirements. - You have worked on products serving large user bases and understand how frontend decisions can affect scalability, performance, and optimization. - You communicate technical concepts clearly and collaborate effectively with engineers, Product, Design, and other cross-functional partners. - You ask thoughtful questions, reflect on what you’ve learned, and use challenges and mistakes as opportunities to improve your technical judgment. - You’re comfortable using artificial intelligence (AI)-assisted development tools thoughtfully and understand their capabilities and limitations. Bonus points for: - Experience with Rust or Go, full-stack development with a frontend focus, composable design system components, or security, administration, or device management products. What you can expect: - Build and maintain administrative interfaces for enterprise customers, including device compliance dashboards and policy configuration tools. - Develop intuitive experiences that help administrators understand device security posture, identify risks, and take action. - Contribute to a new Device Security initiative that is still being shaped, with opportunities to influence product direction and technical solutions. - Initially contribute to client-side work in related product areas before transitioning more fully to Device Security as the initiative develops. - Collaborate with experienced engineers and cross-functional partners through planning, technical discussions, code reviews, testing, and documentation. - Grow your technical judgment and ownership through mentorship, knowledge sharing, pair programming, and feedback. USA-based roles only: The annual base salary for this role is between $123,000 USD and $172,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $111,000 CAD and $155,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Location: San Francisco Bay Area, USA Workplace: Hybrid Why work at Higgsfield AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. About the role: Higgsfield AI is looking for a highly technical, hands-on MTS, ML Security to join Higgsfield Security and own security across our GPU clusters and AI/ML infrastructure, from model training to inference and production deployment. In this role, you will work as part of the Security team and closely with our ML and Infrastructure teams to design, implement, and operate security controls that protect models, data, and underlying infrastructure. Your core responsibilities will include securing GPU compute environments, assessing infrastructure and AI/ML vendors, and enforcing security requirements through technical controls, deployment policies, and verified remediation. We're looking for someone who combines deep security engineering expertise with a practical, solutions-oriented mindset. The ideal candidate is comfortable working across cloud environments, Kubernetes, Linux, and GPU infrastructure, and understands how to balance security, performance, and reliability in a fast-moving AI environment. This role carries direct ownership of GPU infrastructure security and the security requirements that third-party providers must meet to support Higgsfield’s workloads and data. What you'll do: AI/ML & GPU Infrastructure Security - Own the security of GPU clusters supporting distributed training and production inference across cloud and rented datacenter environments. - Harden GPU hosts, operating systems, drivers, container runtimes, Kubernetes clusters, and workload scheduling configurations; reduce privileged access and unnecessary exposure. - Secure distributed training environments and GPU workloads through isolation, access controls, and data movement restrictions. Validate isolation between tenants and workloads across compute, networking, and storage, including shared GPU environments where applicable. - Design and implement controls to protect sensitive datasets, model checkpoints, weights, and customer data. - Strengthen inference security through tenant isolation, service authorization, secure model loading. - Partner with ML and Platform Engineering teams to integrate security into infrastructure design and development workflows. Vendor Security Assessment & Enforcement - Lead technical security assessments of GPU infrastructure providers, datacenter operators, and other AI security vendors that process Higgsfield data and support AI workloads. - Evaluate vendor architecture and evidence covering tenant isolation, privileged access, data handling and retention, use of customer data for model training, encryption, vulnerability management, and incident response. - Translate security requirements into enforceable technical controls, including approved configurations, and continuous checks for configuration drift. - Track internal and vendor security findings to closure with accountable owners and deadlines, validate remediation, and escalate unmet requirements. Document any approved exceptions with compensating controls and expiration dates. Cloud & Platform Security - Design, implement, and maintain security controls across Linux, Kubernetes, cloud infrastructure, networks, and third party datacenter environments. - Secure infrastructure provisioning, configuration management, and access to third-party infrastructure providers. Restrict and audit vendor and administrator access to cluster management interfaces and production systems. - Implement least-privilege access, workload identity, secrets management, encryption, and auditable access controls. - Identify and remediate vulnerabilities and configuration risks across production systems, including GPU hosts, drivers, and container runtimes, coordinating changes with infrastructure owners to maintain service reliability. Security Operations & Risk Management - Develop and maintain detection and response capabilities for infrastructure and AI-specific security threats, including unauthorized GPU workloads, privilege escalation, and suspicious data transfers. - Investigate and respond to potential credential compromise, unauthorized data access, model theft, and compromised workloads. - Partner cross-functionally to implement practical security improvements that account for the performance, scalability, and reliability requirements of GPU workloads. Requirements: - Strong hands-on experience in Security Engineering, Infrastructure Security, Platform Security, or a related technical discipline. - Deep understanding of Linux, Kubernetes, networking, and cloud infrastructure security. - Practical experience securing or operating GPU clusters or distributed AI/ML infrastructure, with an understanding of training and inference workloads, GPU drivers and runtimes, and workload isolation. - Experience designing and implementing security controls across complex, distributed production environments. - Strong knowledge of identity and access management, workload isolation, encryption, secrets management, and least-privilege principles. - Experience conducting technical vendor security assessments, evaluating supporting evidence, and driving remediation with external providers. - Ability to identify, investigate, and remediate security vulnerabilities and infrastructure threats. - Proficiency in scripting or programming languages such as Python, Go, or Bash. - Experience partnering with Infrastructure, Platform, or ML Engineering teams to implement security solutions. - Strong technical ownership, sound judgment, and the ability to prioritize security risks in a fast-paced environment. - A hands-on, collaborative approach with the ability to independently drive security initiatives from design through deployment, verify that controls work in production, and hold internal teams and vendors accountable for agreed security requirements. Compensation & Benefits - We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth. - Base Salary: The anticipated salary range for this role is $200,000 - $300,000, depending on experience, skills, scope, and location. • Bonus: This role is Bonus eligible and may participate in the Company's discretionary annual bonus program. - Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth. - Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally, including medical, dental, and vision insurance, a competitive 401(k) retirement plan with company matching, and additional benefits and perks. - The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team. - Significant ownership, direct impact, and opportunities for professional growth as the company scales. This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams. Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.

