Вакансии

Location: San Francisco, CA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We are looking for a Director, IT SOX to join the Internal Audit team at Anthropic. In this role, you will be a hands-on technical contributor and key executor of our IT SOX compliance program, with deep focus on our IT General Controls, IT Application Controls, and system risk assessments. This role reports to the Head of IT SOX and is well-suited for someone who is comfortable with ambiguity, thrives in a high-pace environment, and enjoys solving problems that don't yet have industry-standard answers. This is a high-impact opportunity to collaborate with first and second lines of defense to help establish a control environment suitable for an AI-first company! You will act as a trusted advisor to Engineering, GRC, Security and Finance teams on the technology controls adapted to a fast growing and rapidly changing organization. You'll bring technical depth, a bias toward automation, and the ability to partner effectively with both technical teams and external auditors as the organization experiences scaling to public-company standards. Key responsibilities Advise on the design of a control environment fit for an AI-first company, including controls over highly automated DevOps pipelines and emerging agentic identity models Partner with Engineering, Security, IT, and DevOps teams to assess the design and implementation of scalable and sustainable controls Assess new system implementations and changes Identify automation and tooling opportunities to improve control efficiency and monitoring, and contribute to the development of continuous monitoring capabilities Assist in scoping and planning for annual SOX IT assessments Execute IT SOX testing across IT General Controls and IT Application Controls, including access management, change management, and computer operations Perform system and process risk assessments to identify control gaps and recommend remediation Own control documentation and ensure audit-ready evidence is current and complete Evaluate IT automated controls and support the shift from manual to automated control reliance Scale the IT SOX program as the company grows — rationalizing scope, standardizing testing approaches, and building repeatable processes that keep pace with new systems and entities Guide and direct the day-to-day work of internal team members and co-sourced partners: setting priorities, reviewing workpapers, and ensuring quality and consistency across the testing program Build strong working relationships with process and control owners across the organization Translate technical control requirements for non-technical stakeholders and vice versa Support SEC cybersecurity disclosure requirements and related risk monitoring efforts Coordinate with external auditors on IT SOX matters, including evidence requests, walkthroughs, and testing schedules Track and assist with remediation of audit findings; communicate status to the Head of IT SOX and relevant stakeholders Minimum qualifications Hands-on IT audit or IT SOX compliance experience, ideally in a fast-paced technology environment Deep working knowledge of ITGCs, ITACs, and IT risk assessment methodologies Experience auditing highly automated DevOps environments (CI/CD pipelines, infrastructure-as-code, automated deployments) and adapting traditional change-management and access controls to them Experience designing, testing, and documenting controls across access management, change management, and computer operations Demonstrated comfort with ambiguity and the ability to operate effectively in a high-pace, rapidly changing environment Ability to effectively guide and direct the work of internal team members and/or co-sourced partners Ability to work independently on complex, ambiguous workstreams while communicating proactively with senior stakeholders Strong project management and organizational skills with close attention to detail Clear, effective communicator — able to work across technical and non-technical audiences Preferred qualifications 12+ years of hands-on IT audit and SOX compliance experience, including time in a Big 4 or comparable environment Hands-on experience with cloud environments (GCP, AWS, and/or Azure) Experience scaling a compliance program to public-company standards Track record of scaling an audit or SOX program through periods of rapid growth Familiarity with enterprise systems such as Workday, Salesforce, or GitHub Experience evaluating SDLC controls in modern software development environments CISA, CIA, CISSP, CPA, or equivalent certification Genuine enthusiasm for working in an AI-first environment — applying AI to audit work itself and rethinking assumptions about how controls operate when AI is embedded in the processes being audited The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $230,000 — $300,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security and control commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward continuous assurance, to challenge and evidence the performance of controls continuously rather than through periodic audits. As Anthropic scales to meet public-company standards, the Sarbanes-Oxley (SOX) control environment over our technology stack is one of the most consequential things this team owns. As part of Security GRC's technical controls assurance function, you will be the voice on what the IT general controls must achieve to support SOX 404 compliance. In partnership with Internal Audit, you will define control requirements and acceptance criteria for the in-scope engineering systems and infrastructure that underpin financial reporting. You will pair with engineering as they design and implement against those requirements, and validate that what ships actually meets the bar before Internal Audit and our external auditors test it. You are the product owner for control design methodology and continuous control monitoring, initially around ITGCs, but extending into other areas of security and compliance to drive visibility where and when we need it. Key responsibilities Define control requirements and acceptance criteria across the core ITGC domains of logical access, change management, computer operations, and program development for SOX in-scope systems, including home-built platforms where the control has to be designed into the system rather than bolted on. Set the bar for in-scope systems from day one. As financially significant systems are built, migrated, or replaced, define what the system must provide (auditability, segregation of duties, change control, immutable logging, evidence retention) before go-live, so controls are not retrofitted after the fact. Pressure-test changes for SOX impact during design. Review major infrastructure, system, and agent framework changes for control impact while decisions are still cheap, and maintain a clear view of which changes alter the SOX scope, key control population, or evidence requirements. Own second-line control monitoring and evidence readiness. Stand up continuous controls monitoring and automated evidence collection for ITGCs (control testing, walkthrough preparation, population and completeness validation, and mapping to the common controls framework). Materially raise automated evidence coverage and cut audit prep time. Drive control deficiency remediation with cross functional partners. Track and root-cause ITGC deficiencies surfaced by monitoring, Internal Audit, or external audit; partner with engineering owners on remediation design; and assess whether remediation actually closes the gap before re-testing. Assess scope changes through a SOX lens. When new products, entities, systems, or integrations come into scope, provide technical and compliance assessment of their impact on control design, evidence requirements, and engineering effort before commitments are made. Maintain alignment with the broader compliance portfolio. Where SOX ITGCs overlap with SOC 2, ISO 27001/42001, or other frameworks, ensure controls are designed once and evidenced once, and that changes made for one framework do not silently break another. Minimum qualifications Thrive at the pace of a hypergrowth company. You're comfortable making calls with incomplete information and reprioritizing as scope shifts. Have led or been a senior contributor to an ITGC program through SOX 404 readiness and/or at a public company, with a working command of PCAOB AS 2201, COSO 2013, and how external auditors scope, test, and evaluate technology controls and deficiencies. Have genuine engineering fluency, possibly from an earlier engineering career: you can read code and Terraform, follow a CI/CD pipeline end to end, and challenge a design on its technical merits. Have programming skills in Python or at least one systems language such as Go, Rust, or C/C++. Have deep familiarity with developer platform, release engineering, cloud infrastructure, or ERP/financial systems control domains. Understand the role of the second line: you can advise and challenge engineering without taking ownership of their controls, and you know where the line sits between your monitoring and Internal Audit's independent testing. Are a strong collaborator and communicator across Finance, Engineering, Internal Audit, and external auditors. Use Claude and other LLMs as daily working tools, and have grounded, specific views on which SOX assurance workflows AI can run today and which it can't yet. Translate SOX and framework language into acceptance criteria engineers can build against, and translate engineering reality back into assurance language auditors and leadership can rely on. Default to getting the requirement designed into the system rather than papering over the gap with procedure. Preferred qualifications A combination of audit or advisory experience (Big 4 or equivalent, ideally IT audit) with in-house experience at an AI-forward tech company, in either order. Taken a company through a first-year SOX 404(a) and 404(b) assessment, including a first external ITGC audit. Defined or assessed controls over home-built financially significant systems, usage-based billing, or revenue metering pipelines. Defined or assessed controls for AI/ML systems or agents acting in production environments. Stood up continuous controls monitoring or automated evidence programs. Experience with SOC 1 reliance, service organization control mapping, and complementary user entity controls. CISSP, CISA, CPA, or equivalent certification. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $410,000 — $510,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Dublin, Ireland Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT US: Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money.   In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays.   ABOUT THE ROLE: Millions of people rely on Notion to do their most important work. Protecting that trust starts with protecting the people who build Notion: our employees, their laptops, their identities, and the SaaS apps they rely on every day. We are looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our workforce and corporate environment safe. This is a security engineering role focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, not a traditional IT support or corporate engineering role. You'll own and evolve core security controls, design systems and automation that scale with the company, and help make security both stronger and easier to use. You'll partner closely with IT, Infrastructure, GRC, and Detection & Response to improve the security foundations that employees rely on every day.   WHAT YOU'LL ACHIEVE: - Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS. - Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS. - Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools. - Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift. - Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection. - Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse. - Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream. - Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC.   SKILLS YOU NEED TO BRING: - Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company. - Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM). - Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments. - Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration. - Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors. - Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level. - Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC. NICE TO HAVES: - Experience at a fast-growing tech or AI company where the security program had to outpace headcount. - A background in IT engineering, SRE, or production engineering that transitioned into security engineering. - Experience building internal security tooling or workflows that improved employee or developer experience. - Contributions to the security community through open-source tools, blog posts, or conference talks.   We hire talented and passionate people from a variety of backgrounds because we want our global employee base to represent the wide diversity of our customers. If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you.   Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.   By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550. https://dev.notion.so/a3ce416456924276a59de91bca740028?pvs=21   #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: NAMER and LatAm About the Team IT Operations at ClickHouse keeps the company's internal systems, tooling, and infrastructure running securely and efficiently — from identity and endpoint management to the platforms every team relies on to do their work. This role sits on a newly formed AI Engineering function within IT Operations, created to centralize AI Ops rather than leave it disjointed across teams. The team — a Technical Lead plus one or two AI Ops Engineers — reporting to the IT Business Systems Manager, and brings the same rigor IT Ops applies to systems and infrastructure to the design, deployment, and lifecycle management of AI solutions and the agents they power. About the Role We are looking for an AI Ops Engineer to help build and run a new AI Ops function at ClickHouse. You will work under a Technical Lead to design, build, and maintain AI-driven solutions across the business (People, Finance, Legal, and beyond) and engineering — building integrations, maintaining agents, supporting cost visibility, and helping train the org on AI best practices. This is a hands-on execution role: you will move quickly, ship real workflows, and help the team learn what works as we centralize AI Ops for the first time. Success This is a net-new function; specific goals will be set with your Technical Lead. Directionally, the team is measured on: - Measurable reduction in redundant or inefficient AI tool and model spend through right-sizing, routing, and cost visibility - A working framework for evaluating and selecting models/tools by cost, latency, accuracy, and risk, adopted across teams - Agents and AI workflows built, deployed, and maintained cross-functionally (People, Finance, Legal, Engineering, and beyond) - Improved AI fluency and literacy org-wide, measured through training participation, adoption of approved tools, and reduced shadow-AI usage - Established identity, access, audit, and lifecycle practices for AI agents that satisfy Security and GRC requirements YOU WILL Build AI-Powered Solutions - Develop and deploy solutions using LLMs, automation frameworks, and internal tooling, for both business and engineering use cases - Integrate AI into existing systems (HRIS, ATS, ERP, procurement orchestration, ticketing, CI/CD, developer tooling) and legal infrastructure like CLM or Matter Management - Build workflows such as document generation, data extraction, knowledge retrieval, and decision support across systems and knowledge bases - Use modern integration standards (e.g., MCP) to give AI models and agents direct, secure access to internal knowledge and context Support Model Evaluation - Help test and benchmark AI models against accuracy, latency, cost, and safety criteria - Support model risk assessments and due diligence alongside Security and GRC - Help implement and maintain the internal model routing solution Support Cost Visibility - Help build dashboards and reporting for AI/LLM spend across teams and tools - Implement tagging, monitoring, and alerting for cost anomalies - Identify and execute on cost-optimization opportunities (prompt efficiency, caching, model right-sizing) Maintain Agent Infrastructure - Help provision, credential, and de-provision AI agent access - Support deployment, versioning, monitoring, and retirement of agents - Maintain and patch agent infrastructure and dependencies - Help maintain audit trails and logging for agent actions Deliver Training and Enablement - Design and deliver company-wide AI training programs tailored to different audiences — non-technical business users through engineers - Create lightweight playbooks, guides, templates, and reusable components for safe, effective AI adoption - Run onboarding sessions, office hours, and workshops to build AI fluency and drive adoption of approved tools and agents - Establish a feedback loop with users to continuously improve training content, tooling, and documentation YOU BRING You are not expected to have every skill below — tell us which are your strongest. - Experience building with modern AI/ML tools and frameworks - Experience building and consuming APIs, developing data pipelines, and architecting system integrations - Working knowledge of cloud infrastructure (AWS, GCP, or Azure) and experience hosting or operating services in production - Experience comparing and evaluating AI models across providers, including trade-offs between cost, latency, and quality - Comfort working with usage and billing data to build cost visibility, forecasting, or optimization - Ability to understand both business and engineering workflows and translate them into technical solutions - Experience working with or integrating business systems as well as engineering/developer tooling - Experience creating training materials, documentation, or workshops for mixed technical/non-technical audiences - Understanding of data privacy, security, and compliance considerations - Experience implementing safeguards in AI systems, including identity and access controls for automated/non-human actors PERKS - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new team member who joins our company receives stock options. - Time off - Flexible time off in the US, generous entitlement in other countries. - A USD$500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. CULTURE - WE ALL SHAPE IT As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse. EQUAL OPPORTUNITY & PRIVACY ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.

