Location: US - Remote - Illinois, US - Hybrid - Massachusetts - Boston, US - Remote - North Carolina, US - Remote - New York, US - Remote - Texas , US - Headquarters - Maryland - Columbia
Who is Tenable?
Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!
What makes Tenable such a great place to work?
Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!
Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc
Your Role:
The Senior Manager, Services Architecture & Education leads the Portfolio Architects within the Global Services Portfolio, serving as the strategic link that converts overarching portfolio strategy into technically credible consulting services and end-to-end Education programs. Carrying a dual mandate, this role is accountable for leading an experienced team of technical experts through an evolving operating model while acting as the authoritative technical design voice across the entire Global Services suite.
This position owns service design, Education strategy, offering creation, the On-Demand Training (ODT) and Instructor-Led Training (ILT) curricula, and the Training Subscription model. The Senior Manager builds, standardizes, and scales the creation and maintenance engine necessary to keep all consulting offerings and educational content continually aligned with Tenable’s rapidly evolving product roadmap, feature releases, and version retirements.
Working with minimal supervision as a key member of the Services Portfolio Leadership Team, the Senior Manager sets high-bar technical and instructional standards, balances team capacity across creation, optimization, and lifecycle maintenance, and collaborates seamlessly with cross-functional leadership—including Portfolio Strategy & Innovation, Portfolio Enablement & Creative, Program Management, and PS Product Champions—to drive portfolio adoption and operational excellence.
ORGANIZATION STRUCTURE:
Reports to: Senior Director, Services Portfolio
Direct reports: Portfolio Architects (Associate Services Architects, Services Architects, and Senior Services Architects)
Your Opportunity:
Service Design & Offering Creation
Service Architecture:
Own the architecture, methodology, scope, and outcomes of consulting service offerings, and the technical requirements and validation behind them. Each offering has a named Services Architect who owns its technical design, with the Manager accountable.
Offering Creation:
Direct the creation of net-new offerings and Education against the quarterly roadmap set by Portfolio Strategy & Innovation, and lead improvements to existing services alongside the Portfolio Strategy & Innovation Lead.
Technical Substance:
Make sure the team owns the technical, service, and Education substance of its work, and that the content is accurate before it is handed to Portfolio Enablement & Creative for writing and design.
Standards & Quality:
Set and maintain service design, content, and lab standards and templates, and review the most strategic offerings before release.
Education Strategy & Training Subscription
Education Strategy:
Set the direction for Professional Services Education across on-demand (ODT), instructor-led (ILT), and hybrid delivery.
Curriculum Ownership:
Be accountable for the TRG master curriculum and the ODT and ILT source content, including review on a defined cadence and consistency between delivery formats.
Training Subscription:
Direct the priorities and evolution of the Training Subscription and track its adoption.
Education Authoring:
Ensure Architects author and maintain Education content, including in Articulate, to the standard required for technical accuracy and sound learning design. Work with Portfolio Enablement & Creative, where digital learning production needs specialist support.
Education Governance:
Work with the Education Governance Lead on standards, approvals, versioning, and controls. The Manager owns the Education strategy, and Governance owns the controls.
Portfolio Maintenance & Lifecycle
Maintenance Health:
Be accountable for overall maintenance health across services and Education. Run maintenance as a formal lifecycle (identify, triage, assign, update, validate, publish, communicate, close) carried out by named asset owners, without creating a permanent maintenance team.
Capacity Allocation:
Allocate team capacity between creating, improving, and maintaining content, and report the mix, overdue maintenance, and retirements at the quarterly portfolio review.
Roadmap Alignment:
Work with Product Management and Portfolio Strategy & Innovation to plan updates well ahead of product release, and to decide what to refresh, retire, or replace.
Feedback Loop:
Act on maintenance and improvement items routed from field feedback triage and the PS Product Champions Forum, and close the loop visibly with the field.
Team Leadership & Delivery
People Leadership:
Recruit, onboard, manage, and develop the Portfolio Architects, including performance management and career progression across the Associate, Services Architect, and Senior Services Architect levels.
Change Leadership:
Lead the team through the move to the new operating model, including the transition of long-tenured team members, and set clear expectations for the Architect role.
Capability Building:
Build team capability in service design, Education design, and delivery, and in the use of modern authoring and AI-enabled production approaches.
Delivery Oversight:
Oversee dependencies, costs, and schedules across team projects, assess risks, and take corrective action to ensure on-time, within-budget delivery.
Budget:
Manage the team’s budget and make the case for resources, tooling, and lab environments.
Protecting Creation Time:
Protect focus time for the team, including the Friday focus day, so that deep creation and maintenance work is not displaced by meetings.
Leadership & Cross-Functional Engagement
Portfolio Leadership Team:
Contribute to the weekly Portfolio Management Call, bringing creation, Education, maintenance, capacity, and the decisions required, and to the quarterly portfolio review.
Strategy & Innovation:
Work with the Portfolio Strategy & Innovation Lead on the annual and quarterly roadmap, business cases, and launch readiness, providing technical and Education input.
Enablement & Creative:
Work with the Portfolio Enablement & Creative Manager on briefs, handoffs, and review cycles to ensure creative output includes accurate technical content.
Program Management:
Work with the Portfolio Program Manager on milestones, dependencies, and launch readiness.
PS Product Champions:
Use the PS Product Champions to validate content and to maintain delivery playbooks, worksheets, and guidance, with Architects validating where needed.
Stakeholders:
Interface with leaders in Product, Customer Success, Customer Care, Sales, and Partners, including direct customer and partner engagement where needed.
Escalations:
Act as the senior escalation point for portfolio content issues that the team cannot resolve.
What You'll Need:
Experience
Security Foundations:
10+ years of overall experience in Information Security.
