Location: Belgrade
Workplace: onsite
About Unlimit
Unlimit is a global fintech ecosystem built to eliminate financial borders holding businesses back. The company provides the extensive infrastructure needed to scale globally, integrating payment processing, multi-currency business accounts, BaaS and crypto gateways into a single, intelligent platform.
Across 17 offices globally, Unlimit bridges hyper-local expertise with a high-capacity financial network, giving companies the agility to expand across regions with operational confidence and speed. Driving the evolution of payments, Unlimit is transforming its infrastructure from human-operated fintech into AI-native financial infrastructure — where APIs are consumed by machines, integrations are negotiated by agents, and systems evolve continuously through intelligent automation. Our next users are not only humans. They are AI agents acting on behalf of humans and businesses.
Unlimit serves more than the needs of businesses today; we are building the nervous system for a borderless global economy.
What You'll Be Doing
As a Senior Infrastructure Security & Operations Engineer, you’ll be a hands-on technical expert responsible for strengthening Unlimit’s infrastructure security and operational cyber defence capabilities.
You’ll combine security engineering, detection and response, vulnerability management, and cloud security expertise to protect our technology ecosystem against evolving threats.
A major part of this role will involve transforming traditional security operations through AI-powered and agentic automation. You’ll design and build intelligent security workflows, automate investigations and response activities, and continuously improve the effectiveness and efficiency of our cyber defence capabilities.
This role is ideal for an experienced infrastructure or security engineer who combines strong systems engineering fundamentals with practical security operations experience, advanced automation skills, and a passion for building modern, AI-driven security solutions.
What You’ll Do
Own and continuously improve infrastructure security controls across Unlimit’s global technology environment.
Operate and enhance internal Security Operations, including security monitoring, alert triage, incident investigation, and response.
Develop and maintain detection engineering capabilities, including SIEM correlation rules, detection use cases, log analysis, and security monitoring integrations.
Conduct proactive threat hunting and leverage cyber threat intelligence to identify emerging threats and improve defensive capabilities.
Lead technical incident response activities, including investigation, containment, remediation, and post-incident improvements.
Manage infrastructure vulnerability assessment and remediation processes, including vulnerability scanning, prioritisation, tracking, and validation.
Implement and continuously improve infrastructure hardening and security configurations across servers, endpoints, networks, and cloud environments.
Develop and maintain security controls across AWS, Kubernetes, and containerised environments.
Own and optimise endpoint protection and detection capabilities, including EDR/XDR technologies.
Contribute to network security, directory security, and infrastructure security architecture reviews.
Administer, integrate, and continuously improve security technologies, including SIEM, EDR/XDR, vulnerability management, and infrastructure security platforms.
Coordinate external penetration testing activities within the infrastructure security scope, validate findings, and support remediation.
Provide technical support for IT and Information Security audits, including evidence collection, technical control validation, and remediation of identified gaps.
Collaborate closely with Infrastructure, DevOps, Engineering, and Application Security teams to implement practical and scalable security improvements.
AI & Agentic Security Automation
Design, develop, and maintain AI-powered and agentic security automation as a core part of Cyber Security operations.
Build autonomous and semi-autonomous workflows for security alert triage, investigation, enrichment, and response.
Develop AI-assisted detection engineering, threat hunting, and threat intelligence processing capabilities.
Automate vulnerability analysis, risk-based prioritisation, and remediation workflows.
Build custom security integrations, automation scripts, and internal security tools using Python, APIs, and modern AI development frameworks.
Leverage LLMs and agentic development tools, including Claude, to improve security operations efficiency and engineering productivity.
Ensure AI-powered security workflows incorporate appropriate validation, access controls, and human oversight for sensitive or high-impact actions.
What We’re Looking For
6+ years of hands-on engineering experience, including at least 4 years in Cyber Security, Infrastructure Security, or Security Operations.
Strong technical background in IT infrastructure, systems engineering, cloud engineering, or platform engineering.
Proven experience implementing and maintaining infrastructure security controls in complex production environments.
Hands-on experience with Security Operations, SIEM, detection engineering, incident response, and threat hunting.
Strong understanding of modern cyber attack tactics, techniques, and procedures (TTPs), including MITRE ATT&CK.
Practical experience with EDR/XDR, vulnerability management, and security monitoring technologies.
Solid understanding of Linux, networking, operating system security, and infrastructure hardening.
Experience securing AWS environments, Kubernetes clusters, and containerised workloads.
Strong Python development skills and experience building security automation, integrations, and internal tools.
Practical experience developing AI-powered and agentic solutions, including LLM integrations, tool orchestration, autonomous workflows, and AI-assisted automation.
Experience integrating security controls and automation into infrastructure and DevOps workflows.
Ability to independently investigate complex security issues, identify root causes, and implement effective technical solutions.
Strong analytical and problem-solving skills, with an engineering-first approach to security.
Ability to work independently while collaborating effectively with Infrastructure, DevOps, Engineering, and Security teams.
Technical Experience
Hands-on experience with several of the following technologies is highly desirable:
Security Operations: CrowdStrike, Elastic Security / Elasticsearch, Tenable.
Cloud & Infrastructure: AWS, Kubernetes, container technologies, Cloudflare.
Engineering & Automation: Python, Terraform, GitLab, REST APIs.
AI & Agentic Development: Claude, LLM APIs, agentic frameworks, tool integrations, and AI-powered workflow orchestration.
Nice to Have
Previous experience in fintech, financial services, payments, or large-scale regulated e-commerce environments.
Experience building AI-powered SOC capabilities or autonomous security operations workflows.
Experience developing custom detection rules, security integrations, or open-source security tools.
Knowledge of infrastructure security architecture and secure cloud design.
Experience with offensive security techniques, infrastructure penetration testing, or adversary simulation.
Relevant security, cloud, or engineering certifications.
Join Unlimit Team now!
Unlimit is an equal opportunity employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We welcome applications from all members of society irrespective of age, sex, disability, sexual orientation, race, religion or belief.
Location: United States
At Reltio®, an SAP Company, we believe data should fuel your success in the enterprise AI era. Our Context Intelligence Platform turns fragmented data into a trusted, connected context so AI agents and systems can act with expert-level judgement at enterprise scale. Reltio’s cloud-native SaaS platform harmonizes, unifies, and governs data across sources and formats—including unstructured data—in real time, turning them into data assets that can be mobilized in milliseconds to any application, user, or AI agent. Trusted by more than 200 of the world’s largest brands across industries such as life sciences, financial services, healthcare, and technology, we fuel frictionless operations and help enterprises accelerate innovation and reduce risk.
At Reltio, our values guide everything we do. With an unyielding commitment to prioritizing our “Customer First”, we strive to ensure their success. We embrace our differences and are “Better Together” as One Reltio. We are always looking to “Simplify and Share” our knowledge when we collaborate to remove obstacles for each other. We hold ourselves accountable for our actions and outcomes and strive for excellence. We “Own It”. Every day, we innovate and evolve, so that today is “Always Better Than Yesterday”. If you share and embody these values, we invite you to join our team at Reltio and contribute to our mission of excellence.
Reltio has earned numerous awards and industry and analyst recognition for our technology, our culture and our people. Reltio was founded on a distributed workforce and offers flexible work arrangements to help our people manage their personal and professional lives. If you’re ready to work on unrivaled technology where your desire to be part of a collaborative team is met with a laser-focused mission to enable digital transformation with connected data, let’s talk!
Job Summary:
As a senior individual contributor on the Application Security team, the Staff Application Security Engineer will help to define and drive Reltio’s application and product security architecture across a distributed, cloud-native SaaS platform. This role helps in the technical direction for securing how Reltio designs, builds, and ships software—helps to define the strategy and roadmap for secure SDLC, shift-left automation, and the secure adoption of API-driven and AI/agentic technologies.
The Staff Application Security Engineer will partner with the Engineering, DevOps, Product, and Release Management teams to embed security as a foundational part of software design and delivery. The successful candidate will set standards, mentor and uplevel other security and engineering staff, lead complex threat modeling and architecture reviews, and develop novel techniques to identify and stop application- and AI-layer attacks—protecting Reltio’s intellectual property and customer data globally.
Job Duties and Responsibilities:
Security Architecture & Technical Leadership
Serve as the senior application security subject matter expert, providing guidance on industry best practices, secure design patterns, and defense-in-depth strategies for the product security architecture.
Helps to define and drive the overall application/product security architecture, vision, strategy, and roadmap across Reltio’s platform and services.
Influence engineering architecture and roadmap decisions without direct authority, driving risk-based consensus across teams.
Mentor and uplevel application security engineers and development teams, raising the secure-coding maturity of the broader organization.
Secure Development Lifecycle & Shift-Left
Embed security throughout the SDLC, from design through deployment, and define secure coding standards and best practices adopted across teams.
Drive shift-left initiatives by providing guidance, tooling, paved-road patterns, and remediation support that enable engineers to build securely from the outset.
CI/CD Pipeline Security
Design and implement security controls within CI/CD pipelines, enabling automated security testing and vulnerability detection at scale.
Operationalize SAST, SCA, DAST, and secrets scanning as policy-driven, low-friction gates; partner with release management on secure deployment checks and policy compliance.
Threat Modeling & Risk Assessment
Lead threat modeling sessions for complex, high-impact systems to identify and mitigate security risks early in design and architecture phases.
Perform technical risk assessments of new technology and ensure solutions meet secure architecture designs; assess, measure, and clearly communicate risk impact to stakeholders.
Vulnerability Management
Analyze and validate remediation of application security findings from SAST, SCA, DAST, API testing, penetration tests, and manual assessments.
Drive risk-based prioritization of fixes, reduce false positives, and provide clear, actionable remediation guidance with proper pre-release validation.
API Security
Partner with engineering to ensure secure API design and implementation; identify and mitigate authentication/authorization issues, data exposure, rate-limiting gaps, and OWASP API Top 10 risks.
AI & Agentic Security (Guardrails, MCP, LLM)
Helps to define AI security guardrails for Reltio’s AI and multi-agent platforms, addressing prompt/output validation, insecure model usage, data leakage, and tenant-isolation concerns.
Establish security standards for Model Context Protocol (MCP) servers and tools—covering tool authorization, scoping, and abuse prevention—and lead threat modeling of agentic workflows (autonomous tool use, indirect prompt injection, excessive agency).
Develop new and novel defense techniques to detect and stop advanced application- and AI-layer adversary tactics, and evaluate AI-assisted security tooling to scale detection and remediation.
Penetration Testing & Security Validation
Perform and oversee application, API, and AI/agent penetration testing; build and curate test payloads (including prompt-injection and guardrail bypass suites) and validate control effectiveness.
Training, Collaboration & Continuous Improvement
Deliver secure-coding, API, and AI-security guidance and hands-on support during code and design reviews.
Partner with DevOps, QA, Engineering, Product, and Release Management to integrate security requirements throughout development and release.
Stay current on emerging application, API, and AI/agentic security threats and continuously improve security processes, tooling, and overall posture.
Investigate security events and incidents leveraging security tooling, and support customer-facing security communications as needed.
Skills You Must Have:
8+ years of experience in application security or software development, including significant time in a cloud-native or SaaS environment.
Demonstrated technical leadership as a senior individual contributor: setting standards, driving cross-team initiatives, and influencing architecture without direct authority.
Hands-on experience with secure coding practices and modern application development; proficiency leading secure code reviews.