Location: Tel Aviv, Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for a Security Risk Lead to strengthen security risk management across our global AI cloud infrastructure, products, business operations, and strategic programs. This is a senior, hands-on individual-contributor role with end-to-end ownership of security risk assessments, the security risk register, remediation tracking, risk acceptance, and risk reporting. The successful candidate will work closely with engineering, cloud infrastructure, product, security, compliance, legal, and business teams to ensure that material risks are identified early, assessed consistently, and driven toward clear treatment decisions. The role requires strong judgment, technical understanding, and the ability to influence stakeholders without relying on formal authority. Your responsibilities will include Risk Assessment Lead security risk assessments for infrastructure, cloud environments, products, applications, business processes, and major technology changes. Conduct risk assessments for new initiatives, systems, and significant changes, including supporting M&A-related risk assessment work alongside the due diligence team. Evaluate the design and effectiveness of controls and identify residual risk following mitigation. Identify emerging and systemic risks that may affect multiple services, regions, or business functions. Risk Register & Tracking Maintain the security risk register: log new risks, update status, track owners, and follow items through to remediation or formal risk acceptance. Support the ongoing refinement of Nebius's risk assessment and risk register processes, contributing improvements as the practice matures. Coordinate with other GRC functions on findings and gap assessments that carry risk implications, and independently determine whether a given finding warrants a risk register entry. Metrics & Reporting Maintain and improve security risk assessment, scoring, prioritization, and acceptance processes. Define and monitor meaningful Key Risk Indicators and risk trends. Translate complex technical risks into clear business impact for senior leadership and governance forums. Prepare risk reporting that supports security posture reviews, strategic decision-making, and Board-level reporting. Support auditors, customers, and internal stakeholders on security risk management matters. Cross-Functional Coordination Work closely with other GRC functions to ensure risk assessments reflect current operating reality. Partner with engineering and business stakeholders to embed risk thinking into day-to-day decisions, building trust through clear, practical communication rather than formal authority. Build trusted relationships with risk and remediation owners while maintaining independent and objective judgment. We expect you to have 5-8 years of experience in security risk management, IT risk, GRC, or a closely related discipline. Hands-on experience running risk assessments and maintaining a risk register, including driving items through to remediation or formal risk acceptance. Solid understanding of risk scoring and prioritization approaches, and the judgment to apply them consistently and defensibly. Ability to define and track meaningful risk metrics/KRIs for leadership reporting. Strong organizational and analytical skills, with the ability to manage multiple concurrent risk items without losing accuracy or follow-through. Strong communication and stakeholder management skills; comfortable working across security, compliance, engineering, and business teams. Familiarity with cloud infrastructure and technology environments is an advantage. Relevant certifications (e.g., CRISC, CISSP) are an advantage, not a requirement. Bachelor's degree in information security, computer science, engineering, or a related field preferred; equivalent practical experience will be considered. Excellent written and verbal communication skills in English. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. The role You will own and evolve the company’s threat detection and threat-hunting capability. This role defines what “good” looks like for detection and increasingly engineers it directly as capability shifts into Cyber Security. This is not an alert-triage role. You are here to understand attacker behaviour, convert it into high-fidelity detection logic, and raise the security baseline for the entire organisation. You will partner closely with Security Operations, GRC and Engineering—setting standards, direction, and expectations—while progressively taking ownership of the most complex and high-value detection and threat engineering work. What you’ll be responsible for - Engineering high-fidelity threat detections across endpoint, identity, cloud, and SaaS - Defining detection standards, principles, and quality thresholds for Security Operations - Conducting proactive threat hunting based on attacker behaviour, not vendor alerts - Translating threat intelligence and incident learnings into durable, reusable detections - Mapping detections to MITRE ATT&CK and real-world attack paths - Reducing alert fatigue through logic refinement, correlation, and contextual enrichment - Advising and supporting during high-severity security incidents; contribute to runbooks and escalation playbooks - Driving the transition of advanced detection capability into Cyber Security ownership What we’re looking for - Proven experience in detection engineering, threat hunting, or advanced SOC roles - Deep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycle - Hands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel) - Proficienty with scripting and programmaining (e.g. Python, KQL) to build detection pipelines and automation - Willingness to challenge bad detections, weak assumptions, and vanity metrics - Pragmatic mindset: precision and impact beat coverage theatre - Experience operating beyond traditional SOC or MSSP models - Hands-on cloud detection experience (identity, control plane, SaaS) - Familiarity with threat intelligence platforms and frameworks such as PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud. Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. THE ROLE Checkout.com http://Checkout.com is scaling a multi-cloud environment at pace, and security architecture is central to how we do it safely. As Senior Cloud Security Engineer, you'll work closely with Engineering, GRC, Technology Risk, and Security Operations to embed security into every design decision and to make sure we can see what's happening across the estate once it's live. You'll help embed security within the design phase and ongoing operations of our multi-cloud posture, define guardrails and policy-as-code standards, and support the strengthening of our SIEM and detection capability. You'll take on the most complex and ambiguous cloud security challenges in the business, and hold engineers to best practices. This isn't a tool-monitoring role. You're here to lead security-by-design, set best-practice standards, and raise the bar. What You'll Be Doing - Develop and enforce reference security architectures, patterns, and blueprints for secure cloud adoption across AWS, Azure, and GCP. - Conduct security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift. - Partner with Engineering teams to embed security guardrails early in design, ensuring compliance and resilience without adding friction. - Evaluate engineering and platform architecture proposals, identifying security gaps and seeing remediation through to completion. - Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS. - Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes. - Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate. - Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support business decision-making. Skills and Experience We're Looking For We're looking for someone with strong technical expertise and a genuine passion for security. Here's what we need: - Risk-based decision-making and adherence to regulatory and internal security standards (PCI DSS, NIST, SOC 2, ISO 27001, CIS). - Broad knowledge across security domains and their capabilities within AWS, Azure, and GCP, with 6+ years' hands-on experience and SME depth in at least one platform. - Kubernetes (EKS/AKS/GKE), API security, and IaC security (e.g. Terraform, CloudFormation, ARM templates). - Securing user and non-user access at scale, including Azure Policy and cloud-native IAM controls. - Demonstrated ability to provide clear, security-focused guidance, combined with excellent communication and senior-stakeholder engagement skills, and experience mentoring other engineers. Nice to Have - CISSP, CCSP, or equivalent certifications. - AZ-500, AWS Certified Security, Google Professional Cloud Security Engineer, or equivalent cloud security certification. - Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect. - Experience integrating ATT&CK Navigator into SOC workflows. Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are looking for an AI Agent Security Architect to function as the primary technical authority for Replit’s autonomous and AI agent security blueprint. In this critical role, you will design, implement, and maintain the runtime defense systems, guardrail frameworks, and sandboxing architectures that govern AI agents executing code, invoking tools, and reasoning across our platform. You will be a key technical contributor—leading high-impact AI security initiatives and bridging the gap between non-deterministic AI behavior and rigorous cybersecurity controls for both engineering and executive leadership. What You'll Do - AI Agent Security Strategy & Technical Execution - AI Agent Security Blueprint: Define the long-term vision and architectural patterns for securing autonomous agent workflows, Model Context Protocol (MCP) integrations, multi-turn reasoning loops, and multi-agent coordination. - Runtime Guardrails & Policy Enforcement: Architect and deploy dynamic input/output guardrail systems, semantic firewalls, and real-time intent verification filters to prevent goal hijacking, system prompt leaks, and indirect prompt injections. - Agent Execution & Tool Sandboxing: Partner with Infrastructure and AppSec teams to design secure, short-lived, micro-isolated environments (e.g., microVMs, WebAssembly, container sandboxes) where agents can dynamically execute code, run shell commands, and interact with host operating systems safely. - Agentic Threat Modeling & Red Teaming: Conduct specialized threat modeling against non-deterministic systems. Lead automated and manual AI red-teaming initiatives to uncover vulnerabilities in RAG context pipelines, vector stores, and tool-calling interfaces. - Identity, Delegation & Least Privilege: Architect fine-grained permission models and step-up Human-in-the-Loop (HITL) authorization patterns for agents acting on behalf of users—ensuring agents never exceed the delegated privileges of the end user or misuse API keys. - Context & Memory Boundary Security: Design strict data isolation and poisoning prevention controls for vector databases, retrieval-augmented generation (RAG) pipelines, and long-term conversation memories across multi-tenant workloads. - Risk Management & Cross-Functional Enablement - Maintain the AI Security Source of Truth: Define, document, and maintain authoritative secure design patterns and SDKs for engineering teams building internal or customer-facing AI agent capabilities. - Contribution to Risk Register: Identify, quantify, and document non-deterministic and agentic security risks (e.g., OWASP Top 10 for LLMs & AI Agents, MITRE ATLAS), ensuring they are accurately represented in the Cybersecurity Risk Register. - Auditability & Observability: Design tamper-evident logging and telemetry standards for agent reasoning chains, tool execution history, and context assembly to support incident response, forensics, and GRC requirements. - Compliance & Sales Enablement: Partner with GRC to translate complex AI security controls into enterprise-ready audit documentation (e.g., ISO 42001, NIST AI RMF, EU AI Act readiness) and support Sales on complex enterprise security inquiries regarding AI safety. Required Skills & Experience - 6+ years of experience in security engineering or security architecture, with at least 2+ years dedicated specifically to AI/ML security, LLM application security, or securing agentic frameworks. - Deep understanding of agentic architectures and protocols (e.g., Model Context. Protocol (MCP), LangChain, AutoGen, CrewAI, ReAct frameworks, and vector database technologies). - Hands-on expertise with threat vectors unique to agentic AI: Indirect Prompt - Injection, Goal Hijacking, Tool Parameter Tampering, Data Poisoning, and Context Contamination. - Strong background in applying safety standards and risk frameworks such as OWASP Top 10 for LLMs & AI Agents, NIST AI RMF, and MITRE ATLAS. - Proficiency in Python, Go, or TypeScript/JavaScript with a proven track record of reviewing code and building functional security tooling or guardrails. - Experience authoring, maintaining, and evangelizing technical security architecture documentation. - Exceptional ability to communicate complex non-deterministic AI risks to both deep technical engineers and executive stakeholders. - Proven track record of contributing to an enterprise Cybersecurity Risk Register. Bonus Qualifications - Experience designing runtime sandboxing and isolation technologies (e.g., Firecracker, gVisor, Docker, WebAssembly) for dynamic code execution environments. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: Montréal We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. Job Overview Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ERP Central Component (ECC), S/4HANA, SAP RISE, SAP Business Technology Platform (BTP), Identity Authentication Service (IAS), and Identity Provisioning Service (IPS). We are bringing more SAP security responsibility in-house and need someone who can guide complex work with technical knowledge, collaboration, and sound judgment, helping keep access to our SAP systems well governed, compliant, and ready for our migration to SAP RISE. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners. Candidates who meet many, but not all, of the qualifications are encouraged to apply. Location and Work Arrangement This role is based at our Montreal, Quebec, Canada office and follows a hybrid schedule designed to support in-person collaboration. Employees are expected to work onsite on Tuesdays, Wednesdays, and Thursdays, with the flexibility to work remotely or onsite on Mondays and Fridays. What You'll Do Build SAP security architecture, standards, access models, and role design practices. Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls. Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements. Lead role cleanup, redesign, simplification, and Segregation of Duties (SoD) remediation. Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance (GRC), covering connectors, workflows, risk rules, provisioning, access analysis, and reporting. Strengthen access provisioning, access reviews, emergency and privileged access oversight. Support Sarbanes-Oxley (SOX) and IT General Controls by collecting evidence, conducting audit walkthroughs, resolving issues, and providing clear documentation. Review access risks, weak role builds, SoD conflicts, insecure configurations, and control gaps. Partner with finance, supply chain, HR, procurement, SAP application teams, enterprise architecture, identity teams, cybersecurity, compliance, audit, and external partners. Provide technical mentorship without formal people-management responsibility. What You'll Bring At least 6 years of relevant experience, or equivalent demonstrated experience, in SAP security, access governance, role development, or related work. Solid understanding of SAP ECC and S/4HANA authorization concepts. Experience in configuring or supporting SAP GRC and SAP Identity Access Governance. Familiarity with SAP BTP, IAS, IPS, and SAP RISE security considerations. Knowledge of Role-Based Access Control, Segregation of Duties, privileged access, user lifecycle management, and access reviews. Experience assisting with SOX, IT General Controls, internal audit, or external audit activities. Ability to guide complex initiatives, communicate clearly, and build trust with technical and business partners. Professional proficiency in French and English is required for this role. English is necessary to communicate and collaborate regularly with colleagues and leaders based in the United States who primarily work in English. What Sets You Apart SAP security certification or related SAP certification. Experience securing SAP RISE environments hosted on AWS or SAP-managed cloud infrastructure. Experience with S/4HANA migration, ERP modernization, hybrid SAP landscapes, or cloud identity integration. Experience in managing emergency access, conducting access certification, automating provisioning, and handling privileged access controls. Experience in a global enterprise environment with complex business processes and audit needs. Who We Are We’re a team of creators, storytellers, and innovators united under the Hasbro family and home to beloved brands, AAA digital games studios and immersive experiences that spark imagination across generations. Together, we’re committed to a culture rooted in creativity, excellence, curiosity, and inclusion, and where every employee is empowered to think boldly, act with integrity, and spark joy for all. Hasbro About the Company – Hasbro Wizards of the Coast Who We Are – Wizards of the Coast Equal Opportunity Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. Accommodations If you have a disability and need reasonable accommodation during the hiring process, please inform your recruiter anytime throughout the process. Notice Regarding Hasbro’s use of AI in the Recruitment Process We use Greenhouse’s AI-powered Talent Matching tool to compare your application against our job requirements. How it works: Talent Matching compares information from your resume and application responses with job-related criteria established and weighted by Hasbro’s recruiting and hiring teams. Depending on the role, these criteria may include relevant skills, work experience, prior job titles, and industry experience. The tool then assigns a match category to help organize applications for review. Human oversight: Talent Matching supports — but does not replace — human review. It does not automatically advance or reject candidates or make employment decisions. Hasbro’s recruiters and hiring managers review applications and remain responsible for all hiring decisions. Greenhouse has published the results of an independent bias audit of Talent Matching. View the Greenhouse Talent Matching audit results . #StudiosWizards Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