Vulnerability Management & Cybersecurity:
5+ years of experience in vulnerability management and broader cybersecurity operations, preferably with the Tenable product suite.
Services Experience:
7+ years of professional services, consulting, technical support, sales engineering, or technical training experience.
Education & Curriculum:
Proven experience setting Education strategy and designing and delivering technical curricula across on-demand, instructor-led, and hybrid formats, including subscription or learning platform offerings.
People Management:
3+ years of experience leading technical, content, or consulting teams, including line management and leading experienced teams through change.
Delivery Lifecycle:
Exposure to the full offering or product delivery life cycle: requirements analysis, design, testing, and implementation.
Cross-Functional Leadership:
Experience with cross-functional and cross-organisational program management, including gathering customer and stakeholder requirements.
Knowledge and Education
Education:
B.S. or M.S. degree in Computer Science or a related field preferred; equivalent experience considered.
Technical Depth:
In-depth knowledge of Windows and Linux operating systems and of TCP/IP networking, with working knowledge of web application, container, and cloud security (AWS/Azure) and ICS/SCADA systems.
Learning Design & Authoring:
Working knowledge of instructional design frameworks and of authoring tools such as Articulate, sufficient to set standards and review the team’s work.
Business Acumen:
Both business and technical acumen, including budget management and capacity planning.
Certifications:
CISSP, CISM, or PMP preferred.
And Ideally:
Communication:
Strong written and verbal communication skills, including the ability to present to executive, customer, and partner audiences.
Collaboration:
Strong interpersonal skills with the ability to influence and work effectively across teams and at a senior level.
Autonomy:
Strong initiative and the ability to work with minimal supervision, remotely and as part of a geographically distributed team, in an agile environment.
#LI-MM1
This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.
US Pay Range
$145,000
—
$193,666.67 USD
We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact
Recruiting@Tenable.com
for further assistance.
Tenable Data Consent Statement
Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:
General Applicant Privacy Notice
California Applicant Privacy Notice
EU/EEA/UK Applicant Privacy Notice
Location: Global Remote
Workplace: remote
Metabase is the easiest way for people to get insights from their data, from tiny startups who get up and running quickly to major corporations with tens of thousands of users. That's why people love us.
We bring data tools with the elegance and simplicity of consumer products to the crufty world of enterprise business intelligence. We provide an opinionated open source starting point for how companies should measure, analyze and share their data, which is used by tens of thousands of companies.
About the Role
We’re looking for a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them.
Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise with frontier AI tools to find vulnerabilities, develop fixes, and make Metabase secure by default across its product, dependencies, and runtime.
Things you’ll do
Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption.
Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes.
Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices.
Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities.
Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective.
Turn individual findings into broader improvements that prevent entire classes of vulnerabilities.
What you bring
A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research.
The ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries.
Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data.
Sound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly.
Strong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn.
A thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output.
Ownership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution.
Compensation
The US base salary range for this role is $160K–$225K annually, plus equity and benefits.
Compensation is determined by role, level, location, and individual qualifications, including skills, experience, and scope of responsibility. Pay may vary by geographic location and other job-related factors.
Benefits
We offer meaningful equity and a comprehensive US benefits package, including fully employer-covered medical, dental, and vision insurance (with 75% coverage for dependents), a 401(k) with employer match available to enroll after the first 30 days, flexible and unlimited paid time off including sick time, and an asynchronous, remote-first environment.
We're a global team (50% outside the US), fully distributed (from Thailand to California), who get things done asynchronously, with plenty of uninterrupted time, supporting each other to do the best work of our careers. We offer flexibility (define your own schedule and work from wherever you want), autonomy, and an environment that fosters growth, learning, and development. We're relentlessly user-focused and believe in building long-term value, not short-term hacks. And we raised a $30M Series B to take our approach to the next level for years to come.
For U.S. applicants: Metabase participates in the federal E-Verify program, which confirms employment authorization of newly hired U.S. based employees. E-Verify is not used as a tool to pre-screen candidates and is only initiated upon hire.
E-Verify Participation Notice (English/Spanish)
Right to Work Notice (English/Spanish)
Location: Limassol, Cyprus
Workplace: on-site
Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement.
We are building the future of live entertainment. We believe that by providing people with the best and high-quality live streaming experience in entertainment, we can tackle the world’s “problems” better, together!
We're looking for a DevSecOps specialist to join our team and collaborate on continuously evolving our security architecture. You'll work closely with engineering and operations to strengthen our end-to-end security posture—protecting infrastructure, applications, and data — while enabling fast, reliable delivery.
Job Responsibilities
Responsible for the developing and maintaining the organization’s security architecture design to ensure the protection of IT systems, endpoint devices, network infrastructure, and information assets.
Security initiatives to assess and mitigate risks, ensuring alignment with business objectives and compliance with regulatory requirements.
Collaborate with IT and business units to integrate security practices into the development and deployment of IT systems and applications.
Conduct research on emerging security technologies and trends to enhance the organization’s security posture.
You’ll thrive here if you have
Proficiency in Ansible and Terraform for Infrastructure as Code (IaC).
Solid knowledge of cloud security frameworks.
Knowledge of threat intelligence platforms and techniques for monitoring and responding to potential security breaches.
Proficiency in encryption technologies, PKI, and cryptographic protocols (SSL/TLS, IPSec).
Understanding of network security, including firewalls, VPNs, IDS/IPS, and endpoint security solutions.
Understanding of identity and access management (IAM) solutions, including SSO, MFA, and RBAC policies.
Soft skills:
Effective communication: Ability to convey complex security concepts in an accessible manner.
Emotional intelligence (EQ): Fostering empathy and understanding in all interactions.
Commitment to greatness: A results-driven mindset with a focus on excellence.
Human-centricity: Ensuring solutions benefit both people and systems.