Location: Anywhere in France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. 🛡️ THE ROLE Most GRC roles are about keeping auditors happy. This one is about earning our members' trust: every day, they share their diagnoses, their claims and their care with us. You'll own security governance and risk at Alan end to end. That means one clear framework across our certifications and regulations, which the whole company uses to decide what matters most. You set the direction, make the calls on risk, and help every team own its part. We just earned our HDS certification, and there's much more to build as we grow from 1M to many millions of members, across more countries and regulators. That includes how we govern AI, which Alan uses across its products and operations. This is a hands-on senior role. You do the work yourself, mentor the junior GRC engineer we're hiring alongside you, and grow the team over time.   🚀 WHAT YOU'LL DO - Make our security framework a tool for the whole company. You own the full certification cycle (ISO 27001, HDS and those to come), and turn it into something teams use every day to prioritise, not a binder for auditors. - Bring the security view on regulation. Legal and Risk own the regulatory relationships. You bring the security answer: what the rules mean for how we protect data, and which controls make it work in practice. - Run risk as an ongoing programme. You map and prioritise security risks, including AI risks, turn them into clear treatment plans, and feed them into company-wide risk decisions with the Risk team. - Help every team own its risks. You define the controls framework and the standards, while the teams who build and run our systems own the controls. You brief the board and audit committee, and you know which findings need an urgent call and which can wait for the quarterly report. - Own incident governance. You triage and escalate incidents, own business continuity and disaster recovery, and shape the security side of our regulatory incident reports. - Be a credible partner to engineering. You work with engineering teams early on new designs and spot control gaps (access, encryption, logging) before they ship. You don't need to be an architect, but you can hold the conversation.   🏗️ WHAT YOU'LL BUILD - One governance model: clear ownership of risks and controls across teams, so security decisions don't bottleneck on one person. - A living risk map: prioritised risks that actually drive company and engineering decisions. - One compliance backbone: a single control system across our countries and regulators, built to scale. - An automated evidence engine: evidence collected straight from engineering systems, so audits run continuously instead of as a quarterly rush. You'll work closely with Legal, the Data Protection Officer, Internal Audit and Risk, and day to day with engineering and operations teams.   ⭐ WHAT WE'RE LOOKING FOR Your team You'll join Alan's Corporate team, which brings together our control functions: Risk, Corporate Governance & Internal Control, Legal, Compliance and Security. They share one mission: building what lets Alan operate at scale, safely and responsibly. Within that group, you carry the security governance and risk dimension, working hand in hand with the security engineers who run our infrastructure and platform security, and with a junior GRC engineer we're hiring alongside you. You'll be hands-on every day, building and owning the work yourself. Along the way, you'll mentor the junior engineer and help shape how GRC grows at Alan. What you bring - You want to build and own things yourself, and you enjoy helping someone else grow while you do it. - 6+ years in security, with real GRC ownership. - You've run a GRC roadmap in a certified or strongly regulated environment (ISO 27001, HDS, SOC 2, or regulated sectors like health, insurance or finance). You're comfortable working with certification auditors, and you can explain what a framework requires and why it makes sense for business teams. - You take a stand on risks, and you'd rather close one real risk than write ten policies. - You're fluent in French and English.   A big plus - You've driven a certification or audit cycle end to end yourself. - You've automated compliance work, or you're eager to, and you have a view on where AI can help. - You've presented risk to senior leaders or a board. - You've mentored or onboarded someone before. 🌍 HOW WE WORK Location: You must be legally eligible to work from France, Belgium or Spain. Remote work: We offer remote work flexibility. Contract type: Permanent contract only (no freelancing).   🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application!   🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info.   YOU WANT TO KNOW MORE ABOUT ALAN?   🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

Location: Anywhere in France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. 🛡️ THE ROLE Most GRC roles are about keeping auditors happy. This one is about earning our members' trust: every day, they share their diagnoses, their claims and their care with us. You'll join Alan's security team to help run our compliance and risk work across ISO 27001, HDS and DORA, across a growing number of countries and regulators. We just earned our HDS certification, and there's much more to build, including how we govern AI across our products: assessing AI risks, setting the controls, and keeping up with the AI Act. You'll learn alongside experienced security engineers, with a dedicated coach from day one. You'll take on real ownership early, and your scope grows as we scale from 1M to many millions of members. And you'll learn how we work at Alan: teams own their risks and controls, we automate wherever we can, and we focus on real outcomes, not paperwork. 