Strong understanding of cloud well-architected frameworks, application development, and deployment workflows.
Strong understanding of application security vulnerabilities (OWASP Top 10) and prevention strategies.
Strong understanding of API security principles and the OWASP API Top 10.
Experience integrating security into CI/CD and release management processes (e.g., Jenkins, ArgoCD, or similar).
Experience with application security testing methodologies—SAST, SCA, and DAST—integrated into CI/CD pipelines.
Experience with AI security concepts, including guardrails, prompt and output validation, data protection, and MCP security.
Hands-on experience with web technologies such as Java, Java Spring Boot, JavaScript, Node.js, C#, modern UI frameworks, microservices, and cloud-native/serverless architectures.
Experience with AWS, GCP, and/or Azure, and securing containerized environments and Kubernetes.
Hands-on experience with Burp Suite Pro for web and API testing.
Experience with modern application security platforms, with Wiz preferred (other AppSec tools acceptable).
Strong communication and presentation skills, with the ability to educate, collaborate, and drive risk-based consensus.
Self-starter with a history of driving technical initiatives; adaptable, agile, and effective in global, distributed teams.
Skills That Are Nice to Have:
Hands-on experience securing LLM applications and multi-agent systems, including agentic guardrail frameworks (e.g., NeMo Guardrails, AWS Bedrock Guardrails) and MCP gateway/tool security.
Experience building or operationalizing AppSec automation/orchestration (SAST/SCA/secrets + AI analysis) and defect-management integration (e.g., DefectDojo).
Experience with commercial AppSec/SCA platforms such as Wiz Code, Veracode, Checkmarx, Cycode, or SonarQube.
Experience developing and operationalizing a vulnerability management or product security program at scale.
Experience with industry frameworks such as SOC 2, HITRUST, or ISO 27001, and supporting audit/customer-assurance processes.
Applying ML/AI techniques to enhance security detection, anomaly identification, and automated risk prioritization.
Relevant security and cloud certifications.
At Reltio, we carefully consider a wide range of compensation factors to determine your personal top of market. We rely on market indicators to determine compensation and your specific job family, background, skills, and experience to get it right. These considerations can cause your compensation to vary and will also be dependent on your location.
Overall Market Range
$145,000
—
$207,000 USD
Reltio is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Reltio is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.
Location: Prague, Czechia; Lisbon, Portugal; Madrid, Spain
CloudLinux
is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful.
Check out our website for more information:
cloudlinux.com
We are currently hiring
Staff Engineers
for various projects within the
Imunify360 product.
Imunify360 is CloudLinux's multi-layer security suite for Linux web servers: antivirus and malware cleanup, WAF, IDS/IPS, Proactive Defense, patch management (KernelCare/Patchman), and IP/domain reputation. It runs on hundreds of thousands of shared, VPS and dedicated hosting servers, under cPanel, Plesk, DirectAdmin and standalone.
The engineering org is 60+ engineers in squads covering backend, core, server agent, malware research, WAF/WebShield, and Patchman. Core services are Python; agents and performance-critical paths are Go and Rust. We run on Hetzner and our own bare metal.
Check out our website for more information:
https://imunify360.com/
Role Mission & Scope
Most complex technical challenges in Imunify360 go beyond individual squads. A single detection change can impact the scanner, agent, UI, reputation backend, and release process. While squad leads own delivery within their teams, the Staff Engineer ensures technical alignment across the product.
As a Staff Engineer, you'll be a
hands-on technical leader working across the entire product
, focusing on the most critical and high-impact challenges as priorities evolve. You'll drive technical decisions, improve architecture, establish engineering standards, and help teams build sustainable solutions.
This is an
individual contributor role
, without direct people management responsibilities. You'll remain actively involved in development, spending approximately
30–50% of your time writing production code
, rather than focusing solely on architectural design.
While deep expertise in a particular area is valued, this role requires the flexibility to work across different components, collaborate with multiple squads, and tackle challenges wherever your expertise can make the greatest impact.
What you will own
Architecture and technical direction
Own the end-to-end architecture of Imunify360 as a product: agent ↔ server ↔ cloud backends, data flows, and the contracts between them.
Write and drive ADRs and RFCs for cross-squad changes. Run the Wed/Fri architecture sync together with the Technical Director.
Keep a living tech-debt and risk register (security / compliance / uptime) with owners and dates, and get the top items funded on the roadmap.
Hard cross-cutting problems (examples of what lands on your desk)
Agent resource footprint on dense shared hosts: CPU, memory and I/O budgets for scanning, file monitoring (inotify/fanotify) and WAF, measured on real kernels, not benchmarks from elsewhere.
Detection pipeline quality: false positive / false negative rates, signature and ML model rollout with staged gates and rollback.
Upgrade and release safety across a large, heterogeneous fleet (CentOS/AlmaLinux/CloudLinux/Ubuntu, multiple control panels, old kernels).
Backend scale and cost of reputation, ThreatIntel and telemetry services.
Migrating hot paths from Python to Go/Rust where the data shows it pays off, and saying no where it doesn't.
Engineering standards
Set the bar for design reviews, code review, testing strategy, observability (Prometheus/Grafana/Sentry) and secure SDLC (OWASP ASVS, CIS Benchmarks as relevant).
Lead or co-lead SEV1/SEV2 incidents when the cause is unclear or cross-squad; make sure the blameless post-mortem ships within 24 h and its actions get closed.
Drive the AI-augmented SDLC in practice: show what good agentic coding looks like (prompt specificity, context provision, review quality, tool boundaries) on real changes, not slides.
People multiplier (no direct reports)
Mentor senior engineers and squad leads toward staff-level scope.
Act as the technical bar-raiser in hiring loops for senior and lead roles.
Be the engineering voice in product and sales discussions: estimates, feasibility, and no dated customer commitment without a written squad-lead estimate.
Key Milestones
30 days: Shipped at least one non-trivial change to production. Can explain the full request path from agent to backend. Has a personal list of top 10 technical risks.
90 days: Owns one cross-squad initiative with an approved ADR, a measured baseline, and a staged rollout plan. Published risk register reviewed in arch sync.
6 months: That initiative is in production with before/after metrics. At least one engineering standard (e.g. release gating, agent perf budget, design review template) is adopted by 3+ squads.
12 months: Recognized by squad leads as the default escalation point for cross-cutting technical decisions. At least one senior engineer grown into broader scope with your mentorship.
Requirements
Must have
10+ years building and operating production software, with 3+ years in a Staff/Principal/Tech Lead scope spanning several teams.
Strong production experience in
Python
and at least one of
Go
or
Rust
.
Deep
Linux internals
: processes, filesystems, networking, kernel interfaces (inotify/fanotify, eBPF or similar), packaging (RPM/DEB), systemd.
Track record of designing and running
distributed systems
at scale: async backends, queues, databases, caching, failure modes.
You have owned systems that run
on customer machines
(agents, daemons, on-prem software) and know what upgrade safety, backward compatibility and resource budgets mean there.
Security mindset: threat modeling, secure coding, handling of untrusted input (files, HTTP traffic, user content).
Writes clear, short technical documents and drives decisions in async, remote teams across time zones.
Uses AI coding tools (Cursor, Claude, MCP-based tooling) daily and can judge their output critically.
Nice to have
Experience in server security: AV/malware detection, WAF (ModSecurity/Coraza), IDS/IPS, rootkit detection, CVE/patch management.
Experience with WordPress and Node.JS web application hosting at scale
ML in production for classification/detection, including evaluation and safe model rollout.
Observability at scale: Prometheus, Grafana, Sentry, ClickHouse or similar.
CI/CD ownership: GitLab CI, Jenkins, build systems for multi-distro packaging.
Open-source contributions in security or systems tooling.
Benefits
What's in it for you?
Stay hands-on technically while owning complex, high-impact engineering work.
Work on challenging Linux, automation, and cybersecurity problems across mature and newer products.
Influence technical direction and make meaningful architectural decisions.
Work independently with a high level of ownership and autonomy.
Fully remote work with flexible working hours.
24 paid vacation days, 10 national holidays, and unlimited sick leave.
Private medical insurance compensation.
Co-working and gym/sports reimbursement.
Education budget.
Opportunity to receive a reward for innovative ideas that the company can patent.
By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (
https://cloudlinux.com/candidate-privacy-notice
), which provides detailed information on how we maintain and handle your data.
Location: EMEA - Remote
Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role.
Money is moving onto the internet, and the shift has a name:
Open Money.
This is money that is open, portable, agentic, and owned by you. MetaMask spent the last ten years building it; with 100M+ downloads, users in ~190 countries, and trillions in cumulative transaction volume, it's the most trusted self-custodial financial platform on the internet. Now we're building the operating system for your money: one place to hold, move, grow, and use anything you own. Join a remote-first, global team rebuilding how money works: a problem that touches everyone, every day.
About the role
MetaMask is a self-custody wallet that does not hold users’ private keys. Blockchain transactions are generally irreversible, meaning a vulnerability in the product or its software delivery chain can lead directly to financial losses for users. As a result, MetaMask attracts sustained attention from financially motivated attackers and sophisticated supply chain actors.
We are looking for a
Senior Manager, Application Security
to lead application security across the MetaMask extension, mobile app, Snaps, backend services, DeFi primitives, stablecoins, and supporting smart contracts.
The role covers architecture, code, dependencies, build and release controls, security testing, and vulnerability disclosure. This is a hands-on leadership role. You will set the strategy and operating model, lead a small senior team, and remain directly involved in code review and threat modelling.
You will report to the Head of Security and work closely with MetaMask Engineering leadership to ensure security risks are understood, owned, and addressed.
Responsibilities
Leadership and planning
Lead and develop the Application Security team, including hiring, performance management and career development, while remaining directly involved in technical work.
Set the Application Security strategy, annual goals and quarterly OKRs in line with company objectives and the approved Target Operating Model. Define and track KPIs to measure performance and progress.
Report AppSec progress, coverage, remediation performance and material gaps to Security leadership and contribute to Risk Committee reporting.
Secure design and delivery
Define security review requirements across development and release, assess whether they are met and escalate unresolved risks.
Lead threat modelling and security design reviews across clients, APIs and backend services, including authentication, key management, signing and delegated actions. Assess trust boundaries across the full system and participate in architecture and RFC reviews.
Define software supply chain security requirements and work with engineering teams to implement and validate controls for dependencies, builds, artefacts and publishing.
Lead security code reviews across MetaMask applications and smart contracts, working with engineers and relevant specialists to address findings.
Define and evolve the secure development lifecycle to incorporate AI agents, including their access, actions and human review requirements. Set security standards for AI development tools, generated code and AI components in products.
Integrate security testing into development and delivery workflows, including static and dynamic analysis, dependency scanning, secrets detection and AI scanning. Evaluate tools and validate their findings.
Help engineers prevent recurring vulnerabilities through secure coding guidance, reusable libraries, training and the security champions programme.
Vulnerability management and external testing
Own application vulnerability assessment, triage, prioritisation and remediation tracking within the organisation’s vulnerability management framework. Correlate findings across clients, services and supporting infrastructure with the relevant owners to assess combined impact. Ensure findings have clear owners and deadlines, verify fixes and escalate overdue risks.
Set the scope and proposed investment for bug bounty, penetration testing and AI security scanning based on risk and results. Manage external providers, researcher relationships, rewards and payouts, and coordinate vulnerability disclosure.
