Вакансии

Location: United States of America What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Product Research Location: Remote US Compensation Range: $215,000.00 to $225,000.00  base plus bonus and equity What You’ll Do: Lead product research initiatives that develop and evaluate macOS security product strategies and technologies Identify and prototype new telemetry from Apple's Endpoint Security API and other macOS subsystems to expand prevention, hardening, and detection capabilities Reproduce and analyze macOS attacks through hands-on execution of attacker techniques, malware detonation, and vulnerability exploitation Reverse engineer macOS malware and Apple's own security frameworks (XProtect, XProtect Remediator, Gatekeeper, TCC) to identify coverage gaps and inform product direction Prototype and test new tools and methodologies for offensive operations against macOS endpoints, including EDR evasion and bypass research Build proof-of-concept implementations that demonstrate the feasibility of new capabilities Document research findings and collaborate with Detection Engineering on writing and tuning detectors Coordinate with Product and Engineering teams to integrate and operationalize solutions developed by Security teams Stand up ephemeral research environments and attacker infrastructure using cloud, VM, and container technologies Track Apple platform changes across beta and release cycles, and assess their impact on agent capability, telemetry, and detection coverage Identify and address gaps in macOS product coverage, including false positive and false negative investigations Develop internal and external technical documentation to educate customers and adjacent teams on macOS security risks and opportunities Mentor and teach across the team on macOS internals, malware analysis, and research methodology Promote Huntress' reputation through public speaking, CFPs, blogs, and media interaction What You Bring To The Team: Deep expertise in macOS system internals, including the security model, code signing and notarization, TCC, SIP, persistence, and the Mach-O file format Hands-on experience with Apple's Endpoint Security API and system extension development Authority on macOS security threats, attack techniques, and the current macOS malware landscape Familiarity with macOS fleet management (MDM, configuration profiles, mobileconfig deployment) Experience red teaming and performing attack emulation to bypass EDR on macOS Proficiency with Swift. Additional understanding of Go, Python, and/or Ruby is preferred. Experience with the MITRE ATT&CK matrix, Sigma, YARA, and Elasticsearch/Kibana Track record of building POCs and carrying research from concept through to a shipped product capability Experience leading data requirements work and tying it to cost/benefit analysis on collecting and storing only high-value telemetry Commitment to clear written documentation of research findings Comfortable reading Apple developer documentation, framework headers, and API references to answer undocumented questions An understanding of how SMBs utilize IT automation tools such as PSAs and RMMs is strongly preferred Bonus : Comfortable reverse engineering Mach-O binaries and scripted payloads using debuggers and a disassembler suite (Binary Ninja, IDA Pro, Hopper, or Ghidra) What We Offer: 100% remote work environment - since our founding in 2015 Generous paid time off policy, including vacation, sick time, and paid holidays 12 weeks of paid parental leave Highly competitive and comprehensive medical, dental, and vision benefits plans 401(k) with a 5% contribution regardless of employee contribution Life and Disability insurance plans Stock options for all full-time employees One-time $500 reimbursement for building/upgrading home office Annual allowance for education and professional development assistance $75 USD/month digital reimbursement Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: Limassol, Cyprus Workplace: hybrid We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team. Responsibilities: Carry out reviews under the Annual Compliance Monitoring Programme and help prepare reports for senior management and the Board. Monitor CySEC, ESMA and EU regulatory developments, assess their impact and follow up with the relevant teams. Prepare regulatory updates and support reports and responses to regulators. Conduct MiFID II target market assessments and ongoing product governance reviews. Review client requests for professional or experienced retail classification and document the rationale for each decision. Assess client vulnerability escalations, determine the appropriate action and document a timely human decision. Act as the primary contact person for compliance queries raised internally. Help draft and update compliance policies, procedures and the Internal Operations Manual. Conduct initial and periodic due diligence on outsourcing providers and other third parties. Maintain compliance registers and support internal audits, regulatory inspections and staff training. Requirements: Bachelor’s degree in Law, Finance, Business or related field. CySEC Advanced Certification, or availability to obtain it during the probation period. Minimum of 2-3 years of experience in compliance, preferably within the financial services industry, with a focus on online trading or brokerage. Experience with compliance monitoring, regulatory change or product governance. Sound judgment and the ability to prioritise time-sensitive cases. Strong written communication and organisational skills. Excellent written and verbal English communication skills. What you will get in return: • Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. • Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid • Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. • Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. • Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks! • Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! • Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community. Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Location: Remote; United Kingdom ABOUT ELEVENLABS ElevenLabs is an AI research and product company transforming how we interact with technology. We launched in January 2023 with the first human-like AI voice model. Today, we serve millions of users and thousands of businesses - from fast-growing startups to large enterprises like Deutsche Telekom and Meta. Our investors are some of the world's most prominent, including Andreessen Horowitz, ICONIQ Growth and Sequoia. We've raised $781M in funding and our last valuation was $22B - multiples of 11, always. We have expanded from voice into three main platforms: - ElevenAgents enables businesses to deliver seamless and intelligent customer experiences, with the integrations, testing, monitoring, and reliability necessary to deploy voice and chat agents at scale. - ElevenCreative empowers creators and marketers to generate and edit speech, music, image, and video across 70+ languages. - ElevenAPI gives developers access to our leading AI audio foundational models. Everything we do is the result of the creativity and commitment of our team - builders doing the best work of their lives. We are researchers, engineers, and operators. IOI medalists and ex-founders. If you want to work hard and create lasting positive impact, we want to hear from you. HOW WE WORK - High-velocity: Rapid experimentation, lean autonomous teams, and minimal bureaucracy. - Impact not job titles: We don’t have job titles. Instead, it’s about the impact you have. No task is above or beneath you. - AI first: We use AI to move faster with higher-quality results. We do this across the whole company—from engineering to growth to operations. - Excellence everywhere: Everything we do should match the quality of our AI models. - Global team: We prioritize your talent, not your location. WHAT WE OFFER - Innovative culture: You’ll be part of a generational opportunity to define the trajectory of AI, surrounded by a team pushing the boundaries of what’s possible. - Growth paths: Joining ElevenLabs means joining a dynamic team with countless opportunities to drive impact - beyond your immediate role and responsibilities. - Learning & development: ElevenLabs proactively supports professional development through an annual discretionary stipend. - Social travel: We also provide an annual discretionary stipend to meet up with colleagues each year, however you choose. - Annual company offsite: Each year, we bring the entire team together in a new location - past offsites have included Croatia and Italy. - Co-working: If you’re not located near one of our main hubs, we offer a monthly co-working stipend. ABOUT THE ROLE The ElevenLabs Impact Program exists to democratize access to our technology and make AI work for all people, supporting for-good use cases across healthcare, education, and culture. Today, our work includes providing free and discounted access to nonprofits, partnering with university professors to bring voice AI into the classroom and the research lab, and working to restore the voices of one million people living with permanent voice loss through our 1 Million Voices initiative (learn more at elevenlabs.io/impact http://elevenlabs.io/impact). We're looking for a Producer to own the external storytelling and event presence for Impact, a role that coordinates PR, agency management, social launches, documentary-style case studies, and event production. This is a hands-on, in-house role: you're the person who makes sure every launch, film, and activation meets (or, ideally raises) the bar of the rest of the company's output, working closely with our internal Design, Comms, and Events teams, and, when applicable, with the external agencies and production teams supporting PR, film, and creative execution. Much of Impact’s work is made with people who live with a disability, or are members of vulnerable communities. You will ensure their views carry equal weight and their input helps shape every project, from first conversation to final cut. As Impact's first dedicated producer, you'll build the production and launch engine for a team whose external footprint is scaling fast; this quarter alone includes more than five events, six documentaries in production, two live ElevenLabs Summit sessions, a partner launch every month, and several more case studies in flight. WHAT YOU'LL DO - Coordinate production of Impact's documentary case studies: travel and work onsite for filming when needed, work closely with external production and direction teams, bringing opinions on story and craft, and partner with our Design team to make sure every film meets ElevenLabs' bar and brand guidelines. - Work alongside subjects of our case studies, many of whom live with a disability, as equals and ensure that the production team does the same. You will build in consent, access needs, and editorial input at every stage to ensure alignment in how the story is told, cut, and shared. - Plan and execute Impact's conferences and activations alongside the Events team, turning each one into an in-person moment that drives real ROI and leaves a lasting impression, with Impact's own storytelling angle built in. - Support Comms in telling Impact's story through PR, coordinating with Comms and, when applicable, a PR agency to keep press windows and partner announcements on track, and helping make sure Impact's international stories get told well as the program expands globally. - Partner with Design to keep all video and static collateral on-brand, advocating for a high creative standard and Impact’s lens. - Carry a consistent visual and narrative thread across launches, blog content, and ElevenLabs Summit presentations. - Draft copy for social and blog content, collaborating with Comms to land a final draft, and with Design on all launch-related visual assets. - Manage multiple concurrent launches, shoots, and events at once. REQUIREMENTS - A great project manager with a sharp creative eye, someone who runs cross-functional logistics flawlessly, has real taste, and will push the team to hit it. - Proven practical experience working with vulnerable communities, especially people living with a disability, and ensuring they are provided the time, space and accommodation to be equal partners in high-pressure productions, on tight timelines, and in public. - Organized and detail-oriented, with a track record of juggling several production timelines at once. - Creative or production background (agency, marketing, in-house brand/content team, documentary or branded content) comfortable being on set and in the room with Design, not just commissioning the work. - Strong writing and visual taste; can tell when something is on-brand and polish-worthy. - 2-5 years of experience in production, events, or brand marketing. - Comfortable traveling for shoots and events. #LI-Remote We are an equal opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses.