Analytical thinking: Strong problem-solving and decision-making skills.
Flexibility: Adaptable to changing priorities and challenges.
Conflict management skills: Skilled in resolving disputes constructively and efficiently.
Inter-dependence: A team player who thrives in collaborative environments.
Qualification that can be a plus:
SIEM, Cloudflare, k8s, ELK.
Proficiency in Ansible.
Any IT / DevOps / Security certifications.
Knowledge of modern DevSecOps practices.
Expertise in scripting or programming languages such as Python, Go, Bash.
Experience with security risk assessment frameworks, such as NIST, ISO 27001, or CIS.
Hands-on experience with vulnerability scanning and penetration testing tools, such as Nessus, Qualys, or Metasploit.
Knowledge of compliance standards (e.g., GDPR, HIPAA, PCI DSS) and their implications on IT security practices.
Conditions
We know that great talent deserves great conditions, so here's what you can expect when joining us:
EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family.
Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free.
Transparent performance reviews twice a year, with bonus opportunities and salary adjustments.
Private medical insurance for you and your family, a corporate mobile plan (unlimited in Cyprus with roaming included), and interest-free support for car purchases.
Mindfulness & well-being support, including psychological assistance with 50% coverage.
50% coverage of school and kindergarten fees for your children.
Fully covered sports benefits, and also access to in-house electric scooters and bike rentals.
Provident fund (Cyprus): a long-term savings plan co-funded by you and the Company together (available after probation) that grows throughout your time with us in Cyprus.
Investment in your growth: paid language courses and access to suited-for-you development programs, including conferences, training programs, and coaching to support your professional journey.
A culture of recognition: a peer reward program to celebrate your contributions.
A fully equipped office in Limassol’s city center, with everything you need for deep work and collaboration.
Free catering in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks.
A strong engineering culture: international teams, corporate events, team buildings, and hackathons—because great work happens in great communities.
Recruitment process
HR interview (45 min);
Technical interview (1.5 hours);
Final interview with HRBP (45 min) - optional.
Ищем сильного Security Engineer с практическим опытом защиты инфраструктуры, расследования инцидентов и проектирования архитектуры безопасности. • Опыт в Cybersecurity / Information Security от 3 лет.
The System & Infrastructure Administrator is responsible for the day-to-day administration, support, security, and reliable operation of the company’s corporate IT environment.
Location: AU: Melbourne: (260 Burwood Rd)
Workplace: Hybrid
SENIOR ENGINEER, SALESFORCE PLATFORM
THE ROLE AND ITS IMPACT
Xero's Salesforce platform powers our go-to-market solutions and is increasingly the core infrastructure for our agents. As a senior engineer, you'll spend most of your time in hands-on work: writing and reviewing code, joining design reviews, responding to incidents and building proofs of concept. You'll help shape how the platform is secured, released and operated.
Your impact is measured in results. Today the platform runs at 99.95% uptime, with 100% path-to-production compliance, zero Sev 1 or Sev 2 incidents and 150 to 200 deployments a month. You'll help maintain that standard as the platform scales significantly. This role lets you Go Bold by challenging how the platform is built, Go Fast by removing friction to production, Go Further by building things that last and Go Together by lifting capability across every team that depends on you.
THE TEAM AND HOW THEY CONNECT
The Platform team sits within Customer Platforms, the engineering group behind Xero's go-to-market and customer experience technology. You'll work closely with engineering leaders across Security, Data and AI, and with colleagues across Australia, New Zealand and our offshore partners.
THE TEAM IS CURRENTLY WORKING ON
- Platform security: access control, Connected Apps governance and vulnerability remediation, setting the standards that make secure the default.
- CI/CD and release engineering: championing automation so every engineer building on the platform can ship safely and quickly.
- Observability and operational health: growing observability, managing org limits and preventing customer-facing issues before they start.
- Agent path-to-production: building a safe route from idea to production for agentic changes, including evaluation baselines, an agent registry and shared standards. This is a new area with no established playbook, so you'll help write it.
WHERE AND HOW YOU CAN WORK
Based in Melbourne, we encourage one day a week in the office to stay connected with your peers. The pods you support are spread across Australia, New Zealand and offshore, so you'll be comfortable building trust and aligning people asynchronously and in writing.
HERE ARE SOME OF THE THINGS WE ARE LOOKING FOR
- You bring hands-on Salesforce development depth at enterprise scale, from code and reviews through to production support, with a platform engineering mindset.
- Your background includes owning CI/CD pipelines and release engineering across major release cycles, with GitHub, SFDX and test automation experience.
- You've secured platforms that other teams depend on, and you've turned post-incident reviews into lasting change.
- You can make code and design decisions across multiple teams, and you write RFCs and design docs that build alignment through persuasion rather than authority.
- You help senior engineers grow through code review standards, and you use AI tooling fluently while evolving your own practice as the tools change.
- You turn business goals into technical plans with Product, and you're comfortable pushing back on unclear scope.
Обеспечение информационной безопасности информационных систем, сервисов и цифровой инфраструктуры Университета. Мониторинг событий информационной безопасности и выявление потенциальных угроз и инцидентов.
• Ensure the security of the company’s server, network, and cloud infrastructure. • Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts.
Location: Berlin Office; Bosnia; Norway; Estonia; Latvia; Slovenia; Netherlands; Hungary; Kosovo; Portugal; Poland; Serbia; Germany; Austria; Finland; Montenegro; Albania; Lithuania; Slovakia; Ireland; Bulgaria; Denmark; Belgium; Czech Republic; United Kingdom; Croatia; Spain; Greece
Workplace: Remote
The AI orchestration of your wildest imagination.
n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact.
Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve:
- Cultivated a community of more than 650,000 active developers and builders
- Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects
- Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation
That’s the company we’ve built. Now we’d love to see what you can build. If you’re applying, try n8n out - whether you’re technical or not - and share a screenshot of your first workflow with us. The easiest place to start is here: app.n8n.cloud/register http://app.n8n.cloud/register.
We’re in a defining moment of an incredible journey. Come and build with us.
🎯 Your main goal will be to identify and reduce security risks across n8n's product and internal systems, using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems.
You'll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You'll help us build a move from reactive security management to a proactive, scalable security practice.
Here's what you'll be driving:
THREAT MODELLING, RISK ASSESSMENT & SECURITY DESIGN
- Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations.
- Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls.
- Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently.
VULNERABILITY MANAGEMENT & COORDINATED DISCLOSURE
- Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact.
- Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes.
- Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and GitHub Security Advisories.
SECURITY OPERATIONS & INCIDENT READINESS
- Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications.
- Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents.
- Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk.
CUSTOMER TRUST & COMPLIANCE ENGINEERING
- Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations.
- Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests.
- Partner with Legal, Finance, IT, and other stakeholders to assess security risks, improve security policies and controls, and strengthen trust with enterprise customers.
We're hiring two Security Engineers with complementary strengths, so you don't need to be an expert in every security domain.
REQUIREMENTS
MUST-HAVES
- 🔍 Threat Modelling & Risk Assessment: You have hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls that teams can implement.
- 🛠️ Technical Security Expertise: You can validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed to demonstrate risks or improve security processes.
- 🔐 Security Engineering Experience: You've worked hands-on in infrastructure, product, or application security within a product-focused organisation, with a strong understanding of how modern systems are designed and secured.
- 🤝 Cross-functional Influence: You're comfortable acting as an internal security consultant, advising teams, challenging technical decisions constructively, and influencing stakeholders without direct authority.
- 🎯 Risk Remediation & Ownership: You've helped secure systems you don't directly own, translating security findings into actionable requirements and working with responsible teams to ensure effective remediation.
- 🤖 AI & LLM Fluency: You're comfortable using LLM-assisted tooling and understand its limitations, security implications, and potential failure modes.
- ✍️ Clear Communication: You can explain complex security risks, document technical findings, and provide practical guidance that engineers and non-technical stakeholders can confidently act on.
You also bring deep expertise in at least two of the following areas:
- 💻 Application Security: You've developed security checks, engineering guardrails, tooling, or guidance that helps product teams build and ship secure software.
- ☁️ Platform Security: You have experience securing a major cloud provider and Kubernetes environments, including areas such as sandboxing, multi-tenancy, or identity.
- 🔑 Corporate Security: You've worked on identity and access management, endpoint security, employee access lifecycles, or data access controls across corporate environments.
- 🚨 Security Monitoring: You've implemented logging, protective monitoring, or security detection capabilities that support effective investigation and incident response.
- 📋 Security Assurance & Compliance: You've supported SOC 2 or ISO 27001 from an engineering perspective, including implementing technical controls or automating compliance evidence collection.
NICE-TO-HAVES
- 🐛 Vulnerability Disclosure: You've helped operate bug bounty or coordinated vulnerability disclosure programmes, including publishing security advisories such as GHSAs or CVEs.
- 🧠 AI & Agent Security: You have experience assessing or securing LLM-powered applications and AI agents, including risks related to permissions, tool access, prompt injection, or sensitive data.
- 🏢 Corporate IT Tooling: You're familiar with platforms such as Okta, Azure, or Drata and their role in securing corporate systems and supporting compliance.
- 🌍 Open-source Ecosystems: You've worked with open-source or source-available products, contributed to security communities, or are already familiar with n8n.
- 🎯 Penetration Testing: You have practical penetration testing experience and can independently identify, demonstrate, and help remediate security vulnerabilities.
- 🌱 Early-stage Security Experience: You've been an early security hire or helped establish security practices in a startup or rapidly scaling organisation.
Why join us?
At n8n, you'll help shape security at a defining stage of our growth. We're building a security practice that goes beyond reacting to vulnerabilities, and you'll play a key role in how we identify risks, influence engineering decisions, and establish security practices that scale with the business.
You'll work across a broad range of challenges, from securing AI-powered product features and our source-available automation platform to improving corporate security, strengthening incident readiness, and making compliance more automated. You'll have direct exposure to teams across the company, the opportunity to influence important technical decisions, and the autonomy to turn your expertise into measurable security improvements.
Sound like a challenge you're excited to take on?
Apply now — and help us build the future of secure automation.
n8n is an equal opportunity employer and does not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, gender identity, age, marital status, veteran status, or disability status.
We can sponsor visas to Germany; for any other country, you need to have existing right to work.
Our company language is English.
You care about diversity and inclusion? We do too! Check out our Diversity, Inclusion and Belonging initiatives at n8n https://www.notion.so/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35?pvs=21 (https://www.notion.so/n8n/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35).
Location disclaimer: If you see multiple job postings for the same role, it is most likely because we're hiring remotely for this role and posting in different locations to make sure every potential candidate can see the role. Please apply to the location you're the most likely to work from in the future.
BENEFITS
- Competitive compensation 💸 – We offer fair and attractive pay.
- Ownership 💪 – Our core value is to “empower others,” and we mean it—you’ll get a slice of n8n with equity.
- Work/life balance 🏖️ – We work hard but ensure you have time to recharge:
- Europe: 30 days of vacation, plus public holidays wherever you are.
- US: 20 vacation days, 8 sick days, plus public holidays wherever you are.
- Health & wellness 🩺 –
- Europe: We provide benefits according to local country norms.*
- US: Multiple low-premium, low-deductible medical plans with coverage for individuals and families—plus a no-cost premium HDHP option with a pre-seeded HSA—along with dental and vision coverage.