Assurance and incident support
Provide evidence of application security controls for audits and assurance reviews, and support customer and partner due diligence.
Provide application security expertise during incidents, including vulnerability analysis and remediation support.
Qualifications
Required
:
At least eight years in application security or software engineering with a security focus, including two years leading people.
Strong practical code review skills in TypeScript/JavaScript, Go or Solidity across browser extensions, mobile applications and backend services, with the ability to identify vulnerabilities and work with engineers to fix them.
Proven experience securing applications across clients and backend services, including distributed authentication, authorisation and key management.
Experience building or substantially improving an AppSec programme, including security reviews, automated testing, AI scanning, vulnerability management and developer support, with sound judgement on where AI adds value and how to validate its findings.
Practical experience securing software supply chains, including dependency policies, software composition analysis, npm, artefact integrity and CI/CD.
Experience running bug bounty and penetration testing programmes, including selecting and managing external providers.
Working knowledge of EVM smart contract security, including common vulnerabilities, review methods, upgrade and admin controls, and assessing external audits.
A record of delivering security improvements through engineering teams outside your reporting line.
Clear written communication, from actionable threat models to concise summaries of risk for executives.
Preferred
:
Offensive security qualifications such as OSCP, OSWE or OSWA, or a proven record in bug bounty programmes or CTF competitions.
Experience securing browser extensions or mobile applications.
Experience securing development workflows that use AI, or AI components in production applications.
Experience in crypto, Web3 or another sector facing sustained attacks, such as fintech, payments or infrastructure.
Knowledge of or a strong interest in applied cryptography.
Familiarity with attacks by state actors against software companies, particularly DPRK supply chain and social engineering campaigns.
Experience providing evidence of secure development controls for SOC 2 or ISO 27001 assessments.
Don't meet all the requirements? Don't sweat it. We’re passionate about building a diverse team of humans and as such, if you think you've got what it takes for our chaotic-but-fun, remote-friendly, start-up environment—apply anyway, detailing your relevant transferable skills in your cover letter. While we have a pretty good idea of what we need, we're ready for you to challenge our thinking on who needs to be in this role.
In the rapidly evolving Web3 space, we believe that everyone is a builder. This expansive paradigm requires a range of backgrounds, talents, skills, and experiences to influence and shape the future. At MetaMask, this diversity fuels our ability to shift control and redefine the realm of possibility. We are committed to ensuring that our technology empowers people and communities through decentralized technologies. We welcome the range of perspectives and differences and celebrate them. We're excited to see how your unique skills as a builder can contribute to our vision, drive innovation, and help us shape a more inclusive Web3.
MetaMask is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law.
MetaMask is aware of fraudulent recruitment practices and we encourage all applicants to review our best practices to protect yourself, which can be found on our page.
MetaMask may use artificial intelligence (AI) tools to support parts of our recruitment process, such as reviewing applications, screening resumes, or conducting initial candidate assessments. These tools are designed to assist our recruiting team and improve efficiency — they do not replace human judgment. A human recruiter or hiring manager reviews every candidate, and all final hiring decisions are made by people, not AI.
It is a requirement of employment in this position that applicants may be required to submit to background and identity verification checks, including but not limited to employment, education, criminal record checks, and other such checks as determined necessary by the company.
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
Anthropic’s Applied AI team helps the world’s largest organizations put Claude to work. As a Cybersecurity Specialist on Applied AI, you’ll be part of an overlay team of domain experts who sit alongside our enterprise account teams and bring deep security expertise to the accounts where it matters most.
You won’t own an account. You’ll be the security expert the account team pulls in to win and grow the most important security conversations: helping CISOs and security leaders see where Claude can take on real security work, then guiding them from early pilots to durable, production workloads. You’ll cover a portfolio of enterprise accounts across regulated industries like financial services, insurance, and healthcare, strategic accounts like semiconductors (IP protection, industrial control systems, export controls), and digital natives and public sector agencies, each with its own threat model.
How this team works
You partner with account executives, account architects, and generalist Applied AI engineers, who own the customer relationship and the broader technical engagement. You bring the security depth they don’t have time to build.
You work across many accounts at once, so the playbooks, reference implementations, and evaluation approaches you build are reused across the field, not just for one customer.
You are the connection point between the field and Anthropic’s Product, Research, and Engineering teams, turning what you see in customer security programs into product feedback.
You work alongside ISVs, systems integrators, and managed security providers who already serve these customers, enabling them where they own the engagement rather than competing with them.
Responsibilities
Join account teams to understand a customer’s security program, identify where Claude can do meaningful security work, and turn that into a technical plan and business case
Serve as the security-domain technical advisor on strategic enterprise accounts, from discovery through deployment
Move customers from one-time code scanning to sustained security workloads: application security in the SDLC, continuous automated penetration testing, alert triage and investigation, and threat intelligence that answers “does this new vulnerability affect us, and where”
Build and maintain reference implementations, harnesses, and evaluation approaches, and help customers adapt them to their own environments and controls
Run workshops and hands-on sessions where customer security teams use Claude on their own code and workflows
Equip partners to deliver Claude-powered security outcomes, with a clear line between what Anthropic delivers and what partners deliver
Speak credibly to every audience, from appsec engineers to CISOs and executives, including how to explain the value and risk of security work in business terms
Define and track adoption depth for each security workload across your accounts, and work with Product and Engineering on the telemetry to measure it
Write the playbooks and best practices the rest of the field can reuse, including how Claude complements the security tooling customers already own
Develop reference customers who can speak to the value they’re realizing
Stay current on frontier LLM capabilities and the new classes of vulnerabilities and attacks they surface
Travel occasionally to customer sites for workshops and technical deep dives
You may be a good fit if you have
5+ years in security roles, with hands-on depth in at least two of: application security and secure SDLC, offensive security and penetration testing, detection and response, or threat intelligence and vulnerability management
Experience in a technical customer-facing role (Solutions Architect, Sales Engineer, security consultant, TAM), or on a security team where you had to win investment from leadership
Experience with large enterprise customers and complex, multi-stakeholder buying cycles, including working alongside the vendors and partners already in the account
The ability to translate between security teams, engineering teams, and executives
Comfort with Python, CI/CD, and cloud environments, plus hands-on experience using LLMs for security work such as code review, vulnerability discovery, triage, or investigation
A love of teaching and a collaborative approach to working across teams and balancing competing priorities
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$300,000
—
$400,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Remote, Japan
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Customer Success Architect, you'll serve as a trusted strategic advisor and technical authority to some of GitLab's most complex and high-value Enterprise and Government customers across Japan. In this role, you will be driving and shaping how our largest customers adopt GitLab's intelligent DevSecOps platform to achieve their business goals and realise meaningful, long-term outcomes. You will be working closely with customers after the sale to turn pre-sales command plans into clear success plans, guide them through their customer journey, and drive adoption, utilization, and technical maturity. You will also be directly influencing renewal and expansion decisions through your post-sales engagements with executive-level decision makers in the account.
This is a individual-contributor role for someone who has already led pre or post sales customer engagements in large complex accounts across multiple industry domains to drive quantifiable business outcomes..The individual is comfortable operating with ambiguity, and can credibly advise VP- and C-level stakeholders on business transformation, application modernization, platform strategy, architecture, and organizational DevSecOps transformation. You'll also be shaping playbooks and best practices, and acting as an escalation point for the team's most technically or politically complex situations.
Reporting into the APJ Customer Success organization, you'll own a portfolio of GitLab's most strategic enterprise and Government accounts, act as the executive-level technical liaison for these accounts, and drive cross-functional resolution of their highest-priority issues — coordinating and, where needed, directing the efforts of Product Management, Engineering, Sales, Professional Services, and Support. You'll bring deep technical expertise in CI/CD, cloud platforms, multi-cloud, hybrid architecture and enterprise DevSecOps practices.You will use that expertise to shape customers' long-term platform strategy, apply best practices, configure GitLab for their environments and stay current with platform capabilities. In your first year, success will look like establishing yourself as the trusted senior advisor across a portfolio of flagship accounts, building strong relationships with key stakeholders, materially improving and increasing platform maturity, leading retention and renewal conversations, increasing customer satisfaction across your portfolio and contributing to the broader CSA team's technical standards and ways of working.
Some examples of our projects:
Turning pre-sales command plans into measurable customer success plans that align technical adoption with business outcomes
Leading and driving the technical strategy behind a large-scale DevSecOps platform consolidation for a regulated Enterprise account or Government, including guiding enterprise customers on GitLab best practices across CI/CD, DevSecOps, cloud architecture, TCO, applying compliance and architecture as well as business case presentations to customer executives
Owning end-to-end resolution of a critical, multi-team escalation for a flagship account — driving root cause analysis, coordinating Engineering/Product/Support, and personally briefing customer executives on remediation
What you’ll do
Owns a book of Enterprise and Government customers and drive adoption, retention, expansion, and overall satisfaction through ongoing strategic, business and technical engagement.
Serves as the senior post-sales strategic, business and technical advisor for a portfolio of GitLab's most complex, highest-value enterprise and Government accounts, shaping multi-year platform and DevSecOps strategy in partnership with customer executives, coordinating responses to questions, issues, and escalations across Support, Product Management, Sales, and Professional Services.
Translates ambiguous, high-stakes business outcomes into rigorous Customer Success Plans that are regularly reviewed with customer stakeholders. The Customer Success Plans contain clearly defined business outcome related goals, quantifiable benefits, realistic adoption milestones and remediation actions.
Prepares executive-ready reporting conducted on a regular basis with clear accountability for outcomes that demonstrate impact on adoption, retention, and expansion of GitLab products and services.
Provides deep technical guidance on enterprise-scale CI/CD architecture, DevSecOps maturity models, platform consolidation strategy, including advising on complex trade-offs (e.g., multi-cloud vs. hybrid, self-managed vs. GitLab Dedicated, etc).
Owns the full lifecycle of your account portfolio's adoption, retention, and expansion outcomes, with direct accountability for the commercial and technical health of flagship relationships.
Leads end-to-end resolution of critical, cross-functional account escalations, ensuring root causes are identified, follow-up actions are owned, holding internal teams accountable to timelines, driving the root cause analysis and personally managing executive communication and risk.
Leads end-to-end resolution of critical, cross-functional account escalations, ensuring root causes are identified, follow-up actions are owned, holding internal teams accountable to timelines, driving the driving root cause analysis and personally managing executive communication and risk.
Designs and delivers technical enablement programs at scale, identifying systemic maturity gaps across a portfolio and building the roadmap (not just individual sessions) that closes them.
Advises key customers stakeholders on cloud and platform architecture decisions with enterprise-wide impact, which includes multi-region deployment strategy, secrets management architecture and network/security topology for regulated environments.
Guides customers on GitLab platform best practices including Git workflows, branching strategies, CI/CD pipeline design, DevSecOps adoption patterns, and security scanning configuration.
Provides hands-on technical enablement and onboarding, including education on GitLab features, releases, and use cases, and identification of training and maturity opportunities aligned to customer goals.
Engages customers on cloud platform architecture decisions relevant to their GitLab deployment — including self-managed vs. GitLab Dedicated, Runner configuration and auto-scaling, secrets management, and network topology considerations.
Advises customers on DevSecOps consolidation value — articulating the TCO, compliance, and developer experience case for platform consolidation over fragmented toolchains.