Location: Georgia; Belarus; Moldova; Serbia; Armenia; Kyrgyzstan; Montenegro; Uzbekistan; Bulgaria; Czech Republic; Estonia; Finland; Portugal; Romania; Azerbaijan Workplace: remote About the Team We are Quadcode, a fintech company excelling in financial brokerage activities and delivering advanced financial products to our global clientele. Our flagship product, an internal trading platform, is offered as a Software-as-a-Service (SaaS) solution to other brokers. We're looking for a Junior Cybersecurity Specialist to join our Security Team. This role sits within the engineering direction of our cross-functional Security team, focused on identifying and helping mitigate security issues, misconfigurations, and vulnerabilities related to corporate infrastructure. In this role, you'll work closely with infrastructure teams (Admins, NOC, OPS, IT Compliance) and business employees who require security-related help. We work in Agile (2-week sprints, grooming, planning, retro) and use Google Meet, Slack, TargetProcess and Confluence for teamwork. Working hours: Business hours, EET/EEST time zone. You'll work with a modern stack and grow within the company - including cloud and hybrid infrastructure, and AI applied to real security work. Tech Stack: Splunk, CheckPoint, Rapid7, AWS, OpenStack, Gitlab, K8s, Terraform, Ansible, Python, Linux, Windows, macOS. Tasks Proceed with requests and notifications related to the security (access management, security tool notifications, vulnerability assessment, etc.); Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to corporate infrastructure; Develop, implement new, and update existing security measures for the protection of corporate infrastructure; Support the identity and access management process; Formation of a knowledge base for the operation of products and services; Assist the security analytics with the incident response process; Collaboration with the Ops and Infrastructure teams in terms of asset security. Requirements 1+ year of experience in server administration, network engineering, site reliability engineering, infrastructure security, cloud security, or systems engineering; Knowledge of the Linux, Windows, and Mac operating systems and common OS hardening practices; Technical knowledge of network protection and network Device Hardening; Automation skills (Bash, Python); Understanding how computer attacks occur; Passion for developing in cybersecurity; Ability to work in a team, listen, and learn independently; Competent written and verbal communication skills (Russian C1 and English B1); Have a good analytical mindset for problem-solving. Nice to have Background in cybersecurity; Experience using AI tooling for technical/cybersecurity tasks; Experience in vulnerability analysis; Experience with infrastructure-as-code (Terraform, Ansible, Chef, etc.); Understanding the tactics and techniques of intruders and how to defend against them. We offer Full-time remote work (service provider contract). Competitive compensation (EUR). Flexible working hours. Corporate AI subscriptions (Claude, Gemini, GPT, etc.). Access to a rewards marketplace offering products and language courses, redeemable using the company’s internal currency. A strong team of engineers. Positive and friendly atmosphere. With a team of 500+ creative and tech-driven people across the globe, Quadcode is the place where ideas turn into impact, where every project is a chance to grow, innovate, and make your mark. Join us today, and let's shape the future of fintech together! Note: All applications will be treated with strict confidence. We thank all applicants for their interest, however, only those candidates selected for interviews will be contacted. #LI-JM1

Serve as deputy to the CISO: act with full authority in the CISO's absence and represent the security organization to executives, customers, and regulators. Lead, coach, and grow managers and senior engineers across Security Engineering and Security Operations.