- Future planning 💰 –
- Europe: We provide pension contributions according to local country norms.*
- US: 401(k) retirement plan with a 4% employer match.
- Financial security 🛡️ –
- Europe: We provide benefits according to local country norms.*
- US: Company-paid short-term and long-term disability insurance, plus life insurance to support you and your loved ones.
- Career growth 📈 – We hire rising stars who grow with us! You’ll get €1K (or equivalent) per year to spend on courses, books, events, or coaching to level up your skills.
- A passionate team 🤩 – We love our product, and we prove it with regular hackathons where we see who can build the coolest thing with it!
- Remote-first 🌏 – Our team works remotely across Europe, with regular off-sites for team bonding. Some roles, like sales in the US, are hybrid—please check the job description.
- Giving back 🤝 – We're big fans of open source, and you'll get $100 per month to support projects you care about.
- Transparency 🙏 – We all know what everyone’s working on, how the company is doing—the whole shebang.
*Country and/or State specific details provided in your employment agreement.
Location: Seattle, WA
Workplace: Remote
ABOUT DOCKER
Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.
We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
_______________________________________________________________________
THE OPPORTUNITY
Docker is seeking a Senior Principal Engineer to serve as the technical visionary and architect for how software gets built, verified, and trusted.
Every day, millions of developers pull images, install dependencies, and ship builds to production. Each of those steps is a place where something can go wrong, or be made to go wrong. Compromised base images, malicious packages, tampered build steps, unsigned artifacts moving through pipelines nobody is watching. The industry calls this the software supply chain, and it has become one of the most consequential unsolved problems in software engineering.
This role sits in Docker and Ecosystems, the group that owns Docker’s most well known products and our emerging content and SDLC business. You will own the technical strategy for secure software delivery across all of it, defining what verifiable, tamper-resistant software delivery looks like at Docker's scale, then driving the architecture that makes it real for every developer and every enterprise customer using our products.
You will set multi-year technical direction, make architectural decisions that shape Docker's product portfolio, and work directly with the SVP of Engineering and executive team on strategy. You will not manage people. You will change what the industry considers table stakes.
WHAT YOU'LL DO
TECHNICAL VISION AND STRATEGY
- Lead multi-year technical vision for build security and supply chain across Docker Desktop, Hub, Hardened Images, Verified Publishing, and monetization platforms.
- Define and sequence "trusted by default" architecture for 20M developers.
- Partner with the SVP of Engineering to convert commercial strategy into multi-year technical roadmaps.
- Establish company-wide architectural principles and security standards.
- Identify high-leverage platform investments that enhance security across all Docker products.
- Proactively position architecture ahead of evolving supply chain threats and regulatory demands.
BUILD SECURITY ARCHITECTURE
Architect systems to detect and prevent build-process threats like compromised dependencies, malicious steps, tampered artifacts, and untrusted images.
- Design provenance and attestation infrastructure ensuring Docker artifacts carry verifiable build history.
- Define artifact signing, verification, and policy enforcement across local workflows and CI/CD pipelines.
- Architect SBOM generation, dependency analysis, and vulnerability intelligence for complete software visibility.
- Align with and help shape emerging supply chain security standards.
- Ensure security controls remain fast and unobtrusive so developers keep them enabled.
SDLC AND DEVELOPER WORKFLOW INTEGRATION
- Architect how Docker's security capabilities integrate across the full software development lifecycle, from local development through CI/CD to production deployment
- Design the interfaces and contracts that let Docker's tooling embed into the pipelines, registries, and platforms customers already run, rather than asking them to rebuild around us
- Define the developer experience for security tooling, where the secure path is the fast path and the default path
- Architect policy and enforcement models that satisfy enterprise security and compliance requirements without fragmenting the developer workflow
- Drive convergence of security capabilities across Docker products, replacing product-specific implementations with shared platform primitives
TECHNICAL EXCELLENCE AND INFLUENCE
- Work with leaders across engineering to drive strategy and execution
- Mentor and develop Staff and Principal engineers, raising the technical bar across the organization
- Represent Docker's security architecture externally through blog posts, conference talks, standards bodies, and technical community engagement
- Participate in executive-level discussions, providing architectural perspective on business decisions
- Take part in on-call rotation for your team, respond to incidents, debug production issues, and drive continuous improvement of system reliability
WHAT YOU'LL BRING
DOMAIN EXPERTISE
- 12+ years of software engineering experience specializing in build security, software supply chain security, or SDLC tooling
- Deep understanding of build process threat models across dependencies, environments, artifacts, and pipelines, along with effective mitigations
- Architectural experience in artifact signing, attestations, SBOMs, dependency security, CI/CD security, base image trust, or vulnerability intelligence
- Practical knowledge of supply chain security frameworks and standards
- Expertise in API design, service architecture, and scalable system integration
- Proven record delivering large-scale distributed systems for millions of users and enterprise customers
- Experience with major cloud platforms (AWS, GCP, Azure) and modern infrastructure
- Bachelor's degree in CS, Engineering, or equivalent practical experience
STRATEGIC AND BUSINESS IMPACT
- Proven track record creating strategic technical plans that enable revenue, expansion, or enterprise deals
- Experience converting business strategy into technical architectures and roadmaps
- Understanding of SaaS business models, enterprise sales, and how security impacts commercial outcomes
- Experience leading build-vs-buy decisions for core platform components
LEADERSHIP AND INFLUENCE
- Ability to lead large, cross-company technical initiatives across multiple engineering teams
- Experience partnering with VPs and executives to define and execute technical strategy
- Proven ability to influence technical direction and build consensus without direct authority
- Strong communication skills for presenting to executives and driving organization-wide alignment
- Experience mentoring senior engineers and developing technical leaders
ENTERPRISE CONTEXT
- Experience building products that serve enterprise customers with complex security and compliance requirements
- Knowledge of enterprise security requirements and compliance frameworks such as SOC 2 and ISO 27001, and their architectural implications
- Understanding of how enterprise security teams evaluate, procure, and operate tooling
PREFERRED
- Scale experience at a security, developer tools, or infrastructure software company
- Experience with containers (Docker, Kubernetes) or developer platforms
- Experience with complex enterprise billing, contracts, usage pricing, and revenue recognition
- Proven ability to migrate legacy systems without disrupting business operations
- Contributions to open-source security tools or supply chain security standards
- Recognized technical leader via speaking, publishing, or open-source work
- Advanced degree in CS, Engineering, or a related field
WHAT SUCCESS LOOKS LIKE
Security Posture
- Artifacts produced through Docker carry verifiable provenance by default, not by opt-in configuration
- Build-time threat classes are addressed architecturally rather than through detection after the fact
- Developers keep security controls enabled because the controls are fast and unobtrusive
Business Enablement
- Security and governance capabilities directly unblock enterprise revenue
- New product SKUs launch in weeks instead of months through the billing platform
- Usage-based billing supports monetization of new security and AI product lines
Platform Leverage
- Product teams ship enterprise-ready, secure-by-default features in under two weeks rather than months
- Shared security primitives replace fragmented per-product implementations
- Platform systems achieve 99.9%+ uptime for business-critical workflows
Organizational Impact
- Recognized across Docker as the definitive technical authority on build and supply chain security
- Multiple Staff and Principal engineers developed who can own major domains
- Docker's voice carries weight in the external supply chain security conversation
Docker considers visa sponsorship on a case-by-case basis based on business needs.