Collaborates with Professional Services, Sales, and internal teams to identify expansion opportunities, recommend enablement interventions, and ensure a seamless customer journey from onboarding through renewal.
What you’ll bring
Must be a Japanese citizen based in Japan
Mandatory Japanese (native or professional level) and English language proficiency
Hands-on experience building or owning CI/CD pipelines end to end, including pipeline as code, multi-stage design, artifact management, and troubleshooting in real-world environments.
A career built across different direct customer facing engagement roles such as Technical Account Management, Technical Solution Sales, Pre-sales, Business Development, Consulting, Professional services across customers in different industry vertical domains like Government, Banking, Financial and Insurance Services, Manufacturing, Telecommunications, engagement with multiple technology and platform transition experience such as from on-premise deployments to Cloud, application modernization experience from monolith to microservices, from Waterfall to DevOps to DevSecOps and others to provide the depth and breadth of experience to advise customers on transformations and deployments that you've already seen play out elsewhere across your multiple customer engagements.
A long-standing demonstrated track record as the person other senior people call when an account is in genuine crisis or gained across a sustained career of Enterprise or Government account ownership
Credible judgment earned by personally owning the outcomes of dozens of complex enterprise customer account engagements over the course of a career, including situations with real commercial, technical, and reputational stakes
A consistent track record of being trusted by customer executives and internal leadership to operate with minimal oversight in ambiguous and high-pressure situations
Deep, hands-on expertise in DevSecOps practices, including shift-left security and integrating SAST, DAST, SCA, and container scanning into development workflows as well as architecting and troubleshooting CI/CD pipelines at enterprise scale
Expert-level understanding of Git, merge request workflows and delivery lifecycles, having personally guided organizations through branching strategies such as trunk-based development and GitFlow, and modern software delivery lifecycles.
Demonstrated experience with infrastructure as code, GitOps, Cloud and on-premises environments with relevant experience that support GitLab deployments, including networking, identity and access management (IAM), secrets management, and deployment considerations for regulated or high-security environments
Demonstrated experience partnering with customers to turn business requirements into actionable success plans, with measurable goals and verifiable business outcomes that are suitable for executive-level quarterly reporting.
Demonstrated ability to drive product adoption, dive deep into the accounts assigned and scale out the level of influence in the account.
Demonstrated ability to build and defend executive-level business cases (TCO, compliance, risk) that influence budget and platform strategy decisions
Demonstrated ability to operate with autonomy in ambiguous, high-stakes situations with strong communication, stakeholder management, and organizational experience to manage a portfolio of enterprise and Government customers, balance multiple priorities, guide escalations, and coordinate effectively across customer teams and internal cross functional teams to resolve issues appropriately and in a timely manner.
About the team
The Customer Success Architect team is part of GitLab's Customer Experience organization. It supports strategic enterprise and Government accounts across the APJ region through hands-on technical guidance, consultative partnership, and practical problem solving.
We act as a reliable technical advisor and an important link between customers and the broader GitLab ecosystem. We bring platform, cloud, and DevSecOps depth to customer engagements and work closely with Product Management, Engineering, Sales, Support, and Professional Services to address questions, guide customers through technical choices, navigate escalations, and help them realize measurable value from GitLab.
Composed of team members working remotely across time zones, we operate asynchronously to support a focused set of strategic accounts across the region. It's a team well suited for people who enjoy solving complex customer challenges, building long-term partnerships, and helping enterprise organizations grow their maturity with GitLab in practical, measurable ways.
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: US - Headquarters - Maryland - Columbia
Who is Tenable?
Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!
What makes Tenable such a great place to work?
Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!
Your Role:
Tenable's InfoSec team is looking for a Security Engineer to join our Security Engineering & Architecture group. This role was built deliberately to span disciplines rather than specialize in one: you'll split your time between securing our cloud environments and supporting general security engineering disciplines across the business — covering cloud and non-cloud systems alike. If you're early-career but curious across the breadth of InfoSec rather than narrowly focused on one domain, this role is built for you.
Your Opportunity:
Support day-to-day cloud security operations — monitoring, triage, and remediation of findings across AWS, Azure, and/or GCP environments using CNAPP/CSPM tooling.
Contribute to Security Architecture Reviews for new systems, integrations, and vendor onboarding — regardless of whether the system in question is cloud-hosted, on-prem, or SaaS. You'll work directly with the architects and engineers who own this process today, learning the methodology and eventually taking reviews from intake to sign-off.
Help identify and document misconfigurations, excessive permissions, and insecure IaC patterns (Terraform/CloudFormation), and help track remediation through to closure.
Participate in risk assessments and threat modeling exercises for new projects — applying the same core analysis skills whether the subject is a cloud workload, an internal application, or a third-party integration.
Assist with IAM/RBAC reviews and least-privilege efforts; flag static credentials, over-broad roles, and gaps in audit logging wherever they appear in the environment.
Build foundational familiarity with how AI/agentic systems intersect with our environment — cloud-hosted LLM services (AWS Bedrock, Azure OpenAI, GCP Vertex AI), the Model Context Protocol (MCP), and the basic risk surface of agent/tool-calling architectures and apply that awareness during reviews when these systems show up in scope.
Work cross-functionally with engineering, GRC, and TPRM to keep architecture reviews and cloud findings moving — this role is a connective thread between teams, not a silo.
What You'll Need:
2–3 years of experience in a security engineering, cloud security, IT security, or related technical role (internships and adjacent IT/ops experience count).
Working knowledge of at least one major cloud provider (AWS, Azure, or GCP) — IAM fundamentals, networking basics, and common misconfiguration patterns.
Basic understanding of security architecture review or threat modeling concepts (e.g., STRIDE, data flow diagrams) — or clear aptitude and interest in learning them.
Familiarity with core security engineering practices: least-privilege access, audit logging, secrets management (no static credentials), and secure configuration baselines.
Comfort reading documentation and asking good questions across unfamiliar systems — this role touches a lot of different architectures, so curiosity matters more than deep specialization in any one of them.
Strong written communication — you'll be documenting review findings and cloud remediation guidance for technical and non-technical audiences alike.
And Ideally:
Exposure to IaC security scanning (Terraform/CloudFormation) or CNAPP/CSPM/CIEM platforms.
Some hands-on exposure to a formal architecture/design review process, even informally (e.g., reviewing a peer's system design for security gaps).
Basic familiarity with AI/LLM concepts — prompts, context windows, tool/function calling, RAG — and awareness of frameworks like the OWASP Top 10 for LLM Applications or the NIST AI RMF.
A relevant certification (Security+, AWS/Azure/GCP security certs, or similar) or equivalent self-directed learning.
Prior exposure to compliance frameworks (SOC 2, FedRAMP, ISO 27001) relevant to architecture review sign-off
#LI-Hybrid #LI-MS1
This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.
US Pay Range
$102,500
—
$136,500 USD
We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact
Recruiting@Tenable.com
for further assistance.
Tenable Data Consent Statement
Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:
General Applicant Privacy Notice
California Applicant Privacy Notice
EU/EEA/UK Applicant Privacy Notice
Location: North America
Workplace: Remote
At Linear, we're building the product development system for teams and agents. AI is fundamentally changing how software gets built, and we’re shaping the tools this new era requires.
Founded in 2019, Linear has become the platform of choice for more than 50,000 companies (including OpenAI, Coinbase, and Ramp) to plan, build, and ship their products. Today, our team is distributed across North America, Europe, and Australia, and we’re continuing to grow internationally. What unites us is relentless focus, fast execution, and a deep care for software craftsmanship.
At Linear, we are committed to quality. Security is an essential part of that quality — not a layer that we add later, but something we build in from the start. We have a foundational security program we're proud of but, as Linear evolves our product and scales into enterprise, there's meaningful work ahead: staying ahead of vulnerabilities as our attack surface grows, responding fast and cleanly when incidents happen, and hardening our product and infrastructure. As Security Engineer at Linear, you'll be operating in a high-autonomy role with real scope, doing hands-on security work across the product and infrastructure we build.
Location & work mode
Linear is a remote-first company. This role is open to candidates based in North America. You can work from anywhere within this region. We value deep focus and async collaboration, with intentional moments to connect in person through team off-sites, optional co-working, and occasional travel.
What you’ll do
Depending on your experience / skillset and our broader priorities, you could:
- Operate, automate, and extend vulnerability management end-to-end: triage, prioritize, and drive remediation across product, infrastructure, and dependencies, and keep the program’s SLAs meaningful rather than theoretical
- Run our bug bounty program: triage incoming reports, validate severity, work with engineering on fixes, and keep researcher relationships professional and responsive
- Lead product security testing: threat model new features (including AI/agent-facing surfaces), review designs and code for security-relevant risk, and do hands-on testing (manual and tool-assisted) rather than relying solely on scanners
- Be a primary responder for security incidents: lead investigation and containment, drive postmortems, and turn lessons into concrete hardening work
- Own meaningful chunks of our cloud/infra security posture on GCP/k8s/Postgres: harden configurations, close gaps surfaced by audits or scanning, and partner with infra engineering on secure defaults
- Build and maintain security tooling and automation, including using AI/LLM tooling to speed up triage, code review, and repetitive investigation work, so the program scales without linear headcount growth
- Partner with the GRC/Trust function: feed real findings into the risk register and control evidence, and help make sure compliance requirements reflect actual engineering practice
What we’re looking for
- A generalist, senior-level security engineer (5+ years across security engineering, with real depth in at least two of: vulnerability management, product/appsec testing, incident response, and cloud security). We need breadth, rather than a narrow specialist in any one of these.
- Hands-on and technical: you can read and reason about code (we use a lot of TypeScript), you’re comfortable in cloud environments (GCP a plus), and you can go deep on a finding rather than just filing a ticket for someone else to fix. You’re comfortable using AI coding/security tools as force multipliers (Linear Agent, Claude, Codex, etc).
- Calm under pressure: you can lead an incident from first alert through postmortem without needing to be told what to do next
- A builder: you’d rather write a script or ship a tool than repeat a manual process a third time
- A pragmatic risk-reducer: you optimize for actually reducing risk, not for checking a box or maximizing findings count
- Autonomy-oriented: comfortable setting your own priorities, working with significant independence, and knowing when to escalate
- A clear communicator: able to explain a technical finding to a non-technical stakeholder and write it up so it’s actually actionable
Our tech
This is a hands-on security engineering role. You'll be running tools, reading/writing code, building detections, working in our cloud environment, and partnering closely with the engineers who build our product. Our stack is fronted by Cloudflare and runs on Google Cloud with k8s, Postgres, and Node.
For day-to-day work, we use:
- Linear, GitHub, Slack, and Google Workspace for collaboration
- Claude and ChatGPT for general & engineering-specific AI tasks
- Vanta for compliance automation and evidence collection
Our security-specific tooling includes:
- GitHub Advanced Security
- RunReveal
- SentinelOne
What we offer
We're a small, focused team that cares deeply about the quality of our work and the people we do it with. Here's what you can expect:
- Competitive salary and equity
- Employee-friendly equity terms including early exercise in the US and extended exercise windows
- Daily meal and coffee stipend on every workday
- Paid co-working space or desk
- Health coverage (based on country requirements)
- 5 weeks paid vacation, plus local statutory holidays
- 4 months paid parental leave
- Paid month off after 4 years & every 2 years thereafter
- Regular team events and off-sites
- Remote-first with no required commute
Compensation
For US-based candidates, the expected cash compensation range for this role is $240,000—$282,000. For sales roles, this range represents on-target earnings (OTE), including base salary and variable compensation; for all other roles, it represents base salary. Final compensation is determined based on job-related knowledge, skills, and experience. For sales roles, actual earnings vary based on sales performance. Equity is a meaningful part of all offers at Linear.