Location: Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As a member of the Applied AI team at Anthropic, you will be an Applied AI Engineer supporting a dedicated national security mission program. You will be the customer's trusted technical advisor, working closely with their engineering and mission teams as they build and ship new capabilities powered by Claude: advising on architecture design decisions, developing evaluation frameworks, and guiding them through the most cutting-edge implementation patterns for LLMs. Working closely with our Sales, Product, and Engineering teams, you'll guide the customer from technical discovery through successful deployment, much of it on-site in secure environments. You'll combine deep engineering expertise and cyber domain knowledge with customer-facing skills to help the customer unlock the full potential of Claude and move their mission capabilities closer to the frontier, while maintaining our high standards for safety and reliability. Responsibilities Serve as a specialist technical advisor for one or more national security mission programs, from discovery and evaluation through deployment and adoption, coordinating internally across multiple teams to drive customer success Support the customer as they build with Claude Code, the Claude API, and Claude for Enterprise Partner with account executives and Applied AI Architects to translate mission requirements into technical solutions Influence technical architecture decisions and integration into the customer's existing stack by developing customized pilots, prototypes, and evaluation suites Help develop evaluation frameworks to measure Claude's performance for mission-specific use cases Lead hands-on technical workshops and code reviews with customer engineering teams Identify common design patterns and contribute insights back to our Product and Engineering teams Create and deliver technical content, from engineering deep dives to executive briefings Maintain strong knowledge of the latest developments in LLM capabilities, implementation patterns, and AI product development stacks Work primarily on-site with the customer's engineering and mission teams in secure government facilities, while maintaining close internal coordination and feedback with Anthropic's Applied AI and Engineering teams Minimum qualifications Active TS/SCI clearance with Polygraph Prior experience working within US intelligence community agencies as a government civilian or cleared contractor 4+ years of experience in technical roles such as Forward Deployed Engineer, Product Engineer, Software Engineer, or Technical Product Manager, with a desire to work closely with customers Strong programming skills with proficiency in Python or TypeScript and experience building production applications Hands-on expertise in one or more of the following domains: Offensive or defensive cyber operations (including vulnerability research, reverse engineering, and ICS/OT security) Cryptography and cryptanalysis Intelligence analysis and ISR (all-source, SIGINT, GEOINT) Mission and weapons systems (command and control, space, electronic warfare, autonomy) CBRN and nonproliferation Accreditation of classified systems (RMF, ATO, cross-domain solutions) Exceptional communication skills to convey technical concepts to diverse stakeholders, from engineers to executives, while maintaining a low ego and collaborative approach Preferred qualifications Production experience with LLMs, including advanced prompt engineering, agent development and frameworks, evaluation frameworks, transcript analysis, MCP, and deployment at scale Experience deploying and operating software in air-gapped or classified environments Experience designing scalable cloud architectures and integrating with enterprise systems Background in artificial intelligence, machine learning, or data science Ability to navigate ambiguity and execute across domains with intellectual openness, finding simple solutions to complex problems High cooperation mindset for cross-organizational collaboration, balancing competing priorities with integrity Passion for advancing safe, beneficial AI systems through creative technical applications Deadline to apply: None. Applications will be reviewed on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role's On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $280,000 — $320,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: USA - Remote Workplace: Remote About Us Since 2013, we’ve been building a CRM that gets out of your way and helps your team sell more, faster. Now we’re building AI into every part of it, so Close does the busywork and your team does the selling. No manual data entry, no 10-click workflows. Just communication-first, AI-powered sales software designed to help you succeed and scale. We're bootstrapped and profitable which means we answer to our customers and play by our rules. We're proud of our 130-person, 100% remote team, focused on building Close so that no small, scaling business fails because it can't figure out sales. ABOUT THE ROLE Close is a CRM built around the communication tools sales teams use every day: email, calling, SMS, workflows, reporting, and AI. Underneath that product is a broad technical surface — Python services and a large