Location: Montréal We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. Chez nous, on prend le jeu au sérieux. Nous sommes à la recherche d’aventuriers et d’aventurières curieux, prêts à trouver leur groupe, animés par l’imagination et la détermination de bâtir ce qui ne l’a jamais été. Chez Hasbro et Wizards of the Coast, vous collaborerez avec des équipes passionnées afin de réinventer nos marques emblématiques et de créer des expériences qui suscitent la joie, les liens et le sentiment d’appartenance grâce à la magie du jeu. Voici votre occasion de façonner un jeu légendaire qui dure toute une vie. Aperçu du poste Hasbro est à la recherche d’un analyste principal ou d’une analyste principale en sécurité SAP pour se joindre à son équipe de sécurité des TI à Montréal. Ce poste de contributeur ou contributrice individuel(le) de niveau sénior contribuera à orienter la gouvernance des accès, l’élaboration des rôles, la préparation à la conformité et les contrôles de sécurité à l’échelle de SAP ERP Central Component (ECC), S/4HANA, SAP RISE, SAP Business Technology Platform (BTP), Identity Authentication Service (IAS) et Identity Provisioning Service (IPS). Nous internalisons une plus grande part des responsabilités liées à la sécurité SAP et recherchons une personne capable de piloter des travaux complexes grâce à ses connaissances techniques, à son esprit de collaboration et à son bon jugement, afin de contribuer à maintenir l’accès à nos systèmes SAP bien encadré, conforme et prêt pour notre migration vers SAP RISE. Ce poste n’est pas un poste de gestion de personnel, mais il fournit une orientation technique aux analystes SAP, aux administrateurs et administratrices des accès, aux équipes de projet, aux partenaires d’affaires, aux auditeurs et auditrices ainsi qu’aux partenaires de mise en œuvre. Nous encourageons les personnes qui répondent à plusieurs des qualifications, sans nécessairement toutes les satisfaire, à présenter leur candidature. Lieu et modalités de travail Ce poste est basé à notre bureau de Montréal, au Québec (Canada), et suit un horaire hybride conçu pour favoriser la collaboration en personne. Les employés et employées doivent travailler sur place les mardis, mercredis et jeudis, avec la souplesse de travailler à distance ou sur place les lundis et vendredis. Vos responsabilités Élaborer l’architecture de sécurité SAP, les normes, les modèles d’accès et les pratiques de conception des rôles. Soutenir notre migration vers SAP RISE, y compris la correspondance des rôles, l’intégration des identités, la transition des accès, les accès privilégiés, la connectivité et les contrôles postmigration. Développer et améliorer les modèles de contrôle d’accès basé sur les rôles (RBAC) qui respectent le principe du moindre privilège, répondent aux besoins de l’entreprise et satisfont aux exigences de conformité. Diriger le nettoyage, la refonte et la simplification des rôles, ainsi que la correction des conflits de séparation des tâches (SoD). Mettre en place et maintenir SAP Identity Access Governance et SAP Governance Risk and Compliance (GRC), notamment les connecteurs, les flux de travail, les règles de risque, le provisionnement, l’analyse des accès et la production de rapports. Renforcer le provisionnement des accès, les revues d’accès ainsi que la surveillance des accès d’urgence et privilégiés. Soutenir la conformité à la loi Sarbanes-Oxley (SOX) et aux contrôles généraux des TI en recueillant des éléments de preuve, en menant des séances de présentation pour les audits, en résolvant les problèmes et en fournissant une documentation claire. Examiner les risques liés aux accès, les rôles mal conçus, les conflits de séparation des tâches, les configurations non sécurisées et les lacunes dans les contrôles. Travailler en partenariat avec les équipes des finances, de la chaîne d’approvisionnement, des ressources humaines, des achats, des applications SAP, de l’architecture d’entreprise, de la gestion des identités, de la cybersécurité, de la conformité et de l’audit, ainsi qu’avec des partenaires externes. Offrir un mentorat technique sans responsabilité formelle de gestion de personnel. Ce que vous apportez Au moins 6 ans d’expérience pertinente, ou une expérience équivalente démontrée, en sécurité SAP, en gouvernance des accès, en élaboration de rôles ou dans un domaine connexe. Solide compréhension des concepts d’autorisation de SAP ECC et de S/4HANA. Expérience de la configuration ou du soutien de SAP GRC et de SAP Identity Access Governance. Connaissance des considérations de sécurité liées à SAP BTP, à IAS, à IPS et à SAP RISE. Connaissance du contrôle d’accès basé sur les rôles, de la séparation des tâches, des accès privilégiés, de la gestion du cycle de vie des utilisateurs et des revues d’accès. Expérience de la participation à des activités liées à la conformité SOX, aux contrôles généraux des TI, à l’audit interne ou à l’audit externe. Capacité à guider des initiatives complexes, à communiquer clairement et à établir un lien de confiance avec les partenaires techniques et d’affaires. Une maîtrise professionnelle du français et de l’anglais est exigée pour ce poste. L’anglais est nécessaire pour communiquer et collaborer régulièrement avec des collègues et des leaders basés aux États-Unis qui travaillent principalement en anglais. Ce qui vous distingue Certification en sécurité SAP ou autre certification SAP connexe. Expérience de la sécurisation d’environnements SAP RISE hébergés sur AWS ou sur une infrastructure infonuagique gérée par SAP. Expérience de la migration vers S/4HANA, de la modernisation d’ERP, des environnements SAP hybrides ou de l’intégration des identités infonuagiques. Expérience de la gestion des accès d’urgence, de la réalisation de certifications d’accès, de l’automatisation du provisionnement et de la gestion des contrôles d’accès privilégiés. Expérience dans un environnement d’entreprise mondial caractérisé par des processus d’affaires complexes et des besoins d’audit exigeants. Qui nous sommes Nous sommes une équipe de créateurs et créatrices, de conteurs et conteuses et d’innovateurs et innovatrices réunis au sein de la famille Hasbro, qui regroupe des marques adorées, des studios de jeux numériques AAA et des expériences immersives qui stimulent l’imagination de toutes les générations. Ensemble, nous nous engageons à cultiver une culture fondée sur la créativité, l’excellence, la curiosité et l’inclusion, où chaque employé et employée est habilité(e) à penser avec audace, à agir avec intégrité et à faire naître la joie chez tous. Hasbro À propos de l’entreprise – Hasbro Wizards of the Coast Qui nous sommes – Wizards of the Coast Égalité des chances Hasbro s’engage à assurer l’égalité des chances dans tous les aspects de l’emploi. Nous nous engageons à prendre toutes nos décisions en matière d’emploi sans égard à la race, à la couleur, à la religion, au sexe, à l’orientation sexuelle, à l’identité ou à l’expression de genre, à l’origine nationale, à l’âge, à l’état civil ou à tout autre motif protégé par la loi. Mesures d’adaptation Si vous avez un handicap et avez besoin de mesures d’adaptation raisonnables durant le processus d’embauche, veuillez en informer votre recruteur ou votre recruteuse à tout moment au cours du processus. Avis concernant l’utilisation de l’IA par Hasbro dans le processus de recrutement Nous utilisons l’outil de jumelage de talents (Talent Matching) propulsé par l’IA de Greenhouse pour comparer votre candidature à nos exigences du poste. Fonctionnement : Talent Matching compare les renseignements tirés de votre curriculum vitæ et de vos réponses à la candidature avec des critères liés au poste, établis et pondérés par les équipes de recrutement et d’embauche de Hasbro. Selon le poste, ces critères peuvent comprendre les compétences pertinentes, l’expérience de travail, les titres de postes antérieurs et l’expérience dans le secteur. L’outil attribue ensuite une catégorie de correspondance afin de faciliter l’organisation des candidatures en vue de leur examen. Supervision humaine : Talent Matching appuie l’examen humain, sans le remplacer. L’outil ne fait pas automatiquement progresser ou rejeter des candidatures et ne prend aucune décision d’embauche. Les recruteurs et recruteuses ainsi que les gestionnaires d’embauche de Hasbro examinent les candidatures et demeurent responsables de toutes les décisions d’embauche. Greenhouse a publié les résultats d’un audit indépendant des biais de Talent Matching. Consulter les résultats de l’audit de Greenhouse Talent Matching . #StudiosWizards Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

Location: Boston, MA Workplace: OnSite At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP is seeking a Director, Security Engineering & Operations to lead the teams responsible for enterprise security engineering and security operations. Reporting directly to the CISO and serving as a senior member of the Security leadership team, this leader will shape strategy, lead a growing team of managers, engineers, and analysts, and drive measurable security outcomes across a fast-moving technology environment. This is a leadership role for someone who has successfully scaled security operations in complex, high-growth environments and brings strong security engineering experience. The right leader combines strategic judgment with strong technical depth, staying close enough to the work to set a high bar for engineering quality, guide critical technical decisions, and lead effectively through significant security events. This leader will play a significant role in shaping the team, operating model, and technical roadmap as WHOOP scales, advancing capabilities across security engineering, detection and response, incident management, security automation, identity, cloud, endpoint, SaaS, data protection, and other enterprise security domains. As WHOOP expands its use of AI across member-facing products, internal technology, and engineering, and continues to evolve its capabilities in health, this leader will help ensure security scales alongside the company's technology, data, regulatory, and threat landscape. RESPONSIBILITIES - Lead Security Engineering and Security Operations, defining strategy, priorities, technical standards, performance expectations, and measurable outcomes across both functions. - Advance a risk and threat-informed detection and response program that connects priority threat scenarios to the telemetry, detections, investigation capabilities, response procedures, and operational controls required to address them, including identity-centric, data protection, and insider risk scenarios. - Lead security incident readiness and response, including escalation, incident command for significant events, cross-functional coordination, post-incident review, and accountability for follow-up actions. - Guide the engineering and operationalization of preventive and detective security controls across identity, endpoint, cloud, SaaS, infrastructure, data, AI-enabled systems, and other high-value enterprise environments, while setting a high bar for technical design, testing, documentation, maintainability, and lifecycle management. - Lead the security strategy and engineering approach for AI-enabled products and enterprise AI adoption, including access controls, sensitive data handling, model and application security, third-party integrations, tool and agent permissions, monitoring, auditability, and secure use of AI across the company. - Drive an outcome-oriented approach to security technology and managed services, maximizing