Learn how we think and work
- Read Me https://linear.app/readme a story about our mission
- Our hiring process: How we hire at Linear https://linear.app/now/how-we-hire-at-linear
- How we work: Designing remote work at Linear https://linear.app/now/designing-remote-work-at-linear
- Why and how we do work trials https://linear.app/blog/why-and-how-we-do-work-trials-at-linear Linear blog post
- How we use AI in design https://designerfund.substack.com/p/ai-design-linear feature of Linear's design team
- Scaling our real-time sync engine https://linear.app/blog/scaling-the-linear-sync-engine talk by our cofounder, Tuomas Artman, at Linear's 2023 offsite
- Our recent tender offer: Sharing Linear’s growth with the people building it https://linear.app/now/sharing-growth-with-the-people-building-linear
A note on recruitment fraud: all official Linear hiring communication comes from an @linear.app http://linear.app email address, and all open roles are listed at linear.app/careers http://linear.app/careers. We never ask candidates for payment or financial information. Suspicious messages can be reported to security@linear.app.
Linear is an equal opportunity employer. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.
Location: Bulgaria
Company Background
Our client is a travel technology company developing cloud-native, AI-powered software for airlines and hospitality brands. Its products help customers improve commercial performance, reduce costs, and evolve their digital commerce capabilities. The company’s technology is designed to work alongside existing airline systems, allowing customers to introduce new capabilities without replacing their current technology landscape.
Project Description
You will contribute to a large-scale greenfield travel-technology initiative supporting the launch of a new airline operation. The project uses a modern commercial platform to enable flexible retailing, pricing, and digital shopping experiences across travel products and ancillary services.
Technologies
GCP, AWS
Wiz
Cloudflare WAF, Bot Management, DNS, TLS, DDoS Protection and Rate Limiting
Terraform
SonarCloud and Dependabot
Jira, PagerDuty and Slack
Python and Bash
What You'll Do
Own and continuously improve cloud security posture across GCP organizations and AWS accounts, including connector coverage, runtime sensor deployment on production clusters, custom policy development, finding-triage baselines, and integrations with Jira, PagerDuty, and Slack;
Operate and evolve the edge security layer, centralizing internet-facing protection through Cloudflare WAF, bot management, rate limiting, DNS/TLS, and origin routing for customer-facing production zones;
Tune security rules using real production traffic, manage allow-list requests, and enable other teams to use edge-security tooling effectively;
Support and automate vulnerability management and secure configuration, maintaining the intake of Wiz, SAST, penetration-test, and customer-reported findings, defining remediation baselines, and driving owners to closure;
Participate in security incident response for cloud events, including DDoS and bot attacks, supply-chain alerts, credential exposure, and data-handling incidents, while creating and maintaining detection, triage, and mitigation runbooks;
Help secure the software supply chain by owning SAST reporting in SonarCloud, dependency scanning with Dependabot, container base-image hardening, and the selection of SBOM and SCA tooling, and publish release-level security reports for engineering teams;
Produce technical evidence for SOC 2, PCI DSS, ISO 27001, and NIS2, including evidence of log-sink configuration and retention, access reviews, authenticated scanning, and IAM remediation, and map Wiz controls to relevant frameworks to make evidence collection repeatable;
Enable security self-service by training Platform, CloudOps, and Product Engineering teams on the tools they use, including Wiz and Cloudflare administration, mapping service catalogues to owners, and automating recurring customer-security and issue-triage reporting through scripting and AI-assisted workflows;
Advise and partner with engineering teams on the security of new platform integrations and AI/RAG services, contributing to the annual cloud-security roadmap and target-state architecture;
Job Requirements
5+ years of experience in cloud security or platform engineering with a security focus, including hands-on experience with GCP or AWS across IAM, audit logging, log routing, network security, and workload protection;
Production experience with a CNAPP/CSPM platform, such as Wiz (preferably) / Prisma Cloud / Orca / Google Security Command Center, including policy authoring, integrations, and runtime protection;
Hands-on administration of a WAF, CDN, and bot-management stack at scale;
Strong Terraform experience, including building modules for security tooling and WAF configuration, reviewing changes, and managing configuration drift and legacy infrastructure;
Experience with vulnerability management across cloud infrastructure, containers, and code, including SAST, SCA/dependency scanning, container image hardening, and penetration-test remediation tracking;
Experience routing cloud security signals to a SIEM or security-monitoring platform, such as Wazuh, Microsoft Sentinel, Google Security Operations, or Datadog Security Monitoring, and integrating actionable alerts with PagerDuty and Slack;
Scripting skills in Python or Bash for automation and security reporting;
Security incident-response experience in a production environment, including developing runbooks and managing vendor escalations;
Clear written and verbal communication skills, with the ability to train engineering teams and document security decisions;
Nice To Have
Experience automating security workflows, such as report generation and issue triage, with AI-assisted or LLM-based tooling;
Experience working across both GCP and AWS, experience with Azure;
Familiarity with Rego, OPA, or other policy-as-code languages;
Experience with identity and access-management tooling, including Okta SSO/SCIM, PAM solutions, and least-privilege reviews for cloud IAM;
Experience facilitating OWASP SAMM assessments, threat-modelling sessions, or security-champions programs;
Airline or travel-industry experience, including PCI-scoped payment flows, partner integrations, and customer-facing security reporting;
Experience supporting compliance with PCI DSS, SOC 2, ISO 27001, or NIS2;
Certifications such as Google Professional Cloud Security Engineer, CCSP, or AWS Certified Security – Specialty;
What Do We Offer
The global benefits package includes:
Technical and non-technical training for professional and personal growth;
Internal conferences and meetups to learn from industry experts;
Support and mentorship from an experienced employee to help you professional grow and development;
Health insurance;
Sports activities to promote a healthy lifestyle;
Flexible work options, including remote and hybrid opportunities;
Referral program for bringing in new talent;
Work anniversary program and additional vacation days.
Location: Limassol, Cyprus
Workplace: on-site
Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement.
We are building the future of live entertainment. We believe that by providing people with the best and high-quality live streaming experience in entertainment, we can tackle the world’s “problems” better, together!
We're looking for a DevSecOps specialist to join our team and collaborate on continuously evolving our security architecture. You'll work closely with engineering and operations to strengthen our end-to-end security posture—protecting infrastructure, applications, and data — while enabling fast, reliable delivery.
Job Responsibilities
Responsible for the developing and maintaining the organization’s security architecture design to ensure the protection of IT systems, endpoint devices, network infrastructure, and information assets.
Security initiatives to assess and mitigate risks, ensuring alignment with business objectives and compliance with regulatory requirements.
Collaborate with IT and business units to integrate security practices into the development and deployment of IT systems and applications.
Conduct research on emerging security technologies and trends to enhance the organization’s security posture.
You’ll thrive here if you have
Proficiency in Ansible and Terraform for Infrastructure as Code (IaC).
Solid knowledge of cloud security frameworks.
Knowledge of threat intelligence platforms and techniques for monitoring and responding to potential security breaches.
Proficiency in encryption technologies, PKI, and cryptographic protocols (SSL/TLS, IPSec).
Understanding of network security, including firewalls, VPNs, IDS/IPS, and endpoint security solutions.
Understanding of identity and access management (IAM) solutions, including SSO, MFA, and RBAC policies.
Soft skills:
Effective communication: Ability to convey complex security concepts in an accessible manner.
Emotional intelligence (EQ): Fostering empathy and understanding in all interactions.
Commitment to greatness: A results-driven mindset with a focus on excellence.
Human-centricity: Ensuring solutions benefit both people and systems.
Analytical thinking: Strong problem-solving and decision-making skills.
Flexibility: Adaptable to changing priorities and challenges.
Conflict management skills: Skilled in resolving disputes constructively and efficiently.
Inter-dependence: A team player who thrives in collaborative environments.
Qualification that can be a plus:
SIEM, Cloudflare, k8s, ELK.
Any IT / DevOps / Security certifications.
Knowledge of modern DevSecOps practices.
Expertise in scripting or programming languages such as Python, Go, Bash.
Experience with security risk assessment frameworks, such as NIST, ISO 27001, or CIS.
Hands-on experience with vulnerability scanning and penetration testing tools, such as Nessus, Qualys, or Metasploit.
Knowledge of compliance standards (e.g., GDPR, HIPAA, PCI DSS) and their implications on IT security practices.
Conditions
We know that great talent deserves great conditions, so here's what you can expect when joining us:
EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family.
Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free.
Transparent performance reviews twice a year, with bonus opportunities and salary adjustments.
Private medical insurance for you and your family, a corporate mobile plan (unlimited in Cyprus with roaming included), and interest-free support for car purchases.
Mindfulness & well-being support, including psychological assistance with 50% coverage.
50% coverage of school and kindergarten fees for your children.
Fully covered sports benefits, and also access to in-house electric scooters and bike rentals.
Provident fund (Cyprus): a long-term savings plan co-funded by you and the Company together (available after probation) that grows throughout your time with us in Cyprus.
Investment in your growth: paid language courses and access to suited-for-you development programs, including conferences, training programs, and coaching to support your professional journey.
A culture of recognition: a peer reward program to celebrate your contributions.
A fully equipped office in Limassol’s city center, with everything you need for deep work and collaboration.
Free catering in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks.
A strong engineering culture: international teams, corporate events, team buildings, and hackathons—because great work happens in great communities.
Recruitment process
HR interview (45 min);
Technical interview (1.5 hours);
Final interview with HRBP (45 min) - optional.
Location: Sofia, Bulgaria
Driving the next generation of wealth.
Digital assets are redefining how wealth is created, used, and transferred. Since 2018 at Nexo, we have been building the future model of financial wealth - dynamic, accessible, and designed for a new generation of forward-thinking investors.
But technology alone doesn’t drive progress. People do.
We are a team of builders, strategists, analysts, creatives, and operators united by a shared mindset: advancement. We move fast, think long term, and take ownership. We challenge ideas, not people. We value clarity over noise and impact over optics.
What makes Nexo different?
We shape industry trends. We rethink how wealth works and build solutions that reflect that belief.
That requires a certain kind of person.
You will thrive here when you think independently and act decisively, take ownership without waiting for permission, and care deeply about quality, long-term value, and disciplined execution. The people who succeed at Nexo bring analytical depth, sound judgment, and resilience - but also curiosity and the drive to keep improving.
This is an environment for people who want to lead, create, and elevate what already exists. If building what’s next excites you, you’ll feel at home at Nexo.
Official website:
nexo.com
Your role:
Work with AWS services day to day: IAM, networking, compute, storage, and managed data services.
Manage Kubernetes/EKS clusters, including multi-tenancy, RBAC, workload isolation, and security hardening.
Drive GitOps practices with FluxCD, covering multi-environment promotion and drift detection.
Build and maintain CI/CD pipelines with Jenkins.
Author and maintain Terraform modules, Helm charts, and ACK controllers.
Manage networking and traffic with Linkerd (service mesh) and Kong (API gateway), across east-west and north-south patterns.
Define and monitor SLOs/SLIs across Datadog and Prometheus/Grafana.