Compensation & Equity
United States: $219K – $352K + equity
______________________________________________________________________
POSTING INFORMATION
- Open vacancy: This posting is for an existing open role.
- AI in hiring: Docker may use AI-assisted tools during our recruiting process.
- Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.
______________________________________________________________________
PERKS & BENEFITS
- Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
- Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
- Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
- Home office support – Set up your workspace for comfort and success.
- Technology stipend – Equivalent to US$100 net per month to help support your work.
- Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
- Parental leave – 16 weeks of paid parental leave after six months of employment.
- Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
- Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
- Docker swag – Because representing the whale never gets old.
Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.
#LI-REMOTE
Within this, you will: Own features of the OpenZeppelin Contracts Library for Daml end to end, from design through audit: examples include a Timelock, access control, vaults, or token standard support. Implement and shepherd the OZ Daml versions of CIP-56, CIP-86, CIP-103, future CIPs.
Location: Brussels, Belgium
We currently have a vacancy for a
Full stack Developer (Java)
fluent in English, to offer his/her services as an expert who will be based
remotely (within EU)
. In the context of the first assignment, the successful candidate will be integrated in the Development team of the company that will closely cooperate with a major client’s IT team on site.
Tasks:
Development of back-end website applications;
Apply secure development practices, including input validation, authentication and authorisation, secrets management, dependency management, protection against common web vulnerabilities, secure logging, and appropriate handling of sensitive data;
Design responsive applications and develop APIs, both REST and SOAP;
Writing clean, functional code on the front- and back-end;
Write automated unit, integration and where appropriate end-to-end tests;
Use application monitoring, structured logging and tracing to diagnose production and non-production issues;
Diagnose application, database, integration and performance issues across the full stack;
Design applications with appropriate consideration for security, maintainability, observability, scalability and performance;
Compile and analyse data, processes, configuration, dependencies and code to troubleshoot problems and identify areas for improvement;
Perform unit/integration testing, debug, fix, and validate code changes;
Develop and maintain features across the entire stack, from designing user interfaces and consuming APIs to implementing server-side business logic and database interactions.
Requirements
University degree in IT combined with relevant IT professional experience of at least 12 years;
At least 7 years of professional software development experience;
At least 5 years of recent hands-on experience developing Java applications with IoC frameworks such as Spring;
At least 5 years of recent experience with relational databases and SQL;
At least 2 years of recent hands-on experience with a modern JavaScript/TypeScript framework such as Angular;
Demonstrated experience developing and integrating REST APIs;
Demonstrated experience with CI/CD, Docker and cloud/container-based deployment;
At least 2 years of recent experience in which they personally performed full-stack development covering all the elements components above simultaneously;
Proven practical experience working within Agile/Scrum or comparable software development methodologies;
Excellent command of the English language.
Benefits
If you are seeking a career in an exciting and dynamic company, where you will offer your services as part of a team of a major European Institution, operating in an international, multilingual and multicultural environment where you can expect real chances to make a difference, please send us your detailed CV in English, quoting reference:
(20839/10/2026).
We offer a competitive remuneration (either on contract basis or remuneration with full benefits package), based on qualifications and experience. All applications will be treated as confidential.
You may also consider all our other open vacancies by visiting the career section of our web site (
www.eurodyn.com)
and follow us on Twitter (@EURODYN_Careers) and LinkedIn.
EUROPEAN DYNAMICS (
www.eurodyn.com
)
is a leading Software, Information and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Stockholm, London, Nicosia, Hong-Kong, Valetta, etc). The company employs over 1000 engineers, IT experts and consultants (around 3% PhD, 36% MSc and 53% BSc or equivalent). We design and develop software applications using state-of-the-art technology. The group generates annual revenues in the range of EURO 40 million, with an EBITDA in the range of 20%. The value of our contract portfolio exceeds EURO 300 million. EUROPEAN DYNAMICS is a renowned supplier of IT services to government institutions, multinational corporations, public administrations and multinational companies, research and academic institutes.
As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion
EUROPEAN DYNAMICS (ED)
adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published in
www.eurodyn.com/privacy.
By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line to the Policy.