the effectiveness of existing capabilities, making disciplined decisions about when to automate, build, buy, or use external partners, and holding security partners accountable to measurable outcomes. - Drive disciplined execution across the security engineering and operations portfolio through effective prioritization, roadmap and backlog management, capacity planning, metrics, ownership, and operating cadence. - Lead, coach, and develop managers, engineers, and analysts, setting clear expectations for technical quality, judgment, ownership, execution, and professional growth. - Strengthen collaboration across Product Security, Security Architecture, Platform, Fraud, Engineering, IT, GRC, Legal, Privacy, and other business functions, creating clear ownership and effective operating relationships across organizational boundaries. - Partner with the CISO on organizational design, workforce planning, hiring, and development of the capabilities required as the Security organization evolves, while providing clear, data-driven communication on security posture, operational performance, significant risks, and strategic priorities. QUALIFICATIONS - 10+ years of experience in information security, with deep experience in Security Operations and meaningful experience across Security Engineering in complex technology environments. - 5+ years of people leadership experience, including multiple years managing managers and senior technical individual contributors. This is not a first-time people leadership role. Demonstrated strength in hiring, coaching, performance management, organizational design, and raising the bar for team quality and execution. - Deep technical expertise in detection engineering, SIEM and telemetry strategy, incident response, and modern security operations, including experience leading significant security incidents. - Proven ability to drive disciplined execution across priorities, roadmaps, backlogs, metrics, and ownership, while maximizing existing capabilities before introducing additional technology. - Experience managing MDR, MSSP, or similar security partners and holding them accountable to measurable operational outcomes. - Experience securing AI-enabled products, enterprise AI adoption, or AI development environments, including risks related to sensitive data, models, agents, third-party services, access, and monitoring. - Strong judgment and relationship-building skills, with a track record of working effectively across technical, product, risk, legal, and senior leadership teams. - Experience in health technology or another sensitive-data environment is a plus. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.   Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $220,000-$245,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: Greenwich, Connecticut, United States; Stamford, Connecticut, United States About the Role iCapital is seeking an experienced cybersecurity risk professional to serve as Assistant Vice President, Third-Party Risk & Client Assurance Manager. This individual will lead a team of approximately five professionals across two complementary cybersecurity risk functions: Third-Party Risk Management (TPRM) and Client Assurance. The ideal candidate will be a hands-on leader who can effectively manage, mentor, and develop team members while also possessing the technical knowledge and practical experience necessary to perform the work of either function, when needed. This role requires strong cybersecurity risk assessment skills, excellent written and verbal communication, sound judgment, and the ability to manage competing priorities and relationships with internal stakeholders, third-party vendors, clients and prospective clients. This individual will be responsible for supporting organization's clients and prospective clients by providing timely, accurate, and consistent responses to cybersecurity due diligence and assurance requests while also ensuring that third-party (vendor) cybersecurity risks are appropriately identified, assessed, documented, and escalated. Responsibilities Lead, manage, and mentor a team of approximately five professionals supporting Third-Party Risk and Client Assurance activities. Provide day-to-day directions, coaching, technical guidance, and professional development to team members. Establish clear expectations, priorities, and accountability across both functions. Review team deliverables to ensure assessments and client responses are accurate, complete, consistent, and appropriately supported. Serve as an escalation point for complex cybersecurity risk assessments, client inquiries, vendor issues, and competing business priorities. Maintain the ability to work directly on assessments and client assurance requests when workload, complexity, or business needs require additional support. Identify opportunities to improve team processes, documentation, quality, efficiency, and scalability. Develop and monitor appropriate metrics and reporting to communicate workload, performance, risk trends, and program effectiveness to management. Qualifications 10 years of relevant professional experience, with significant experience in cybersecurity, information security risk management, technology risk, third-party risk management, client assurance, or related disciplines Demonstrated experience completing or reviewing cybersecurity due diligence questionnaires and responding to client or customer security inquiries Demonstrated experience performing cybersecurity risk assessments of third-party vendors Prior experience leading, mentoring, or managing cybersecurity, risk, or assurance professionals Able to manage multiple concurrent assessments, client requests, deadlines, and priorities in a fast-paced environment Ability to operate effectively, including independently managing responsibilities, exercising sound judgment, influencing stakeholders, and escalating material issues appropriately Strong working knowledge of cybersecurity controls and concepts, including identity and access management, vulnerability and patch management, security monitoring and incident response, data protection and encryption, network and infrastructure security, cloud security, secure software development, business continuity and disaster recovery, and security governance and risk management Experience reviewing cybersecurity assurance documentation such as SOC 1/SOC 2 reports, ISO 27001 certifications, penetration testing reports, security policies, and related control evidence Strong analytical skills and the ability to distinguish meaningful cybersecurity risks from lower-impact observations Excellent written communication skills, including the ability to translate complex technical concepts into clear, concise language appropriate for clients, vendors, business stakeholders, and senior management Strong interpersonal skills and the ability to work effectively with both technical and non-technical stakeholders Bachelor's degree in cybersecurity, information technology, computer science, risk management, or related discipline, or equivalent professional experience is preferred and master’s degree in the same is a plus Relevant professional certifications such as CISSP, CISM, CRISC, CISA, or equivalent is a plus Experience within financial services or another highly regulated industry is a plus Experience with third-party risk management, GRC, questionnaire automation, or client assurance platforms is a plus Experience developing metrics, reporting, procedures, and governance processes for cybersecurity risk or assurance programs is a plus Benefits The base salary range for this role is $100,000 to $140,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday. For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/ iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Location: Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role We are seeking an experienced Security Engineering Lead to join the Cyber Security organization, reporting to the Corporate Security Engineering Manager under the CISO. This is a senior technical lead role focusing on engineering and execution without direct people management responsibilities. This role combines hands-on security engineering to deliver end-to-end protection across corporate, cloud, and SaaS environments. You will not only define strategy and standards - you will build, configure, tune, and operate the technical controls that enforce them. You will be responsible for implementing, managing, integrating and maintaining security systems across the organization’s IT landscape. The role requires deep technical proficiency in multiple platforms and tools, combined with the ability to collaborate with Security, IT, Engineering, Product, GRC and other business units to reduce risks and embed strong security practices. Your responsibilities will include: Engineer, deploy, and continuously tune systems such as Identity & Access, Threat Detection & Response, Cloud & Network Security. Define, enforce and maintain security policies & configurations across endpoints, email, SaaS, network, and cloud platforms. Design and implement solutions to gain continuous visibility into systems and processes, sensitive data, data flows, misconfigurations, and exposure risks across cloud and multi-cloud environments. Monitor, triage, and investigate security alerts and risks, collaborating with Security, IT, Network teams on escalation and remediation. Conduct risk assessments and identify gaps in security controls across systems, pipelines, and business processes. Support compliance and regulatory requirements (e.g., GDPR, ISO 27001, SOC 2) related to security and privacy. Collaborate with Engineering, IT, Product, and GRC teams to embed security controls into systems, and workflows. Maintain documentation, runbooks, and guidelines for operations, security posture management, and security practices. We expect you to have: 6+ years of experience in IT security, with a strong focus on System, Network, Information, Cyber. With at least 3 years in a Security Engineering role. Proven hands-on engineering experience with enterprise security platforms - including policy