🚀 WHAT YOU'LL DO - Keep our certifications on track. You run the day-to-day of the ISO 27001 and HDS audit cycles: collecting evidence, preparing internal audits, and following up on corrective actions until they're closed. - Turn regulations into practical actions. With Legal and the DPO, you help translate requirements like DORA, HDS, and GDPR into clear tasks for the teams, and track that they get done. - Learn the health sector rules. You build your knowledge of health-specific frameworks (ANS, HDS) and help apply them to how we handle health data. - Contribute to risk management. You help build and update our risk mapping, including AI risks, and follow up on the treatment plans with the teams who own them. - Support the teams who own the controls. You keep the controls framework up to date, answer teams' questions, and help explain security clearly to every stakeholder, from engineers to managers. - Support incident governance. You help classify and document incidents, keep Business continuity and Disaster recovery plans up to date, and prepare inputs for DORA incident reports. - Automate what slows us down. You spot repetitive compliance tasks and automate them with scripts, tools or AI. 🏗️ WHAT YOU'LL HELP BUILD - One compliance backbone: A single control system for several regulators in several countries, so Alan can scale without rebuilding compliance each time. - An automated evidence engine: evidence collected straight from engineering systems with scripts and AI, so audits run continuously instead of as a quarterly rush. You'll work closely with Legal, the DPO, Internal Audit and Risk, and day to day with engineering and operations teams. ⭐ WHAT WE'RE LOOKING FOR - You want to do the work yourself and grow with it: a permanent, hands-on role where you build things for the long run. - 2+ years in security, GRC or compliance (an audit background is fine if you want to move into building). - You've played a key part in a certification or audit cycle (ISO 27001, HDS, SOC 2 or similar). - You're curious about how things work technically, and you've automated at least one manual task (a script, a tool, an AI workflow). - You're fluent in French and English, and comfortable presenting in both. - You learn fast, ask for feedback, and go into the details when it matters. 🌍 HOW WE WORK Location: You must be legally eligible to work from France, Belgium or Spain. Remote work: We offer remote work flexibility. Contract type: Permanent contract only (no freelancing). 🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. 🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info. YOU WANT TO KNOW MORE ABOUT ALAN? 🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

FFINWAY Securities LTD, functioning as the operational branch of TFOS, seeks a meticulous and proactive Securities Operations Officer to join their Cyprus team. The role involves managing both exchange-traded and OTC securities transactions, ensuring precise processing and reconciliation of operational tasks. Additionally, the officer will play a part in enhancing and automating business workflows. Candidates must possess strong analytical abilities, keen attention to detail, and be capable of thriving in a dynamic financial services setting.

Location: Belgrade, Serbia; Tbilisi, Georgia Workplace: remote AI Digital is looking for an Information Security Specialist to take on a core operational role within our growing security team. Reporting directly to the Head of Security, you will take ownership of day-to-day execution across key operational domains—including endpoint protection, access management, vulnerability management, event monitoring, incident response, email security and employee awareness programs. Responsibilities: Monitor MDM and EDR coverage: device inventory, policy compliance, gap identification, escalation to IT Ops. Triage EDR alerts: initial assessment, isolation where needed, escalation. Monitor inactive and privileged accounts across Google Workspace and key SaaS platforms. Track MFA coverage, maintain metrics, escalate deviations. Vulnerability Management. Assist with endpoint patching; notify IT Ops and DevOps on critical CVEs. Monitor baseline security alerts in Google Workspace and EDR; assist with event triage, escalation by severity, and log maintenance. Review phishing reports (analysis, email isolation, user notification) and manage blocking policies in Google Workspace. Administer KnowBe4: training modules, phishing simulations, department-level metrics. SaaS Vendor Management. Support security incident handling from the security team side: escalation, timeline tracking, incident log. Participate in the SOC 2 certification process. Help prepare responses to security sections of questionnaires from current and prospective clients. 2–4 years in information security or a related field (IT, DevOps with a security focus). Hands-on experience working with SaaS platforms from a security or administration perspective. Understanding of core concepts: access management, vulnerability management, endpoint protection, event monitoring. Experience with MDM solutions. Experience with EDR. Ability to take on a task without a defined process and drive it to completion. Some processes will need to be built from scratch — we'll support you through that. Comfortable coordinating with cross-functional teams: setting requirements, following up on execution. Nice to have: Google Workspace administration. Security awareness platforms (KnowBe4 or equivalent). Involvement in a SOC 2 or ISO 27001 certification process. Familiarity with CIS Controls or NIST CSF. Experience with process automation (scripting, API integrations, no-code/low-code tools). What we offer: USD compensation that values your expertise‍. Work from anywhere: Fully remote to suit your lifestyle‍. 31 days of paid time off: 21 days of annual leave + 10 days of sick leave, because your health and work-life balance matter‍. Growth-focused environment: Access to learning resources and clear pathways for growth‍. Fun team events: Virtual cooking classes, yoga sessions, team quizzes and more. ‍A culture of trust: We cut the red tape - results over rules always. Open talk, ownership and getting things done together.