Integrate code quality and security scanning into the pipeline.
Work with event-driven architectures built on Kafka, AWS MSK, and Debezium.
Write clean, maintainable automation in Bash, Python, and Groovy.
How we work with AI
AI is part of how we build, not an afterthought, and we expect engineers to use it daily. Our primary stack is Anthropic's Claude, used through Claude Code across pipelines, code quality, operational automation, debugging, and documentation.
We care about using it well: knowing when to lean on it, how to verify its output, and how to keep quality and security high while moving faster. A solid understanding of LLMs and the wider AI ecosystem will help you make good architectural decisions as the technology matures, and we want people who are eager to push this further.
What makes you stand out:
You have 2+ years in a Platform or DevOps role where you owned the outcome, not just the ticket.
You think in platforms, not pipelines. Golden paths, self-service, and reducing developer toil are your default frame.
You have deep AWS experience and a track record of building cloud-native systems that hold up under pressure.
You know your way around a packet. DNS, TCP/IP, TLS, ingress, service mesh, and zero-trust networking are not abstract concepts to you.
You use AI naturally in your workflow, from pipelines to code quality to operational automation.
You understand LLMs and the AI ecosystem well enough to make sound architectural decisions as they evolve.
You're honest about where you're strong and curious about the rest.
Nexo benefits:
Competitive and rewarding remuneration package.
Annual performance-based bonuses.
Comprehensive Learning Hub for continuous growth.
Hybrid work model: primarily office-based with scheduled home office flexibility.
A dynamic and inspiring environment with cutting-edge projects.
Career development opportunities in a global leader driving the next generation of wealth.
Customizable personal benefits package.
Wellness benefits include additional health insurance, all-access sports cards, team-wide sports activities, standing desks, and blue light glasses.
Parking and public transportation cards at preferential rates, plus free electric bikes.
Fresh fruits, snacks, and a well-stocked office kitchen.
Regular department team buildings and company-wide team buildings.
About the Role
We are looking for an experienced Cybersecurity Specialist / Security Engineer to secure and continuously improve the company’s server, network, cloud, and application infrastructure.
The ideal candidate combines strong hands-on technical expertise with the ability to independently investigate security incidents, assess risks, design secure architectures, and implement effective security controls.
A key requirement is practical experience with Zero Trust architecture and Zero Trust Network Access (ZTNA), including secure identity-based access to internal infrastructure and critical systems.
Key Responsibilities:
— Ensure the security of the company’s server, network, and cloud infrastructure.
— Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts.
— Respond to security incidents, including investigation, containment, remediation, root cause analysis, and documentation.
— Conduct regular infrastructure security audits and manage vulnerabilities.
— Harden Linux and Windows servers, operating systems, and network services.
— Configure and maintain Firewalls, WAF, IDS/IPS, VPN, and DDoS protection solutions.
— Ensure the security of Web applications and APIs.
— Manage and control access to production infrastructure and critical systems.
— Develop and maintain security policies, procedures, and Incident Response Playbooks.
— Collaborate with DevOps engineers, system administrators, DBAs, and developers to identify and mitigate security risks.
— Design, implement, and continuously improve the company’s security architecture and technical controls.
Required Qualifications (Must-Have):
— 3+ years of hands-on experience in Cybersecurity / Information Security.
— Strong understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, NAT, and network routing.
— Solid Linux administration skills.
— Practical experience configuring Firewalls, WAF, ACLs, and network segmentation.
— Hands-on experience with Cloudflare or equivalent WAF/CDN/DDoS protection solutions.
— Good understanding of the OWASP Top 10 and common Web/API attack vectors.
— Practical experience with Vulnerability Management tools such as Nessus, OpenVAS, Qualys, or equivalents.
— Knowledge of CVE/CVSS and the ability to assess the actual business and technical risks associated with identified vulnerabilities.
— Experience with SIEM, IDS/IPS, and centralized log collection.
— Ability to analyze system, network, application, and web server logs.
— Experience investigating security incidents and working with Indicators of Compromise (IOCs).
— Understanding of RBAC, MFA, PAM, the Principle of Least Privilege, and privileged access management.
— Experience with Docker and an understanding of container security principles.
— Understanding of SAST, DAST, dependency scanning, and secret scanning.
— Ability to automate security tasks using Bash and/or Python.
Zero Trust — Mandatory Requirements:
Practical experience implementing Zero Trust Network Access (ZTNA) solutions and a solid understanding of Zero Trust architecture are essential for this role.
The candidate should be able to design, implement, and maintain a Zero Trust approach, including:
— Designing and implementing Zero Trust security architecture.
— Implementing ZTNA for employees’ and administrators’ access to internal infrastructure.
— Replacing network/IP-based trust with identity-based access controls.
— Implementing Device Trust and Device Posture checks.
— Configuring MFA and Conditional Access policies.
— Enforcing Least Privilege Access.
— Implementing microsegmentation.
— Providing short-lived access and temporary privileged access.
— Monitoring and auditing administrative sessions.
— Integrating Zero Trust solutions with IAM, SSO, and Identity Providers (IdPs).
— Building secure access mechanisms for Linux and Windows servers, databases, internal Web services, and administrative panels.
Location: Canada; United States
Workplace: Remote
ABOUT DOCKER
Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.
We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
_______________________________________________________________________
THE ROLE
As Docker continues its rapid growth, we're seeking an inspiring and experienced Director of Partner Solution Engineering to lead a world-class team. Docker helps organizations solve complex challenges in modern software supply chains, security governance, and AI-driven development. This role offers the opportunity to shape how our strategic partners, including ISVs, CSPs, SIs, and VARs, adopt and deliver transformative technologies that make developers more productive and secure.
As Director of Partner Solution Engineering, you will lead a high-performing technical organization responsible for driving partner enablement, joint go-to-market initiatives, and technical excellence across Docker's partner ecosystem. You will collaborate closely with Partner Sales, Technical Alliances, Product, and Engineering to develop scalable technical partnership strategies that help partners successfully integrate, sell, and deliver Docker's platform. Your focus will be on enabling your team to drive partner technical readiness, co-innovation, and mutual customer success while building repeatable models for partner engagement at scale.
_______________________________________________________________________
KEY RESPONSIBILITIES
LEADERSHIP & TEAM DEVELOPMENT
- Lead, develop, and inspire a team of Partner Solution Engineers, ensuring professional growth and high performance across multiple partner segments (ISVs, CSPs, SIs, VARs).
- Build and scale the Partner SE organization to support Docker's expanding partner ecosystem and geographic coverage.
- Foster a culture of innovation, collaboration, and continuous learning focused on partner success and technical excellence.
- Coach, mentor, and empower your team to engage effectively with diverse partner organizations and communicate complex technical concepts clearly.
PARTNER ENABLEMENT & TECHNICAL STRATEGY
- Establish repeatable processes and programs for partner technical enablement, including scalable learning paths, certifications, technical deep-dives, and integration workshops.
- Design and deliver both 1:1 strategic enablement for key partners and 1-to-many programs that drive adoption across the broader partner ecosystem.
- Create technical content, integration guides, architectural diagrams, reference architectures, and enablement videos tailored for partners.
- Develop partner-specific technical sales plays, solution validation frameworks, and proof-of-value methodologies that highlight Docker's differentiated value.
JOINT GO-TO-MARKET EXECUTION
- Partner with the Partner Sales organization to drive joint account planning, co-selling opportunities, and "sell-with" and "sell-through" motions.
- Guide partners through solution design, technical validation, and evaluation processes to achieve joint customer success and sales goals.
- Support product positioning and technical validation during joint sales engagements, ensuring clarity on what's GA and ready for delivery.
- Define and track metrics for partner technical readiness, engagement quality, and revenue impact.
PRODUCT & ALLIANCE COLLABORATION
- Collaborate with Product and Engineering teams to share Voice of the Partner, influencing roadmap priorities and co-building initiatives.
- Guide beta/EAP program participation with strategic partners, gathering feedback on new features and integration requirements.
- Work closely with the Technical Alliances team on roadmap alignment, technical integrations with CSPs and ISVs, and partner-driven feature requests.
- Champion regional partner technical needs and priorities in internal planning discussions (FedGov, EMEA, APAC).
CROSS-FUNCTIONAL LEADERSHIP
- Collaborate with Field SEs to ensure alignment with market-specific requirements, share learnings, and avoid duplication of effort.
- Partner with Marketing to support partner events, conferences, webinars, and demand generation programs.
- Work with Sales leadership to define partner success metrics, performance standards, and technical excellence measures.
- Represent Docker at partner events and conferences as a technical expert and evangelist.
OPERATIONAL EXCELLENCE
- Create an environment of continuous improvement focused on partner outcomes, operational excellence, and scalable processes.
- Develop internal enablement programs that enhance partner SE capabilities and share best practices across teams.
- Establish tools, systems, and workflows that enable efficient partner engagement and measurement.
- Build strong feedback loops to iterate on enablement strategies based on data-driven insights and partner performance.
_______________________________________________________________________
QUALIFICATIONS
REQUIRED
- 8+ years of experience leading technical partner engineering, partner solutions, or pre-sales teams for distributed systems, developer platforms, or cloud infrastructure companies.
- Proven success in guiding teams that support channel partnerships, strategic alliances, and joint go-to-market initiatives.
- Minimum of 5 years in management, including hiring, mentoring, and scaling high-performing partner-facing technical teams.
- Deep understanding of partner ecosystems including ISVs, CSPs (AWS, Azure, GCP), Systems Integrators, and VARs.
- Strong experience in software supply chain security, security governance, DevOps, DevSecOps, or developer productivity technologies.
- Deep technical understanding of containerization, cloud-native architectures, CI/CD pipelines, and developer tools.
- Demonstrated ability to build scalable partner enablement programs (technical learning paths, certifications, workshops).
- Excellent communication and executive presentation skills, with the ability to build trust across technical and business audiences at both partner and customer organizations.
- Strong strategic thinking with proven ability to influence cross-functional teams and drive complex initiatives.
PREFERRED
- Operational experience with Docker, Kubernetes, or similar container-based platforms.
- Experience with application security principles and securing the software supply chain, including SBOMs, image scanning, and secure delivery pipelines.
- Background in software development, scripting, or infrastructure-as-code.
- Experience enabling developer productivity through coding assistants, AI integrations, or AI agent development.
- Familiarity with partner operations tools including Salesforce and enablement platforms like MindTickle.
- Experience working in both direct and channel sales models, understanding the nuances of partner-led vs. partner-assisted sales.
- Bachelor's degree in Computer Science, Engineering, or related field (or equivalent experience).
- Willingness to travel (~30% expected) to support key partner engagements and events.
_______________________________________________________________________
WHAT SUCCESS LOOKS LIKE
30 DAYS
- Successfully onboard, gaining familiarity with Docker's platform, partner ecosystem, and partner go-to-market strategy.
- Establish relationships with your team, Partner Sales, Technical Alliances, Field SE leadership, and key cross-functional partners.
- Begin shadowing partner calls, reviewing existing enablement materials, and understanding current partner technical capabilities.
- Learn tooling (Salesforce, Looker, Docker platform, PRM) and connect with internal stakeholders.
90 DAYS
- Develop and align a 12-month strategic plan with Partner Sales, Technical Alliances, and Product leadership.
- Begin executing key initiatives focused on improving partner technical readiness, enablement program quality, and joint sales effectiveness.