application backend, a TypeScript and React frontend, public APIs, Docker and Kubernetes, AWS infrastructure, and integrations with providers that handle sensitive customer data. Security work happens across it all today, but the ownership is spread across Engineering, Infrastructure, and Security & Trust. We’re hiring our first dedicated Product Security Engineer to make that work systematic. You’ll report to the Backend Platform team manager within EPD (Engineering, Product, and Design), while working across the entire product and infrastructure surface. You’ll find vulnerabilities, determine which findings matter most, and drive them through remediation. Often you’ll fix the problem yourself. Other times you’ll give the owning team a clear reproduction, a practical path forward, and enough context to prioritize correctly. You’ll analyze code, build proof-of-concepts, test running applications, tune or replace noisy tools, and automate the repetitive parts of vulnerability management. This is not a role where you forward scanner alerts and call the queue managed. Product and application security will be your responsibility. You’ll partner closely with our Infrastructure team on cloud security, access, and secrets, and with our Security & Trust Lead on GRC Engineering https://grc.engineering/, compliance (SOC 2) goals, audits, and corporate security. This role is a new one at Close. You’ll have significant room to decide where better tooling, clearer ownership, and a small amount of code can reduce the most risk. OUR STACK Our backend is primarily Python, with Flask and FastAPI services and TaskTiger https://github.com/closeio/tasktiger and Temporal handling much of our asynchronous work. We expose REST https://developer.close.com/ and GraphQL APIs and store data in MongoDB, PostgreSQL, Elasticsearch, and Redis. Our frontend is a large single-page TypeScript application built primarily with React. We bundle with Vite, target modern browsers, and test with Vitest, React Testing Library, Playwright, and Chromatic. The product updates in near real time and uses technologies including WebSockets and WebRTC. Our mobile application is built with React Native. We build and test Docker images in CI/CD and continuously deploy them to Kubernetes on AWS. Our infrastructure uses managed services including EKS, MSK, and ElastiCache, alongside services running on EC2. Terraform and Ansible automate much of the underlying infrastructure, and our containerized local development environment lets engineers run the full system on their own machines. For this role, our stack extends beyond simply backend or frontend: browser behavior, frontend state, API authorization, asynchronous processing, data access, third-party integrations, containers, and cloud configuration can all be part of the same attack path. We love open sourcing our code and ideas on our GitHub https://github.com/closeio and on The Making of Close https://making.close.com/, our behind-the-scenes Product & Engineering blog. Check out our open source projects like SocketShark https://github.com/closeio/socketshark, TaskTiger https://github.com/closeio/tasktiger, LimitLion https://github.com/closeio/limitlion and ciso8601 https://github.com/closeio/ciso8601. AI is both how we build and what we ship, and that's reshaped what engineering looks like. This is a transformation we’re embracing and find deeply exciting. YOU ARE - An application security engineer who writes code. You can move from reading an unfamiliar code path, to reproducing an exploit, to proposing or shipping a production-quality fix. Strong Python or TypeScript experience would be especially useful; fluency across both backend and frontend systems is even better. - Skilled at finding vulnerabilities conventional scanners may miss. You use modern AI-assisted review pipelines, guided by expert judgment, to uncover subtle flaws in web apps and APIs—from authentication, authorization, and tenant isolation to injection, SSRF, unsafe data flows, and business logic. You can threat-model designs, white-box review code, and test running systems. - Offensive-minded and operationally responsible. You know how to test like an attacker without being careless with customer data or production systems. You can turn a finding into a safe reproduction, assess exploitability and business impact, and retest the eventual fix. - An automation builder. You have worked with some mix of SAST, DAST, software composition analysis, container scanning, secrets scanning, or cloud posture tooling. More importantly, you know how to tune tools, connect them to engineering workflows, and remove noise. - AI-native and accountable. You use coding agents and LLMs to accelerate investigation, code review, and repetitive engineering work, but you verify their output. You think carefully about what happens when agents clone untrusted code, install dependencies, or receive access to credentials. - Able to separate severity from priority. A score is an input, not a foregone conclusion. You consider reachability, existing controls, customer impact, and attack chains, then explain the risk in language that is legible to an engineer or business owner. - Comfortable working across the business. You’ll collaborate with product engineers, Site Reliability