Location: United States of America What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Director, Security Operations Center Location: Remote US Compensation: $165,000-$185,000  base plus bonus and equity What You’ll Do: The Huntress Security Operations Center is a global team of security analysts dedicated to investigating and responding to incidents on our partners’ networks 24/7, 365 days a year. Daily activities consist of providing investigation, containment, and response actions across millions of endpoints. This role is accountable for defining and streamlining processes, workflows, and playbooks that enable effective day-to-day operations. As Huntress continues to grow, we are laser-focused on scaling our operations and force-multiplying our human analysts by 10X. This position is responsible for enabling analysts to meet our mission and achieve internal Service Level Objectives for response times. The Security Operations Manager will work with their peer regional managers to ensure consistent global operations while providing our analyst team with training opportunities and career growth. Responsibilities: Design, implement, and enforce internal processes to reduce burnout and increase the productivity of the operations center against a global set of expectations and standards Manage and enforce local/global shift coverage to ensure 24/7 operations are maintained 365 days a year Meet with analysts in a 1:1 setting weekly to socialize focus initiatives, gather feedback, provide feedback, and enable analysts to progress rapidly in their career Contribute to the development and implementation of analyst training programs designed to streamline onboarding and advance analyst skill sets in Digital Forensics, Incident Response, Malware Analysis, Detection Engineering, Threat Hunting, and Automation Work with the Product organizations to prioritize the creation of new capabilities designed to augment and force multiple analyst capabilities Maintain accountability for routine quality assurance for your designated region Engage with our Support organization to create streamlined workflows for partner/customer requests that need Security Operations Center analysis Strengthen and mature our existing processes and relationships with our Tactical Response, Threat Hunting, and Detection Engineering teams within the Security organization Provide one level of technical leadership for analysts of the Security Operations Center analysts Ensure team members fully understand the goals and objectives of Huntress’ mission and how their work fits into the bigger picture Provide key input and guidance to company stakeholders such as Marketing, Sales, Support, and Product Develop, track, and report on Objectives and Key Results linked to Security Operations Center focus initiatives Help operationalize new technologies and services that Huntress brings to market Participate in public speaking engagements in both webinar and in-person formats What You Bring To The Team: Experience in leading diverse cybersecurity teams with various skills. These teams work in Security Operations, Digital Forensics, Incident Response, Malware Analysis, Threat Hunting, and Detection Engineering 5+ years of Security Analyst experience working in a global 24x7 security operations center with a focus on Windows forensics 3+ year of team lead or managerial experience in a global operations center or Incident Response role. Preferably within a MSSP, MDR provider, or Incident Response service. Actively engaged in the information security community by attending conferences or contributing to conversations/projects in the public domain Continually learning and staying up to date on the latest threat actor tradecraft, detection techniques, and security operations concepts Ability to identify workflows being performed and create detailed process diagrams and operating procedures Effective communicator of highly technical concepts to stakeholders of varying technical backgrounds Demonstrated experience leading initiatives or projects that required delegation and accountability to achieve success Data-driven approach with experience in Data Science concepts What We Offer: 100% remote work environment - since our founding in 2015 Generous paid time off policy, including vacation, sick time, and paid holidays 12 weeks of paid parental leave Highly competitive and comprehensive medical, dental, and vision benefits plans 401(k) with a 5% contribution regardless of employee contribution Life and Disability insurance plans Stock options for all full-time employees One-time $500 reimbursement for building/upgrading home office Annual allowance for education and professional development assistance $75 USD/month digital reimbursement Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: United States (Remote) Workplace: Remote ABOUT ONEPAY OnePay is the consumer fintech trusted by millions of Americans to make money better. Our financial system is broken. High fees, low rates, and too few ways to actually grow your money. We’re fixing it. And we’re moving fast. We’re an all-in-one financial services platform that brings together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. We also partner with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers. We’re backed by Walmart, the world’s largest retailer, and Ribbit Capital, one of fintech’s most respected investors, giving us rare scale, distribution, and the opportunity to build something truly category-defining. But what really sets OnePay apart is how we move. Our customers don’t have time to wait… and neither do we. This place moves fast, and we’re looking for people who are: - Ready to run - Hungry and driven by urgency - Exceptional at what they do, with low ego - Comfortable operating in motion THE ROLE As a Corporate Security Automation Engineer at OnePay, you will lead the design, implementation, automation, and optimization of our corporate security infrastructure. You will enhance security controls, align goals with business objectives, and drive automation and self-service capabilities to maintain a strong security posture in a rapidly scaling environment. - Work with IaC tools like Terraform to ensure enterprise configurations are steady, change-managed and machine-readable. - Design and deploy endpoint security measures aligned with industry standards, including vulnerability management. - Ensure a strong security posture for corporate SaaS applications