authoring, tuning, incident workflow configuration, and platform administration. Experience securing data across cloud environments and SaaS platforms, including shadow IT and unmanaged data stores. Strong understanding of identity and access management and data access governance principles. Experience working cross-functionally with Security, IT, Engineering, Product, and GRC teams. Strong analytical mindset with the ability to communicate security risks clearly to technical and non-technical stakeholders. Excellent written and verbal communication skills in English. Proactive, detail-oriented, and ownership-driven. Hand-on experience with multiple technologies such as: XDR (Extended Detection & Response), SWG (Secure Web Gateway), DLP (Data Leakage Prevention), Email Security, Network security (Firewalls, NAC, NDR), IGA (Identity Governance & Administration), CASB (Cloud Access Security Broker), PAM (Privileged Access Management), EPM (Endpoint Privilege Management), BAS (Breach & Attack Simulation), Vulnerability Scanners, SIEM (Security Information & Event Management), SOAR (Security Orchestration, Automation & Response), CTI (Cyber Threat Intelligence), Patch Management, TPRM (Third-Party Risk Management), EASM (External Attack Surface Management). It will be an added bonus if you have: Experience building or scaling a security program from the ground up in a growing organization. Experience with cloud-native security services (AWS, Azure, Google). Knowledge of privacy and regulatory frameworks (GDPR, ISO 27001, SOC 2). Scripting or automation skills (Python, PowerShell). Relevant certifications such as CISSP, CISM. BSc in Computer Science, Information Security, or a related field. Project & people management experience. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: United States Workplace: Remote The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our detection and incident response capabilities.   What you will do: - Develop processes, tooling and automation to scale incident management response and mitigate risks to the business - Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation - Apply a threat modeling centric approach to incident detection and response - Maintain security logging platform - Stay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management - Handle information security events and incidents across the ClickHouse products and services What you bring along: - Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience - Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure) - Excellent written and verbal communication skills - Experience securing large-scale customer-facing cloud infrastructures - Significant development and automation experience; preference for Golang and Python Bonus Points: - BS, MS, or PhD in Computer Science or related field - Previous contributions to open source projects - Security or cloud related certifications (AWS, GCP, Azure) PERKS - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new team member who joins our company receives stock options. - Time off - Flexible time off in the US, generous entitlement in other countries. - A USD$500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. CULTURE - WE ALL SHAPE IT As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse. EQUAL OPPORTUNITY & PRIVACY ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.

Location: United States Workplace: Remote The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our detection and incident response capabilities.   What you will do: - Develop processes, tooling and automation to scale incident management response and mitigate risks to the business - Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation - Apply a threat modeling centric approach to incident detection and response - Maintain security logging platform - Stay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management - Handle information security events and incidents across the ClickHouse products and services What you bring along: - Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience - Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure) - Excellent written and verbal communication skills - Experience securing large-scale customer-facing cloud infrastructures - Significant development and automation experience; preference for Golang and Python Bonus Points: - BS, MS, or PhD in Computer Science or related field - Previous contributions to open source projects - Security or cloud related certifications (AWS, GCP, Azure)   PERKS - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new team member who joins our company receives stock options. - Time off - Flexible time off in the US, generous entitlement in other countries. - A USD$500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. CULTURE - WE ALL SHAPE IT As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse. EQUAL OPPORTUNITY & PRIVACY ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.

Location: San Francisco, CA Workplace: OnSite ABOUT US Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Sierra was co-founded by Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/ who first met while working together at Google over 20 years ago. Bret currently serves as Chairman of the Board of Open AI. Previously, he was co-CEO of Salesforce and CTO of Facebook. Clay spent 18 years at Google, where he most recently led Google Labs. We’re looking for a hands-on IT Infrastructure Engineer to help scale Sierra’s internal systems during a critical period of growth. You’ll be the second member of our IT Engineering team, partnering closely with our IT Lead, GRC Lead, and Platform Engineering team to build and operate the systems that support our company day-to-day. This is an engineering-first role. Our team approaches IT the same way product engineering teams build software: through code, automation, and well-designed systems. We build internal tools, ship integrations, and operate CI/CD-style workflows to manage identity, security, and infrastructure at scale. This is a foundational role with significant ownership. You’ll help design and implement core infrastructure, strengthen security controls, and improve how we operate internally. The right person enjoys building high-leverage systems, automating repetitive work, and creating well-documented, scalable solutions that make the entire company more effective. WHAT YOU'LL DO In your first few months, you’ll focus on: - Iterating on and improving internal tools that power IT and security workflows - Deploying a DLP solution and integrating it into automated enforcement pipelines - Building API-driven integrations between internal systems and our compliance automation platform More broadly, you will: - Design and scale internal infrastructure using code and infrastructure-as-code practices - Build and maintain internal tools and services - Improve and develop automation pipelines for provisioning, access management, and security controls - Treat IT systems like software: versioned, tested, and continuously improved - Partner with Platform Engineering and Security to implement scalable, programmatic solutions - Create clear, durable documentation to support long-term scalability WHAT YOU’LL BRING - Think of IT problems as engineering problems, and default to building over manual work - Have strong experience with identity platforms (Okta, Google Workspace, SSO, MFA, SCIM, OIDC) - Have deployed or managed DLP or related security solutions (e.g., ZTNA, Cloudflare) - Have extensive experience with IaC (Terraform) - Are comfortable writing code for automation (e.g., Python, Bash, or similar) - Have experience building internal tools or services that integrate via APIs - Are comfortable working with CI/CD concepts and automation pipelines - Are fluent in using and administering modern AI tooling - Understand SaaS lifecycle management and compliance requirements - Communicate clearly and document your systems well - Are comfortable operating independently in a fast-moving environment EVEN BETTER... - Background in software engineering or prior experience on a product engineering team - Experience building internal platforms or developer tooling - Familiarity with security tooling such as CASB, EDR, or MDM - Experience with access audits, data residency, or compliance controls - Experience deploying systems using AWS and infrastructure-as-code OUR VALUES - Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work. - Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it. - Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve. - Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time. - Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements. WHAT WE OFFER We want our benefits to reflect our values and offer the following to full-time employees: - Flexible (unlimited) paid time off - Medical, dental, and vision benefits for you and your family - Life insurance and disability benefits - Retirement plan dependent on country of employment - Parental leave - Fertility and family building benefits - Lunch, as well as delicious snacks and coffee to keep you energized when working onsite - Discretionary benefit stipend giving people the ability to spend where it matters most - Free alphorn lessons These benefits are further detailed in Sierra's policies, may vary by region and employment type, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies. BE YOU, WITH US We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply through the link on this page even if your experience doesn't precisely match the job description. Sierra is a proud equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable federal, state or local laws, including veteran status and disability status. Hiring decisions are made by people, based on merit. If you need a reasonable accommodation for a disability, a religious practice, pregnancy or any related condition at any point in the application or interview process, contact us at accommodations@sierra.ai. Requests are handled confidentially and do not affect your candidacy. We will consider qualified applicants with arrest and conviction records in accordance with applicable fair chance laws.