Engineers, Security & Trust Lead, auditors, and external researchers without confusing partnership for pass-off ownership. You will follow findings to closure even when another team is responsible for the fix. - Self-directed in a remote environment. You can take an ambiguous surface (say, secret rotation or dependency remediation) and learn how it works across multiple systems then turn it into a practical plan with measurable progress. You do not need to arrive as the deepest expert in every part of this scope. You do need to be able to investigate an unfamiliar system, determine what matters, and bring the right people with you. YOU WILL The work spans hands-on application security, security automation, vulnerability management, and infrastructure partnership. Depending on where you find the greatest risk and leverage, projects could include: - Build a recurring product security review program. Threat model new features, audit high-risk areas, review code, and build safe proof-of-concepts in isolated development environments. Work across our backend, frontend, APIs, and customer-facing integrations. - Improve application security testing. Combine static analysis, dependency and secrets scanning, dynamic testing in development, and carefully scoped production testing. Use existing tools where they fit and build focused automation where they don’t. - Own vulnerability intake and remediation. Triage findings from HackerOne, scanners, penetration tests, audits, customers, and internal research. Reproduce issues, assess exploitability and impact, track remediation, and verify fixes. Serve as technical lead for our bug bounty program while contract and budget ownership remain elsewhere. - Turn security alerts into useful engineering work. Verify scanner coverage and automate ingestion, deduplication, enrichment, prioritization, and routing—so teams spend less time interpreting alerts and more time fixing important issues. - Make dependency remediation safer and less manual. Improve scanning across our Python and TypeScript codebases, then build workflows to assess upgrades, stage pull requests, run checks, and route work without exposing credentials to untrusted packages or build steps. - Make secrets routinely rotatable. Partner with service owners and Infrastructure to inventory application secrets, add graceful rotation paths, document provider-specific runbooks, and automate rotation where the provider and risk justify it. Expand our use of Vault-backed dynamic credentials and reduce the number of rotations that require a coordinated fire drill. - Strengthen AWS security with Infrastructure. Evaluate and improve automated detection of risky configuration across identity, networking, compute, storage, containers, and registries. Turn findings into secure defaults, just-in-time access patterns, infrastructure guardrails, and actionable remediation—not build a second Infrastructure team. - Support audits and raising the security floor. Partner with Security & Trust on external assessments, provide technical context, and ensure findings are fixed rather than rediscovered. Along the way, create documentation, paved roads, and lightweight training that helps engineers make safer choices without waiting for a security review. - Take a key technical role in security incident response. Partner with Engineering and Infrastructure to coordinate investigation, containment, and remediation. Contribute to root-cause analysis and follow-up improvements, translating lessons learned into stronger controls and reduced recurrence. Tech you’ll touch: Python, TypeScript, React, Flask, FastAPI, GraphQL, Docker, Kubernetes, AWS, Vault, GitHub Actions, MongoDB, PostgreSQL, Redis, Kafka, Elasticsearch and the security tooling you help us choose. BENEFITS - Compensation: Competitive pay plus an organization-wide goal-based bonus - Paid Time Off: ~5 weeks of PTO to start. Plus a 1-week all-company Winter Holiday Break and paid US holidays. You'll earn 2 extra days for every year you're with Close. - 80% Work Option: Work with your manager to choose between a standard 5-day week or a 4-day week at 80% pay - Parental Leave: Paid leave for primary and secondary caregivers - Sabbatical: A 1-month paid sabbatical every 5 years with the team - Healthcare (US residents): Two medical plans with Close covering the majority of your premium, plus Dental, Vision, HSA, FSA, and company-paid Long-Term Disability - 401k (US residents): We match your contributions up to 6%, vested immediately OUR VALUES Build a house you want to live in - Examine long-term thinking and action No BS - Practice transparency and honesty, especially when it’s hard Invest in each other - Build successful relationships with your coworkers and customers Discipline equals freedom - Keep your word to yourself and others Strive for greatness - Constantly challenge yourself and others LEARN MORE Listen to our CEO and Founder, Steli Efti, tell the story of Close’s journey in the $0-30m Blueprint https://www.close.com/blueprint.  