by configuring vendor capabilities or building automations to meet OnePay standards. - Mature and manage data protection controls, including Data Loss Prevention (DLP) tools and secure data handling processes. - Build secure methods for sharing data with internal teams and external partners. - Collaborate with IT, Infrastructure, and Security teams to implement security measures, maintain critical corporate systems (ensuring availability and compliance), and drive process improvement through automation. - Develop and run incident response and disaster recovery plans, including tabletop exercises. YOU BRING - 5+ years of IT experience, including 3+ years in enterprise security within cloud environments. - Expertise in IaC tools like Terraform (preferred), Puppet, Chef or Ansible. - Proven ability to lead projects, drive measurable security improvements through automation, leveraging scripting (Python, Go, and/or TypeScript). - Solid understanding of networking, authentication standards, and security frameworks (MITRE ATT&CK, NIST CSF, CIS benchmarks), with hands-on experience in ZTNA and DLP solutions (e.g., Netskope, Zscaler). - Skilled at simplifying technical concepts for non-technical audiences and influencing decisions. - Experience with workflow automation tools like n8n is a plus. TOOLS WE USE We use Typescript front to back, with node and NestJS frameworks for server code and React Native for our iOS, Android, and Web clients. We run on a highly distributed cloud-native stack with Kubernetes and AWS, and scale and resiliency are at the heart of everything we build. We also embrace agentic development, so engineers have their choice of a variety of models and agent harnesses, including Claude Code, Cursor, Codex, and more to fit their workflow. While you don't need experience with our exact stack, familiarity with modern software engineering practices will help you ramp up quickly. WHAT WE OFFER - Competitive base salary, stock options, and health benefits from Day 1 - 401(k) plan with company match - Remote-friendly (US), flexible time off (FTO), and opportunities for growth - A high-growth, mission-driven, inclusive culture where your work has real impact STANDARD INTERVIEW PROCESS Our process varies by role. Most candidates go through: - AI-assisted initial screen - Interview with Talent Partner - Technical or Hiring Manager Interview - Team Interview - Executive Interview - Offer! EQUAL EMPLOYMENT OPPORTUNITY To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us at talent@onepay.com.

Location: Ghent, Belgium D-ploy is a dynamic IT and Engineering Solutions company operating across the EMEA region, including Switzerland, Germany, Czech Republic, Austria, the UK, and the USA. We are committed to delivering reliable and efficient services to our clients through strong partnerships and a people-focused culture. We are looking for an experienced Technical Lead – Microsoft Purview & M365 Security to support the implementation of data protection and secure collaboration solutions within an international, highly regulated environment. This role is ideal for someone with strong hands-on expertise in Microsoft Purview, Microsoft 365 security and information protection, who can combine technical implementation with the ability to guide stakeholders through complex security and compliance requirements. You will take ownership of the technical delivery, working closely with project managers, business analysts, cybersecurity specialists and Microsoft 365 platform teams to design, implement and optimize information protection controls. Key Responsibilities Lead the technical design and implementation of Microsoft Purview information protection and data classification solutions. Translate data classification policies into sensitivity labels, encryption settings, external sharing controls and Data Loss Prevention (DLP) policies. Design and implement security controls for confidential and restricted information, considering their impact on external collaboration, mobile devices, partner applications and Microsoft Copilot. Configure and manage sensitivity labels, auto-labelling, DLP policies and related Microsoft 365 security settings. Plan and execute proof-of-concept activities, coordinate testing, troubleshoot technical issues and document findings. Support phased deployments of information protection policies, monitoring their impact and identifying potential risks. Develop reporting and monitoring solutions using PowerShell, Microsoft Graph and Microsoft Purview to identify sensitive content, sharing risks and compliance gaps. Establish operational procedures for monitoring, incident handling, policy exceptions and ongoing configuration changes. Collaborate with cybersecurity and platform teams to ensure a smooth transition into ongoing operations. Requirements What We're Looking For 5+ years of experience in Microsoft 365 security, compliance or information protection engineering. Proven experience implementing Microsoft Purview information protection solutions in at least two production environments with 2,000+ users. Strong hands-on experience with Microsoft Purview, including sensitivity labels, auto-labelling, Data Loss Prevention (DLP) and encryption. In-depth knowledge of Microsoft 365 collaboration and sharing configurations across SharePoint, Teams and OneDrive. Experience with Microsoft Entra ID Conditional Access, PowerShell and Microsoft Graph. Ability to assess and explain the impact of encryption and security controls on external collaboration, mobile access and Microsoft Copilot. Experience working in regulated industries, preferably pharmaceuticals, life sciences or similar environments. Microsoft SC-401 certification (formerly SC-400) or equivalent practical experience. Strong analytical, troubleshooting and communication skills, with the ability to engage both technical and non-technical stakeholders. Fluency in English. Valid criminal record extract, not older than three months, required. Nice to Have Experience developing automation scripts for large-scale data clean-up and remediation. Familiarity with Microsoft Defender for Cloud Apps. Experience identifying and remediating data oversharing risks associated with Microsoft Copilot. Benefits Broad range of tasks and responsibilities Friendly and international working environment Professional development opportunities Referral program (“Fishing for Friends”) Company-sponsored events Is IT in your DNA?