Location: Poland; Portugal; Ireland; Germany Workplace: Remote Attio is the CRM for agentic revenue. Designed for the most ambitious go-to-market teams, it gives companies the power to understand every customer, automate at scale, and build their go-to-market motion exactly as they need. We've raised $116M from some of the world's best investors: GV (Google Ventures), Redpoint, Balderton, Point Nine, and 01A. We hire builders who thrive on complex technical challenges, hold themselves to a high bar, and genuinely care about delighting the people who use what they build. The team here brings sharp judgement, real craft, and the drive to do exceptional work. We're obsessed about the details and energized by the frontier. If you want to do the best work of your career, this is the right place. ABOUT THE ROLE Attio is an AI-native platform trusted with our customers' most sensitive data - and keeping that data secure is foundational to everything we build. As we scale, so does the challenge: a large multi-tenant SaaS platform, AI-driven product features that introduce entirely new attack surfaces, and an engineering team shipping fast with AI-assisted development. We're looking for a Security Engineering Lead to build and lead Attio's Product Security function, spanning application security and security operations. You'll work alongside our Engineering Leadership to make Attio secure by design, lead the response when things go wrong, and recruit a world-class team of Security Engineers and SecOps practitioners. This is a rare opportunity to define how security works at a company operating at the frontier of AI. This is a hands on engineering role with team leadership responsibility over our growing product security function. You will not be responsible for GRC, we want you focussed on building.   WHAT YOU’LL DO - Build and lead Attio’s Product Security function. Secure Attio’s large-scale, AI-native SaaS platform, and the sensitive customer data on which it operates. - Work with Engineering Leadership peers to ensure that Attio is secure by design. - Understand and mitigate the unique risks and attack vectors associated with AI-driven product features, and AI-assisted software development. - Ensure that Attio is at the forefront of secure software development and operational practices. - Lead production security incident response; deeply understand security issues and their associated root causes and risks, create remediation plans, and drive to resolution. - Recruit and retain a world-class team of Security Engineers and SecOps practitioners.   WHAT YOU’LL BRING - Full understanding of the Application Security landscape in a high scale, multi-tenant SaaS context. - Appreciation of the tools and techniques used to secure SaaS applications, through prevention, detection and remediation of security issues. Understanding of how to integrate those tools into an effective, scalable, cost-efficient program that delivers a secure service. - First-class incident response skills, through the entire incident lifecycle of detection, remediation, clean-up, and post-incident corrective action. - Experience leading a team with line management. You should be a mentor who can recruit, retain and develop a high-quality Product Security team that continues to deliver for the business as Attio scales. DESIRABLE - Background in software engineering - Experience of running an Application Security program in a high scale, multi-tenant SaaS context. - Experience of hiring and managing a team of Security Engineers, and working with cross-functional partners. - Experience of security certification and re-certification programs. - Project or program management experience.   WHAT WE OFFER - Competitive salary of €120,000 to €145,000 - Equity in an early-stage tech company on an incredible trajectory - Apple hardware - Team off-site in fun places! (We've been to Barcelona, Lisbon, Malta, and Split so far) - Location specific benefits   nb. We are open to candidates currently living in: Poland, Germany, Portugal, Ireland

Location: United Kingdom Workplace: Remote Attio is the CRM for agentic revenue. Designed for the most ambitious go-to-market teams, it gives companies the power to understand every customer, automate at scale, and build their go-to-market motion exactly as they need. We've raised $116M from some of the world's best investors: GV (Google Ventures), Redpoint, Balderton, Point Nine, and 01A. We hire builders who thrive on complex technical challenges, hold themselves to a high bar, and genuinely care about delighting the people who use what they build. The team here brings sharp judgement, real craft, and the drive to do exceptional work. We're obsessed about the details and energized by the frontier. If you want to do the best work of your career, this is the right place. ABOUT THE ROLE Attio is an AI-native platform trusted with our customers' most sensitive data - and keeping that data secure is foundational to everything we build. As we scale, so does the challenge: a large multi-tenant SaaS platform, AI-driven product features that introduce entirely new attack surfaces, and an engineering team shipping fast with AI-assisted development. We're looking for a Security Engineering Lead to build and lead Attio's Product Security function, spanning application security and security operations. You'll work alongside our Engineering Leadership to make Attio secure by design, lead the response when things go wrong, and recruit a world-class team of Security Engineers and SecOps practitioners. This is a rare opportunity to define how security works at a company operating at the frontier of AI. This is a hands on engineering role with team leadership responsibility over our growing product security function. You will not be responsible for GRC, we want you focussed on building.   WHAT YOU’LL DO - Build and lead Attio’s Product Security function. Secure Attio’s large-scale, AI-native SaaS platform, and the sensitive customer data on which it operates. - Work with Engineering Leadership peers to ensure that Attio is secure by design. - Understand and mitigate the unique risks and attack vectors associated with AI-driven product features, and AI-assisted software development. - Ensure that Attio is at the forefront of secure software development and operational practices. - Lead production security incident response; deeply understand security issues and their associated root causes and risks, create remediation plans, and drive to resolution. - Recruit and retain a world-class team of Security Engineers and SecOps practitioners.   WHAT YOU’LL BRING - Full understanding of the Application Security landscape in a high scale, multi-tenant SaaS context. - Appreciation of the tools and techniques used to secure SaaS applications, through prevention, detection and remediation of security issues. Understanding of how to integrate those tools into an effective, scalable, cost-efficient program that delivers a secure service. - First-class incident response skills, through the entire incident lifecycle of detection, remediation, clean-up, and post-incident corrective action. - Experience leading a team with line management. You should be a mentor who can recruit, retain and develop a high-quality Product Security team that continues to deliver for the business as Attio scales. DESIRABLE - Background in software engineering - Experience of running an Application Security program in a high scale, multi-tenant SaaS context. - Experience of hiring and managing a team of Security Engineers, and working with cross-functional partners. - Experience of security certification and re-certification programs. - Project or program management experience. WHAT WE OFFER - Competitive salary of £120,000 to £150,000 - Equity in an early-stage tech company on an incredible trajectory - 25 days holiday plus local public holidays - Apple hardware - Private medical insurance through AXA - Pension contribution through Hargreaves Lansdown - Enhanced family leave - Team off-site in fun places! (We've been to Barcelona, Lisbon, Malta, and Split so far)