- Lead enablement sessions for selected strategic partners and support joint-account planning activities.
- Produce initial partner-facing technical content and establish your voice as a technical leader in the partner ecosystem.
1 YEAR
- Scale and enable a high-impact Partner Solution Engineering organization that drives measurable partner success and revenue growth through the channel.
- Own the technical strategy for one or more partner segments with documented processes, metrics, and success stories.
- Become a trusted advisor across Partner Sales, Product, Engineering, and Technical Alliances by championing partner insights and technical excellence.
- Demonstrate quantifiable improvements in partner technical closure rates, joint sales velocity, and partner satisfaction scores.
- Build a reputation as a thought leader in the partner ecosystem, representing Docker effectively at partner events and conferences.
_______________________________________________________________________
WHY JOIN DOCKER
Docker is at the forefront of developer productivity and software supply chain security. As Director of Partner Solution Engineering, you'll have the opportunity to:
- Shape the technical strategy for how Docker scales through its partner ecosystem
- Build and lead a world-class team of Partner Solution Engineers
- Work with industry-leading partners including major cloud providers, security vendors, and global system integrators
- Influence product direction based on partner and customer insights
- Make a measurable impact on Docker's growth through the channel
- Collaborate with passionate, talented teams across Sales, Product, Engineering, and Alliances
This is a high-impact leadership role for someone who thrives at the intersection of deep technical expertise, strategic partnership development, and team building. If you're excited about enabling partners to deliver exceptional outcomes for joint customers while building a best-in-class Partner SE organization, we'd love to hear from you.
Visa sponsorship: Not available for this role.
_______________________________________________________________________
COMPENSATION & EQUITY
All full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location.
Canada: CA$327.6K– CA$468K OTE
United States: $226.1K – $323K OTE
______________________________________________________________________
POSTING INFORMATION
- Open vacancy: This posting is for an existing open role.
- AI in hiring: Docker may use AI-assisted tools during our recruiting process.
- Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.
______________________________________________________________________
PERKS & BENEFITS
- Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
- Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
- Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
- Home office support – Set up your workspace for comfort and success.
- Technology stipend – Equivalent to US$100 net per month to help support your work.
- Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
- Parental leave – 16 weeks of paid parental leave after six months of employment.
- Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
- Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
- Docker swag – Because representing the whale never gets old.
Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.
#LI-REMOTE
Location: Kuala Lumpur, Malaysia
About Us
Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.
Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.
Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.
Key Responsibilities
Compliance Requirements TranslationLiaise with local compliance teams across global regions to develop a deep understanding of the security technical requirements under various regulatory frameworks (e.g., EU DORA, Turkey CMB/Tubitak, Hong Kong SFC). Translate compliance requirements into actionable security platform product requirements and technical solutions.
Audit & Certification SupportLead or participate in security audit preparation for compliance entities, including internal audits, external audits, penetration test report reviews, and audit evidence compilation and delivery — ensuring accuracy and timeliness of all audit materials.
Security Operations GovernanceDrive the implementation of security policies, processes, and standards across compliance entities, covering control domains such as vulnerability management, log monitoring (SIEM), antivirus coverage, access rights reviews, and security awareness training.
License Application SupportParticipate in the security-related components of financial license applications across regional compliance entities; author technical documentation including security architecture descriptions, control matrices, and risk assessments.
Security Metrics ManagementAssist in establishing and maintaining security operations metrics frameworks for each compliance entity (coverage rates, SLAs, compliance rates, etc.); produce regular security operations reports.
──────
Requirements
Bachelor's degree or above in Computer Science, Information Security, or a related field; 5+ years of experience in information security, with at least 3 years focused on security compliance governance, security auditing, or security operations.
Solid familiarity with mainstream security compliance frameworks and regulatory requirements such as ISO 27001, SOC 2, PCI DSS, and GDPR; knowledge of financial industry security regulations (e.g., DORA, MAS TRM) is a plus.
Strong security technical foundation with the ability to understand the working principles of security products and controls including SIEM, vulnerability scanning tools (Tenable/Orca/Nessus), EDR/antivirus, WAF, and IAM.
Hands-on experience participating in security audits (internal or external), with the ability to independently complete audit evidence preparation, control gap analysis, and remediation tracking.
Fluent in both Chinese and English; able to read regulatory documents in English, produce security compliance technical documentation, and communicate seamlessly with overseas teams.
Strong cross-functional communication and project execution skills; able to collaborate effectively across multiple time zones and cultural backgrounds.
──────
Bonus Points
Prior security compliance experience at a cryptocurrency exchange, payment institution, large internet company, or fintech firm.
Experience building multi-region / multi-site security compliance frameworks (not limited to a single region).
Familiarity with security platform/product development; ability to derive platform feature requirements from compliance needs.
Experience as an ISO 27001 internal auditor or participation in a SOC 2 Type II audit.
Holds certifications such as CISSP, CISM, CISA, or ISO 27001 LA/LI.
Direct hands-on experience with specific regional regulatory frameworks such as DORA, Tubitak, or SFC.
Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.
Location: Remote, Canada; Remote, United States
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Senior Backend Engineer on GitLab's Security Factory: Code Security team, you help developers find and fix security issues. Those issues live in the code they write and in the open source components they depend on.
Your work spans complementary parts of a complete security analysis. On the dependency analysis side, you teach the analysis engine what a project depends on. You parse dependency manifests, lockfiles, and SBOMs so the engine knows which libraries and frameworks are in play and how the code uses them. You also extend the service that turns security advisories into automated merge requests that update vulnerable dependencies. On the vulnerability detection side, you grow GitLab's security analysis engine with hybrid analyzers that blend rule-based detection and AI reasoning. You build and apply the tooling that develops, evaluates, and ships those analyzers, and you measure how well they find real problems. That work also expands coverage of the libraries, frameworks, and AI agent tooling that real-world applications are built on.
These threads reinforce each other. What a project depends on, and how its code uses those dependencies, are parts of one picture, and this team works across all of it. We make thoughtful use of AI-assisted development tools in our daily work. We expect you to use them effectively and with good judgment.
What you do
Act as the directly responsible individual (DRI) for team initiatives from design through delivery, shipping with minimal guidance in partnership with the technical lead
Bring systems built by one engineer to team ownership through documentation, tests, and shared review
Design and ship analyzers that pair deterministic analysis capabilities with AI-driven analysis, and build the evaluation harnesses that measure their false positives and missed findings against benchmark applications with known vulnerabilities, raising the bar for what counts as a trustworthy result. That includes detection rules mapped to CWE and the test fixtures that prove they work.
Package those analyzers for every place GitLab runs them, including CI jobs, AI agent workflows, and command-line tools, with findings reported in GitLab's standard security report formats
Design and ship the manifest, lockfile, and SBOM parsing that tells the static analysis engine what a project depends on, and extend it to new ecosystems and formats
Ship features across the automated remediation service that turns security advisories into dependency update merge requests, from sandboxed updates to merge request creation
Solve technical problems of high scope and complexity, actively seek out difficult impediments affecting the whole team, and advocate for improvements to quality, security, and performance with Product Management, Engineering stakeholders such as Frontend and UX, and partner teams such as Code Scanning and Composition Analysis
Mentor Intermediate engineers through code review and pairing, and maintain our internal standards for style, maintainability, and best practices through review
Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues
Take part in on-call or operational support where your team’s ownership model requires it
What you bring
Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't
Substantial professional experience writing and testing production code in a systems language, particularly Go and/or Rust, with depth in at least one. We use both, plus Ruby on the remediation side and Python for some analyzers, and value willingness to work across them.
Familiarity with package managers and dependency management in one or more language ecosystems, such as npm, Maven, pip, Bundler, or Cargo. Experience building tooling around them is better still.
Demonstrated application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE) and the software supply chain
A track record of taking ownership of ambiguous problems and shipping with minimal guidance, with the self-motivation and organizational skills suited to a remote, largely asynchronous environment
Demonstrated capacity to communicate clearly and concisely about technical problems, and to write design proposals that bring a team to a decision
Helpful experience
Experience evaluating AI-driven detection against labeled data, including measuring false positives and missed findings
Experience with performance optimization at scale
Hands-on program analysis experience, such as parsing, ASTs, or data-flow analysis
Familiarity with popular web or mobile application frameworks and how they handle input, data, and configuration
Experience with containerized workflows and CI/CD (we use Docker heavily)
About the team
The Security Factory: Code Security team builds GitLab's code-level security scanning capabilities, spanning static application security testing and dependency scanning. We help developers find and fix security issues in both the code they write and the open source components they depend on, as early as possible.
We work closely with the Static Analysis team on GitLab's SAST engines, with Composition Analysis on the broader software supply chain, and with other groups across the Sec Section. We rely heavily on asynchronous work across time zones.
Remote-Global
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our
benefits
and
equity
. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$139,200
—
$235,200 USD
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Staff Backend Engineer on GitLab's Security Factory: Code Scanning team, you help developers find and fix security issues. Those issues live in the code they write, and you set the technical direction for the static analysis engine that finds them.
Your work spans two complementary parts of a complete security analysis. On the engine side, you shape how the static analysis toolkit models a program: parsing source into intermediate representations, resolving symbols, building call graphs, and tracking tainted data across files and languages. You define the architecture and specifications the team builds against, and you delegate component specifications within them to engineers and to the AI agents that implement them. On the evaluation side, you build and apply tooling that tests, measures, and validates what the engine finds against benchmark applications with known vulnerabilities.
What the engine can model and how we measure what it finds are parts of one picture. As a Staff engineer you hold that picture, shape the long-range technical goals of the team, and raise the bar for every engineer on it. We build the engine with AI agents that write and review code from written specifications, under human direction. We expect you to direct that work effectively and with good judgment, and to help the team do the same.
What you do
Act as the directly responsible individual (DRI) for the team's highest-scope initiatives from design through delivery, shipping large features with minimal guidance and shaping the long-range goals of the team
Bring systems built by one engineer to team ownership through documentation, tests, and shared review
Set the technical direction for the AI-assisted tooling that implements, reviews, and validates engine changes and findings, design the checks that decide whether an agent-written change or generated result is fit to merge, and measure detection quality against benchmark applications with known vulnerabilities, raising the bar for what counts as a trustworthy result. That includes static application security testing (SAST) rules mapped to CWE and OWASP, and the test fixtures that prove they work.
Own the architecture of the program model (parsing, symbol resolution, intermediate representations, call graphs, and taint and data-flow analysis) and of the pipeline that turns source code into findings, and define how both extend to new languages and frameworks
Solve technical problems of the highest scope and complexity, actively seek out difficult impediments affecting the whole team, and advocate for improvements to quality, security, and performance with Product Management, UX, and partner teams such as Code Security and Composition Analysis
Mentor all engineers on the team through code review and pairing, remove blockers to their autonomy, and shepherd the definition and improvement of our internal standards through review
Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues
Define the overarching architecture and specification documents for the engine, delegate component specifications within them, and drive their implementation by AI agents and engineers working independently through phased plans, small reviewable units of change, and specifications kept in lockstep with the code
Build and maintain the harness, agent instructions, and agentic skills that keep agent-written code trustworthy, including separate coding and reviewing agents, rules and tests the coding agents cannot change, independent review panels of agents from different model providers, and performance, API, and dependency gates, with risky changes escalated to human review
Stay current with research in program analysis and security, run AI-assisted research and spikes, and turn the findings into prototypes, proposals, and upstream contributions, including responsible disclosure of findings in open source projects
Take part in on-call or operational support where your team’s ownership model requires it
What you bring
Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't
Extensive professional experience writing, testing, and reviewing production code in Rust, Go, or a comparable systems language, with depth in at least one. The engine is Rust, the analyzer wrapper is Go, and the monolith integration is Ruby, and we value willingness to work across them.