Location: Ghent, Belgium D-ploy is a dynamic IT and Engineering Solutions company operating across the EMEA region, including Switzerland, Germany, Czech Republic, Austria, the UK, and the USA. We are committed to delivering reliable and efficient services to our clients through strong partnerships and a people-focused culture. We are looking for an experienced IT Project Manager to lead a Microsoft 365 security and information protection initiative within an international, highly regulated environment. This role is ideal for someone who combines strong project delivery experience with a solid understanding of Microsoft 365 collaboration tools, data protection and security compliance. You will take ownership of day-to-day project delivery, working closely with technical specialists, business stakeholders and security teams to ensure the successful implementation of data classification and secure collaboration practices. Key Responsibilities Lead and coordinate project activities across technical implementation, business adoption, governance and compliance. Develop and maintain project plans, milestones, deliverables and dependencies. Establish and manage project governance, including reporting, risk management, change control and stakeholder communications. Coordinate with technical leads and business analysts to ensure alignment between business requirements and technical delivery. Oversee the rollout of Microsoft 365 information protection solutions, including Microsoft Purview, sensitivity labels and Data Loss Prevention (DLP). Manage testing, implementation readiness and phased deployments, ensuring risks are identified and addressed. Collaborate with Cyber Security, Legal, IT and business teams to support effective decision-making. Prepare regular project updates and presentations for senior stakeholders. Requirements What We're Looking For 7+ years of experience in IT project management, ideally within complex enterprise environments. Proven experience delivering at least one Microsoft 365 security, information protection or compliance project from start to finish. Experience establishing and managing PMO processes, project governance and reporting. Good understanding of Microsoft Purview and Microsoft 365 collaboration tools such as SharePoint, Teams and OneDrive. Familiarity with data classification, sensitivity labels, DLP and their impact on business users. Experience working in regulated industries, preferably pharmaceuticals, life sciences or similar environments. Strong stakeholder management, communication and organizational skills. PMP, PRINCE2 or equivalent project management qualification. Fluency in English. Valid criminal record extract, not older than three months, required. Nice to Have Microsoft SC-401 or previous SC-400 certification. Experience with change management methodologies such as Prosci. Familiarity with monday.com or similar project management platforms. Benefits Broad range of tasks and responsibilities Friendly and international working environment Professional development opportunities Referral program (“Fishing for Friends”) Company-sponsored events Is IT in your DNA?

Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the team Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward a fundamentally different kind of GRC: one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits. Within Security GRC, Audit & Assurance runs the integrated audit across our frameworks and maintains the Common Control Framework the program hangs off. This role sits in Audit & Assurance and helps run that integrated audit program, plan the audits we add next, and assess the frameworks and scope changes we are considering. About the role You'll help run Anthropic's unified audit program: quarterly audits across SOC 2, HIPAA and the ISO 27000 family including ISO 42001, plus the rest of our certifications, working with our audit firms, our GRC Partners, and control owners across the company. You'll plan new audits as we expand to new frameworks, platforms and regions, and run the gap assessments that tell us what each expansion takes before we commit to it. You'll help build the audit operating model and runbook, and drive automation in the program so evidence is collected once and reused across frameworks, requests reach control owners once, and each audit cycle takes less effort than the last. Building with Claude is a normal part of the job, with you deciding where human judgment stays in the loop. This is an individual contributor role for someone with program management experience who writes clearly, stays calm under deadlines, and likes making a busy program simpler. Key responsibilities Run the audit program as a program: one integrated plan and calendar across audits and expansions, with milestones, dependencies, risks and decisions tracked, and regular status to GRC leadership and stakeholders Plan and run the quarterly audits, from scoping through report and findings closeout Run audit readiness ahead of each fieldwork window: control owner prep, evidence pre-checks and walkthrough dry runs Scope each audit's boundary with Product and Engineering: which products and deployment paths are in scope, and flag when a launch or new platform changes it Help build the audit operating model and runbook for a unified audit program, and keep both current as the program grows Drive automation in the program: evidence collected from source systems, request tracking and audit reporting, with evidence and walkthroughs reused across frameworks Coordinate audits across frameworks and firms so audit windows line up and control owners are asked for the same evidence once, and drive new ways of automated evidence generation and collection with GRC Engineering Plan new audits and audit expansions as we commit to them Run framework and scope expansion evaluations and gap assessments, with a recommendation and an effort estimate leadership can act on Work closely with control owners and GRC Partners: prepare control owners for audits, get evidence delivered and findings closed, and hand findings that need extended remediation to GRC Partners Manage day-to-day auditor relationships, and report audit status, findings and program metrics to GRC leadership Minimum qualifications Several years of program management: running multi-workstream programs with a plan, milestones, dependencies, risk tracking and status reporting to leadership Several years running external security audits (SOC 2 and ISO 27001 at minimum), on the company side or at an audit firm, including seasons with several frameworks at once Working knowledge of SOC 2, the ISO 27000 family, ISO 42001 and HIPAA, and where their requirements overlap Experience leading a gap assessment for a new framework or scope change and presenting the result to leadership Experience building or improving an audit process: calendars, request tracking, runbooks, roles and responsibilities Enough technical fluency to understand how evidence is produced in cloud environments and to judge whether a system-generated report is complete and accurate, and to build simple automations with Claude Clear writing and calm coordination under deadline pressure Ability to get control owners to deliver on time without authority over them Preferred qualifications Audit firm experience (Big 4 or a SOC 2 or ISO certification body), especially as a senior or manager on technology clients Experience adding new frameworks such as PCI DSS, ISO 27701 or 27018, CSA STAR, or international schemes (for example IRAP, ISMAP or C5) Have automated evidence collection or audit reporting, or use Claude or other LLMs day to day to plan, track and report program work Experience with a GRC platform or building lightweight internal tooling You don't need to Have done everything on this list. The combination is running a global audit calendar well, plus the instinct to make