* Own outbound prospecting and pipeline creation for a defined set of accounts. * Research target accounts and decision-makers using tools like ZoomInfo and LinkedIn Sales Navigator.
Location: Remote, Canada; Remote, United States
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Senior Backend Engineer on GitLab's Security Factory: Code Security team, you help developers find and fix security issues. Those issues live in the code they write and in the open source components they depend on.
Your work spans complementary parts of a complete security analysis. On the dependency analysis side, you teach the analysis engine what a project depends on. You parse dependency manifests, lockfiles, and SBOMs so the engine knows which libraries and frameworks are in play and how the code uses them. You also extend the service that turns security advisories into automated merge requests that update vulnerable dependencies. On the vulnerability detection side, you grow GitLab's security analysis engine with hybrid analyzers that blend rule-based detection and AI reasoning. You build and apply the tooling that develops, evaluates, and ships those analyzers, and you measure how well they find real problems. That work also expands coverage of the libraries, frameworks, and AI agent tooling that real-world applications are built on.
These threads reinforce each other. What a project depends on, and how its code uses those dependencies, are parts of one picture, and this team works across all of it. We make thoughtful use of AI-assisted development tools in our daily work. We expect you to use them effectively and with good judgment.
What you do
Act as the directly responsible individual (DRI) for team initiatives from design through delivery, shipping with minimal guidance in partnership with the technical lead
Bring systems built by one engineer to team ownership through documentation, tests, and shared review
Design and ship analyzers that pair deterministic analysis capabilities with AI-driven analysis, and build the evaluation harnesses that measure their false positives and missed findings against benchmark applications with known vulnerabilities, raising the bar for what counts as a trustworthy result. That includes detection rules mapped to CWE and the test fixtures that prove they work.
Package those analyzers for every place GitLab runs them, including CI jobs, AI agent workflows, and command-line tools, with findings reported in GitLab's standard security report formats
Design and ship the manifest, lockfile, and SBOM parsing that tells the static analysis engine what a project depends on, and extend it to new ecosystems and formats
Ship features across the automated remediation service that turns security advisories into dependency update merge requests, from sandboxed updates to merge request creation
Solve technical problems of high scope and complexity, actively seek out difficult impediments affecting the whole team, and advocate for improvements to quality, security, and performance with Product Management, Engineering stakeholders such as Frontend and UX, and partner teams such as Code Scanning and Composition Analysis
Mentor Intermediate engineers through code review and pairing, and maintain our internal standards for style, maintainability, and best practices through review
Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues
What you bring
Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't
Substantial professional experience writing and testing production code in a systems language, particularly Go and/or Rust, with depth in at least one. We use both, plus Ruby on the remediation side and Python for some analyzers, and value willingness to work across them.
Familiarity with package managers and dependency management in one or more language ecosystems, such as npm, Maven, pip, Bundler, or Cargo. Experience building tooling around them is better still.
Demonstrated application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE) and the software supply chain
A track record of taking ownership of ambiguous problems and shipping with minimal guidance, with the self-motivation and organizational skills suited to a remote, largely asynchronous environment
Demonstrated capacity to communicate clearly and concisely about technical problems, and to write design proposals that bring a team to a decision
Helpful experience
Experience evaluating AI-driven detection against labeled data, including measuring false positives and missed findings
Experience with performance optimization at scale
Hands-on program analysis experience, such as parsing, ASTs, or data-flow analysis
Familiarity with popular web or mobile application frameworks and how they handle input, data, and configuration
Experience with containerized workflows and CI/CD (we use Docker heavily)
About the team
The Security Factory: Code Security team builds GitLab's code-level security scanning capabilities, spanning static application security testing and dependency scanning. We help developers find and fix security issues in both the code they write and the open source components they depend on, as early as possible.
We work closely with the Static Analysis team on GitLab's SAST engines, with Composition Analysis on the broader software supply chain, and with other groups across the Sec Section. We rely heavily on asynchronous work across time zones.
Remote-Global
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our
benefits
and
equity
. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$139,200
—
$235,200 USD
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Staff Backend Engineer on GitLab's Security Factory: Code Scanning team, you help developers find and fix security issues. Those issues live in the code they write, and you set the technical direction for the static analysis engine that finds them.
Your work spans two complementary parts of a complete security analysis. On the engine side, you shape how the static analysis toolkit models a program: parsing source into intermediate representations, resolving symbols, building call graphs, and tracking tainted data across files and languages. You define the architecture and specifications the team builds against, and you delegate component specifications within them to engineers and to the AI agents that implement them. On the evaluation side, you build and apply tooling that tests, measures, and validates what the engine finds against benchmark applications with known vulnerabilities.
What the engine can model and how we measure what it finds are parts of one picture. As a Staff engineer you hold that picture, shape the long-range technical goals of the team, and raise the bar for every engineer on it. We build the engine with AI agents that write and review code from written specifications, under human direction. We expect you to direct that work effectively and with good judgment, and to help the team do the same.
What you do
Act as the directly responsible individual (DRI) for the team's highest-scope initiatives from design through delivery, shipping large features with minimal guidance and shaping the long-range goals of the team
Bring systems built by one engineer to team ownership through documentation, tests, and shared review
Set the technical direction for the AI-assisted tooling that implements, reviews, and validates engine changes and findings, design the checks that decide whether an agent-written change or generated result is fit to merge, and measure detection quality against benchmark applications with known vulnerabilities, raising the bar for what counts as a trustworthy result. That includes static application security testing (SAST) rules mapped to CWE and OWASP, and the test fixtures that prove they work.