Experience with performance optimization and with containerized workflows and CI/CD (we use Docker heavily)
A deep program analysis and static analysis background, such as parsing and ASTs, intermediate representations (SSA, control-flow and call graphs), taint and data-flow analysis, type inference, incremental and fixpoint computation, or writing detection rules, with the ability to read, evaluate, and apply the research literature
Deep application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE)
Demonstrated capacity to communicate clearly and concisely about complex technical, architectural, and organizational problems, and to write architecture and design specifications that bring a team to a decision
A track record of taking ownership of ambiguous, team-wide problems and shipping them from concept to production with minimal guidance, with specific, regular async updates on progress, blockers, risks, and next steps
Experience defining a system's overarching architecture, delegating component specifications to engineers and AI agents, and getting them implemented reliably
A track record of mentoring engineers, raising a team's technical bar, and influencing technical direction by achieving consensus with peers and leadership
Helpful experience
Familiarity with popular web or mobile application frameworks and how they handle input, data, and configuration
Experience designing guardrails for agent-written code, such as mutation testing, fuzzing, and CI gates the coding agent cannot modify
A record of engaging with the research community, such as publications, tool papers, or upstream open source contributions in program analysis or security
About the team
The Security Factory: Code Scanning team develops GitLab's SAST capabilities for customer software repositories.
We work closely with the Code Security team on scanning rules & flows, with Composition Analysis on the broader software supply chain, and with other groups across the Sec Section. We rely heavily on asynchronous work across time zones.
Remote-Global
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our
benefits
and
equity
. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$152,800
—
$259,200 USD
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: Vienna, Austria
About Us
Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.
Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.
Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.
Job Responsibilities
Responsible for EU and global IT desktop operation and maintenance, terminal management, office network and application platform implementation and operation & maintenance support, and employee IT service support, etc.
Perform foundational IT operations tasks, including OS installation/configuration, user access management, and data backup/recovery for servers and business systems as well as firmware upgrades for network devices, security policy configurations, and network topology optimization.
Analyse and clarify EU and global end-users technical inquiries as wells as manage IT AI Ticketing System, summary and reporting analysis periodically
Configure, monitor, and maintain daily operations of office network infrastructure (routers, switches, wireless APs, etc.) to ensure stable internal network performance. In case troubleshoot and resolve network connectivity issues or address common problems such as latency or outages
Participate in office network planning, including new office network deployments and adjustments to existing network structures.
Monitor the status of core business systems, respond to alerts promptly, and maintain incident logs during shifts and support cybersecurity efforts, including vulnerability scanning, firewall policy maintenance, and emergency response to security incidents.
Tracking and maintenance of EU and global IT assets
Implement related IT projects with IT team leader, contracting, and implementation including user acceptance testing and user training when needs
Job Requirements
Degree in Computer science, Information Technology or equivalent
Candidates with at least 3 years and above experience in IT operations and Level 1 / Level 2 end-user support or related fields would be preferred
Familiar with Mac/Windows laptop operation and maintenance
Familiar with Google Suite and various common office application system operation and maintenance
Have certain projects implementation and management experience
Possess good learning, communication and independent problem-solving abilities
Remote support services experience is required
Must be able to multitask and work in a fast-paced environment
Fluent in German and English mandatory, Mandarin is a plus
This role requires successful candidates to be based in-person in Vienna Headquarter
Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.
Location: Wyoming
Administrative Assistant
Location:
Project-Based
Employment Type:
Full-Time
Travel:
No Travel Required
Support the Teams Delivering Mission-Critical Infrastructure
The successful delivery of hyperscale data centers and mission-critical infrastructure depends on strong project support, accurate documentation, effective communication, and exceptional administrative coordination. Administrative Assistants play a critical role in helping project leaders stay organized, ensuring information flows efficiently, and supporting the day-to-day operations that keep projects moving forward.
As an
Administrative Assistant
with Michels Infrastructure Solutions, you will provide administrative support to project leadership and operational teams while serving as a trusted resource for project personnel, vendors, subcontractors, and corporate support functions.
About Michels Infrastructure Solutions
Michels Infrastructure Solutions (MIS) brings together the full capabilities of the Michels Family of Companies under a
Super General Contractor (Super GC)
model, providing mission-critical owners and developers with a single point of accountability for every phase of project execution. By combining self-performed specialty design, construction, and commissioning services, MIS delivers large-scale, multidisciplinary projects with greater control over safety, quality, schedule, and cost.
MIS specializes in the delivery of hyperscale data centers and mission-critical facilities, leveraging expertise across mass grading and site development, wet and dry utilities, fiber and telecommunications infrastructure, ground improvement, deep foundations, structural concrete, power infrastructure, and commissioning. Our integrated delivery approach enables customers to partner with a single-source team capable of executing some of North America's most complex and demanding infrastructure projects.
Position Overview
As an
Administrative Assistant
, you will provide day-to-day administrative support to project leadership and operational teams under minimal supervision. This role requires a highly organized and detail-oriented professional who can effectively manage multiple priorities while maintaining confidentiality, professionalism, and accuracy.
You will support Project Directors and project leadership teams by coordinating schedules, managing correspondence, preparing reports, processing invoices, maintaining records, coordinating training materials, and assisting with a variety of project administrative functions.
Success requires strong communication skills, exceptional organizational abilities, attention to detail, sound judgment, and the ability to thrive in a fast-paced project environment with changing priorities.
Key Responsibilities
Provide administrative support to project leadership, operations teams, and other departments as assigned.
Coordinate meetings, calendars, schedules, travel arrangements, and administrative activities.
Prepare and distribute correspondence, reports, presentations, and project documentation.
Process invoices, payment requests, and related administrative records.
Maintain project records, payroll documents, reports, and filing systems with a high degree of accuracy.
Promote a strong health, safety, environment, and quality (HSEQ) culture throughout all administrative activities.
What You'll Do
Support Project Directors and project leadership teams with daily administrative responsibilities.
Manage complex calendars, scheduling priorities, meeting requests, and appointment coordination.
Coordinate travel arrangements, lodging accommodations, transportation logistics, and expense reporting.
Prepare meeting agendas, presentations, executive correspondence, reports, and other business communications.
Write, proofread, distribute, and maintain professional correspondence and project documents.
Process incoming and outgoing mail, packages, and administrative communications.
Review invoices for accuracy, prepare documentation for approval, and coordinate with Accounts Payable for processing and follow-up.
Facilitate internal billing activities and assist with tracking invoice payment status.
Track payroll records and perform transactional data entry with a high degree of accuracy.
Scan, organize, maintain, and file payroll and project-related documentation.
Coordinate the production and distribution of training materials and project communications.
Maintain department documentation, records, templates, forms, and standard materials.
Support corporate and divisional teams with various administrative and clerical activities.
Maintain confidentiality when handling sensitive company, employee, financial, and project information.
Assist with special projects and other administrative assignments as needed.
Why Michels Infrastructure Solutions, Inc.?
We deliver some of North America's largest and most complex hyperscale data center and mission-critical infrastructure projects.
We leverage a unique Super GC delivery model that combines specialty construction capabilities under a single-source execution approach.
We provide exposure to every phase of project delivery, from planning and procurement through commissioning and turnover.
We are family owned and operated.
We invest an average of
$5,000 per employee per year
in training and career development.
We perform meaningful work that supports cloud computing, artificial intelligence, digital connectivity, and economic growth.
We believe everyone is responsible for promoting safety, regardless of job title.
We are part of the Michels Family of Companies, one of North America's largest and most diversified energy and infrastructure contractors.
We offer opportunities for advancement across project support, operations, administration, and business functions.
Comprehensive Benefits Package
Health Insurance
Dental Insurance
Life Insurance
Flexible Spending Accounts (FSA)
Health Savings Account (HSA)
Short-Term Disability Insurance
Long-Term Disability Insurance
401(k) Retirement Plan
Legal Plan
Identity Theft Protection and Monitoring Plan
Benefits may vary based on position and location.
Why You?
You like to surround yourself with dedicated, value-driven people.
You relish new challenges and evolving technology.
You cringe when you hear: “Because that's the way we've always done it.”
You are highly organized and enjoy keeping teams on track.
You take pride in accuracy, professionalism, and attention to detail.
You enjoy supporting leaders and helping others succeed.
You thrive in fast-paced environments with multiple competing priorities.
You want to work to make a difference.
What It Takes
High school diploma or GED and
3+ years of related administrative experience
, or an equivalent combination of education and experience.
Strong proficiency with Microsoft Office Suite, including Outlook, Word, Excel, PowerPoint, and Teams.
Demonstrated ability to manage multiple priorities while maintaining accuracy and professionalism.
Strong organizational, administrative, and time-management skills.
Excellent verbal and written communication skills with the ability to create accurate, clear, and concise correspondence.
Experience supporting executives, project leadership teams, operations groups, or business professionals.
Experience processing invoices, managing records, coordinating schedules, and supporting office operations.
Strong customer service skills, both face-to-face and through phone and electronic communications.
Ability to maintain confidentiality and handle sensitive information with discretion.
Strong attention to detail and commitment to producing high-quality work.
Associate's degree is preferred but not required.
Notary Public licensure, or the ability to obtain Notary Public licensure, is preferred.
Construction, engineering, infrastructure, project support, or professional services experience is preferred.
No travel required.
Work Environment
Primarily works in a climate-controlled office environment with minimal safety or health hazard exposure.
Works at a steady to fast pace with frequent interruptions and changing priorities.
Regular use of computers, office equipment, filing systems, and communication tools.
Frequently required to work at a desk and use hands for typing and document handling.
Regularly lifts and/or moves up to 25 pounds and occasionally more with assistance.
Requires close vision and the ability to adjust focus.
Join a company that powers progress. Be a part of Michels Infrastructure Solutions, Inc.—where you don't just support projects, you help deliver the future of mission-critical infrastructure.
AA/EOE/M/W/Vet/Disability
https://www.michels.us/website-user-privacy-policy/
United States
УдалённоPrague, Czechia; Lisbon, Portugal; Madrid, Spain; Writes clear, short technical documents and drives decisions in async, remote teams across time zones
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
seniorГермания, Франция, Италия; Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role; EMEA - Remote
San Francisco, CA | New York City, NY
УдалённоRemote, Japan; Composed of team members working remotely across time zones, we operate asynchronously to support a focused set of strategic accounts across the region
US - Headquarters - Maryland - Columbia
УдалённоseniorThis role is open to candidates based in North America
Bulgaria
ОфисLimassol, Cyprus; EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family; Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free
Sofia, Bulgaria
Cyprus
УдалённоCanada; United States
Kuala Lumpur, Malaysia; Strong cross-functional communication and project execution skills; able to collaborate effectively across multiple time zones and cultural backgrounds
УдалённоseniorRemote, Canada; Remote, United States; We rely heavily on asynchronous work across time zones; The base salary range for this role’s listed level is currently for residents of the United States only
УдалённоRemote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States; We rely heavily on asynchronous work across time zones; The base salary range for this role’s listed level is currently for residents of the United States only