it simpler each cycle Hold every certification. CISA, CISSP, ISO 27001 Lead Auditor or similar are welcome but not required Have prior AI industry experience Deadline to apply: None. Applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $255,000 — $270,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Huntsville, Alabama Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary The Staff Full Stack Engineer engineer role in which you lead technical efforts, owning system architecture and development across the stack. You will exercise high discretion over technical decisions to achieve business outcomes. You will be building external attack surface management technology that builds a picture of a target organization from the outside: domains, hosts, software, people, registrations, documents the customer hands us. You will own the part of the system that turns all of that into facts an analyst can trust: what we observed, what we inferred from it, where each fact came from, and what a human decided about it. Your job is to make it a general framework for passive illumination, so the next data source is a week of work, not a new tab. Education, Experience, Knowledge, Skills, and Abilities 7+ years of experience of software development experience Strong proficiency in TypeScript and modern JavaScript. Extensive experience with React and JavaScript web development frameworks (Next.js preferred) Familiarity with OAuth2, JWT, and other authentication/authorization frameworks. Experience with CI/CD pipelines and cloud deployment platforms (Vercel, AWS, Azure, or GCP) Experience with ORM frameworks and relational databases (Prisma, Drizzle, PostgreSQL) Excellent debugging, analytical, and problem-solving skills. Cybersecurity knowledge, such as how penetration testing, OSINT, and red teaming works. Active secret security clearance is required. Preferred Experience Hands-on experience with LLM APIs (OpenAI, Anthropic, etc.) and AI application development Familiarity with AI orchestration frameworks and agent-based systems Working Conditions & Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - hybrid, work-from-home most of the time with some onsite work. Pay Range Disclosure The base pay range for this role takes into account the wide range of factors that are considered in making compensation decisions, including but not limited to Qualifications, Geographical Location, Education/certifications, Experience, Skill Sets, Training, and other business and organizational needs. At Bugcrowd, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for the position i s: $151,360 - $189,200. This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

Location: Sweden (Remote) Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X . We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do. You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity. This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden. Senior Software Engineer - Security Assurances We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity. To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work. The Opportunity: You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure. This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus. What You’ll Be Doing: Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes. Respond to customer security issues, security alerts, and potential incidents What Makes You a Great Fit: Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree in Computer Science, Information Security, or related field (or equivalent experience) Bonus Points For: Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems. Experience working with OSS communities Experience in using technical automations to prove infrastructure compliance Experience securing large-scale distributed systems running in public clouds In Sweden, the base compensation range for this role is SEK 775,444 - SEK 930,533 . Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally. *Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process. Why You’ll Thrive at Grafana Labs: 100% Remote, Global Culture - As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose. Scaling Organization – Tackle meaningful work in a high-growth, ever-evolving environment. Transparent Communication – Expect open decision-making and regular company-wide updates. Innovation-Driven – Autonomy and support to ship great work and try new things. Open Source Roots – Built on community-driven values that shape how we work. Empowered Teams – High trust, low ego culture that values outcomes over optics. Career Growth Pathways – Defined opportunities to grow and develop your career. Approachable Leadership – Transparent execs who are involved, visible, and human. Passionate People – Join a team of smart, supportive folks who care deeply about what they do. In-Person onboarding - We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it. Balance is Key - We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect. *We will comply with local legislation where applicable. Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow. Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings. #LI-Remote For information about how your personal data is used once you’ve applied to a job, check out our privacy policy .

Location: Germany (Remote) Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X . We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do. You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity. This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden. Senior Software Engineer - Security Assurances We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity. To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work. The Opportunity: You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure. This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus. What You’ll Be Doing: Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes. Respond to customer security issues, security alerts, and potential incidents What Makes You a Great Fit: Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree in Computer Science, Information Security, or related field (or equivalent experience) Bonus Points For: Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems. Experience working with OSS communities Experience in using technical automations to prove infrastructure compliance Experience securing large-scale distributed systems running in public clouds In Germany, the base compensation range for this role is € 97,034 - €116,441 . Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally. *Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process. Why You’ll Thrive at Grafana Labs: 100% Remote, Global Culture - As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose. Scaling Organization – Tackle meaningful work in a high-growth, ever-evolving environment. Transparent Communication – Expect open decision-making and regular company-wide updates. Innovation-Driven – Autonomy and support to ship great work and try new things. Open Source Roots – Built on community-driven values that shape how we work. Empowered Teams – High trust, low ego culture that values outcomes over optics. Career Growth Pathways – Defined opportunities to grow and develop your career. Approachable Leadership – Transparent execs who are involved, visible, and human. Passionate People – Join a team of smart, supportive folks who care deeply about what they do. In-Person onboarding - We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it. Balance is Key - We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect. *We will comply with local legislation where applicable. Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow. Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings. #LI-Remote For information about how your personal data is used once you’ve applied to a job, check out our privacy policy .