Own the architecture of the program model (parsing, symbol resolution, intermediate representations, call graphs, and taint and data-flow analysis) and of the pipeline that turns source code into findings, and define how both extend to new languages and frameworks
Solve technical problems of the highest scope and complexity, actively seek out difficult impediments affecting the whole team, and advocate for improvements to quality, security, and performance with Product Management, UX, and partner teams such as Code Security and Composition Analysis
Mentor all engineers on the team through code review and pairing, remove blockers to their autonomy, and shepherd the definition and improvement of our internal standards through review
Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues
Define the overarching architecture and specification documents for the engine, delegate component specifications within them, and drive their implementation by AI agents and engineers working independently through phased plans, small reviewable units of change, and specifications kept in lockstep with the code
Build and maintain the harness, agent instructions, and agentic skills that keep agent-written code trustworthy, including separate coding and reviewing agents, rules and tests the coding agents cannot change, independent review panels of agents from different model providers, and performance, API, and dependency gates, with risky changes escalated to human review
Stay current with research in program analysis and security, run AI-assisted research and spikes, and turn the findings into prototypes, proposals, and upstream contributions, including responsible disclosure of findings in open source projects
What you bring
Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't
Extensive professional experience writing, testing, and reviewing production code in Rust, Go, or a comparable systems language, with depth in at least one. The engine is Rust, the analyzer wrapper is Go, and the monolith integration is Ruby, and we value willingness to work across them.
Experience with performance optimization and with containerized workflows and CI/CD (we use Docker heavily)
A deep program analysis and static analysis background, such as parsing and ASTs, intermediate representations (SSA, control-flow and call graphs), taint and data-flow analysis, type inference, incremental and fixpoint computation, or writing detection rules, with the ability to read, evaluate, and apply the research literature
Deep application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE)
Demonstrated capacity to communicate clearly and concisely about complex technical, architectural, and organizational problems, and to write architecture and design specifications that bring a team to a decision
A track record of taking ownership of ambiguous, team-wide problems and shipping them from concept to production with minimal guidance, with specific, regular async updates on progress, blockers, risks, and next steps
Experience defining a system's overarching architecture, delegating component specifications to engineers and AI agents, and getting them implemented reliably
A track record of mentoring engineers, raising a team's technical bar, and influencing technical direction by achieving consensus with peers and leadership
Helpful experience
Familiarity with popular web or mobile application frameworks and how they handle input, data, and configuration
Experience designing guardrails for agent-written code, such as mutation testing, fuzzing, and CI gates the coding agent cannot modify
A record of engaging with the research community, such as publications, tool papers, or upstream open source contributions in program analysis or security
About the team
The Security Factory: Code Scanning team develops GitLab's SAST capabilities for customer software repositories.
We work closely with the Code Security team on scanning rules & flows, with Composition Analysis on the broader software supply chain, and with other groups across the Sec Section. We rely heavily on asynchronous work across time zones.
Remote-Global
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our
benefits
and
equity
. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$152,800
—
$259,200 USD
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
AI is changing what security teams can do. Claude can find and help fix vulnerabilities in code at a pace that wasn't possible a year ago, and we want defenders to have that advantage first. As a Cybersecurity Sales Specialist, you'll own Anthropic's security business across the accounts in one of our business units, such as financial services, healthcare and life sciences, or technology. You'll lead the security strategy with CISOs, partnering with the Account Executives who own the accounts in your industry to drive opportunities and put Claude to work on their hardest security problems.
You'll help decide how we sell security, what we learn from customers, and how that shapes our products. The work matters to our mission: a safe transition through transformative AI depends on the people who defend critical systems being able to use it well.
Key responsibilities
Build and close security business, from the first conversation with a CISO's team through contract and expansion, working with the Account Executive who owns each relationship
Create security pipeline with the Account Executives in your industry, from their existing accounts and through outbound to security leaders, events and joint work with partners
Lead with the customer's problem: finding and fixing vulnerabilities, application security, security operations, and deploying AI agents securely
Partner with your Applied AI engineers on discovery, proofs of concept and architecture, and know when to bring them in
Guide customers through security reviews, verification for security use cases, and procurement
Teach the Account Executives in your business unit to spot and qualify security opportunities
Bring what you hear from security teams back to our product, safeguards and marketing teams
Minimum qualifications
Experience selling or supporting the sale of cybersecurity products or services to enterprise customers
Deep experience in at least one security domain, such as application security, vulnerability management, security operations, cloud, data, identity or endpoint security
Ability to hold credible conversations with a CISO, an application security lead and a security engineer about how their work gets done
A consultative approach to selling: you understand the problem before you propose anything, and you're honest about what a product can't do
A commitment to making AI systems safe and beneficial
Preferred qualifications
5 or more years in sales or other customer-facing roles, including 3 or more years selling or supporting cybersecurity products or services for enterprise customers
Experience closing complex, multi-stakeholder enterprise deals where the security organization was the buyer or the deciding approver
Experience as a specialist alongside account teams while carrying your own number, and the ability to say exactly what you did to win the deal
Experience building pipeline where there's no playbook yet, through outbound and partners rather than inherited accounts
A record of leading through influence, not authority: Account Executives bring you into their accounts because you help them win
Experience selling security in one of the industries we cover, and an understanding of how security is bought and regulated there
Experience selling AI, developer or data platform products to technical buyers
Hands-on experience as a security practitioner or sales engineer before moving into sales
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$380,000
—
$450,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
seniorГеография найма не уточнена
УдалённоE-Verify is not used as a tool to pre-screen candidates and is only initiated upon hire
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ОфисLimassol, Cyprus; EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family; Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free
УдалённоseniorRemote, Canada; Remote, United States; We rely heavily on asynchronous work across time zones; The base salary range for this role’s listed level is currently for residents of the United States only
УдалённоRemote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States; We rely heavily on asynchronous work across time zones; The base salary range for this role’s listed level is currently for residents of the United States only
География найма не уточнена
Все вакансии в одном месте - страница 7 · Job Hunters