Location: Spain (Remote) Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X . We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do. You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity. This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden. Senior Software Engineer - Security Assurances We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity. To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work. The Opportunity: You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure. This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus. What You’ll Be Doing: Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes. Respond to customer security issues, security alerts, and potential incidents What Makes You a Great Fit: Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree in Computer Science, Information Security, or related field (or equivalent experience) Bonus Points For: Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems. Experience working with OSS communities Experience in using technical automations to prove infrastructure compliance Experience securing large-scale distributed systems running in public clouds In Ireland, the base compensation range for this role is € 82,988 - €99,586 . Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally. *Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process. Why You’ll Thrive at Grafana Labs: 100% Remote, Global Culture - As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose. Scaling Organization – Tackle meaningful work in a high-growth, ever-evolving environment. Transparent Communication – Expect open decision-making and regular company-wide updates. Innovation-Driven – Autonomy and support to ship great work and try new things. Open Source Roots – Built on community-driven values that shape how we work. Empowered Teams – High trust, low ego culture that values outcomes over optics. Career Growth Pathways – Defined opportunities to grow and develop your career. Approachable Leadership – Transparent execs who are involved, visible, and human. Passionate People – Join a team of smart, supportive folks who care deeply about what they do. In-Person onboarding - We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it. Balance is Key - We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect. *We will comply with local legislation where applicable. Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow. Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings. #LI-Remote For information about how your personal data is used once you’ve applied to a job, check out our privacy policy .

Location: Republic of Ireland (Remote) Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X . We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do. You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity. This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden. Senior Software Engineer - Security Assurances We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity. To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work. The Opportunity: You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure. This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus. What You’ll Be Doing: Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes. Respond to customer security issues, security alerts, and potential incidents What Makes You a Great Fit: Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree in Computer Science, Information Security, or related field (or equivalent experience) Bonus Points For: Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems. Experience working with OSS communities Experience in using technical automations to prove infrastructure compliance Experience securing large-scale distributed systems running in public clouds In Ireland, the base compensation range for this role is € 104,000 - €124,800. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally. *Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process. Why You’ll Thrive at Grafana Labs: 100% Remote, Global Culture - As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose. Scaling Organization – Tackle meaningful work in a high-growth, ever-evolving environment. Transparent Communication – Expect open decision-making and regular company-wide updates. Innovation-Driven – Autonomy and support to ship great work and try new things. Open Source Roots – Built on community-driven values that shape how we work. Empowered Teams – High trust, low ego culture that values outcomes over optics. Career Growth Pathways – Defined opportunities to grow and develop your career. Approachable Leadership – Transparent execs who are involved, visible, and human. Passionate People – Join a team of smart, supportive folks who care deeply about what they do. In-Person onboarding - We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it. Balance is Key - We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect. *We will comply with local legislation where applicable. Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow. Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings. #LI-Remote For information about how your personal data is used once you’ve applied to a job, check out our privacy policy .

Location: United Kingdom (Remote) Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X . We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do. You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity. This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden. Senior Software Engineer - Security Assurances We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity. To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work. The Opportunity: You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure. This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus. What You’ll Be Doing: Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes. Respond to customer security issues, security alerts, and potential incidents What Makes You a Great Fit: Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree in Computer Science, Information Security, or related field (or equivalent experience) Bonus Points For: Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems. Experience working with OSS communities Experience in using technical automations to prove infrastructure compliance Experience securing large-scale distributed systems running in public clouds In the UK, the base compensation range for this role is £ 91,755 - £110,106. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally. *Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process. Why You’ll Thrive at Grafana Labs: 100% Remote, Global Culture - As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose. Scaling Organization – Tackle meaningful work in a high-growth, ever-evolving environment. Transparent Communication – Expect open decision-making and regular company-wide updates. Innovation-Driven – Autonomy and support to ship great work and try new things. Open Source Roots – Built on community-driven values that shape how we work. Empowered Teams – High trust, low ego culture that values outcomes over optics. Career Growth Pathways – Defined opportunities to grow and develop your career. Approachable Leadership – Transparent execs who are involved, visible, and human. Passionate People – Join a team of smart, supportive folks who care deeply about what they do. In-Person onboarding - We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it. Balance is Key - We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect. *We will comply with local legislation where applicable. Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow. Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings. #LI-Remote For information about how your personal data is used once you’ve applied to a job, check out our privacy policy .