Watch our culture video https://www.youtube.com/watch?v=maXKi1GN2MI from our 2023 team retreat in Milan. Every year our entire team gathers in person to build connection, foster cross-functional collaboration, and have fun. In 2027, we're headed to Dusseldorf, Germany! Explore our product. Check out a demo https://www.close.com/demo-site! OUR HIRING PROCESS We ask a few role-specific questions as part of our application process. These questions are designed to help us learn more about you from the start, so please answer each one thoughtfully. We see this as an opportunity to get to know you beyond your resume. We use AI tools daily at Close and expect candidates to do the same. In evaluating your application, we aim to get a sense for you - the way you think, how you communicate, the work you've done. Applications that read as fully AI-generated will not be considered. Regardless of fit, you can expect to hear back from our team with an update on the status of your candidacy. If you progress to the interview process, you'll receive a full outline of the role-specific steps in your first touchpoint with us. We do our best to make the hiring process clear and human.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. Join us at the forefront of AI and cloud-native security as we work to secure one of the most innovative developer platforms in the world. As the Cloud Security Lead, you will shape the cloud and infrastructure security program that protects millions of developers, enables safe AI-assisted development, and ensures organizations can confidently bring our platform into enterprise environments. In this role, you will own cloud security across GCP (primary) and supplemental environments in AWS and Azure, as well as containerized systems, SaaS platforms, and our multi-tenant AI infrastructure. You’ll improve our security posture through strong architecture, posture management, secure-by-default development practices, and close partnership with Engineering, Compliance, Security Architecture, and Platform teams. This is a highly impactful, hands-on leadership role—perfect for someone who wants to solve complex security challenges at scale while influencing product, engineering, and go-to-market teams. WHAT YOU’LL DO: CLOUD SECURITY ENGINEERING - Lead configuration hardening across GCP, with additional oversight of workloads and integrations running in AWS and Azure. - Own and optimize CSPM platforms across multi-cloud environments—establishing configuration baselines, guardrails, and remediation workflows. - Secure critical SaaS platforms, ensuring proper configurations, access controls, and engineering integrations. - Lead infrastructure vulnerability management across multi-cloud systems, containers, registries, and platform services. - Enhance security across containerized and Kubernetes (GKE/EKS/AKS) workloads, including runtime protections, network policies, and workload identity. - Assess secure logging configurations across cloud/SaaS providers, ensuring audit logs, retention, and routing meet monitoring and architecture needs. SECURE DEVELOPMENT & ARCHITECTURE ENABLEMENT - Partner with engineering teams to make services secure by default, embedding security into development workflows, CI/CD pipelines, and cloud-native deployments. CROSS-FUNCTIONAL RESPONSIBILITIES - Collaborate with Security Monitoring, Compliance/GRC, Architecture, DevOps, Platform Engineering, and ML Infrastructure. - Participate in communicating security advisories, best practices, and updates to Replit’s customers. - Support incident investigations as a cloud security subject-matter expert. REQUIRED SKILLS & EXPERIENCE: - 7+ years of experience in cloud engineering, with 3+ years in a senior or lead role. - Hands-on experience with CSPM tools (Wiz, Lacework, Prisma, Orca, SCC, etc.). - Deep expertise in GCP security (IAM, VPC, KMS, GKE, Cloud Logging). - Experience securing and governing SaaS platforms and identity integrations. - Operational experience with infrastructure vulnerability management across cloud and container environments. - Working knowledge of AWS and/or Azure security services and configurations. - Experience with container and Kubernetes security across GKE, EKS, or AKS. - Strong IaC security experience with Terraform, Pulumi, or similar tooling. - Familiarity with compliance standards (SOC 2, ISO 27001, PCI DSS). PREFERRED QUALIFICATIONS: - Experience supporting engineering teams in building secure-first, cloud-native or PaaS environments. - Background securing AI/ML pipelines, model-serving infrastructure, or developer platform services. - Experience in high-growth technology or cloud-native product companies. - Experience with securing AI/agentic systems and sensitive data pipelines. - Automation/scripting with Python. - Relevant certifications (e.g., GCP Professional Cloud Security Engineer, AWS/Azure security certs). WHAT WE VALUE: - Problem-solving mindset — Ability to break down complex security and operational challenges into clear engineering solutions. - Autonomy — Comfortable leading initiatives, collaborating effectively, and driving outcomes with minimal oversight. - Communication excellence — Able to translate deep technical concepts for engineers, executives, and enterprise customers. - Continuous learning — Passion for staying current with AI security, cloud-native advances, and emerging threats. - Automation-first approach — Belief in reducing operational toil and building scalable, self-healing systems. This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: San Francisco, CA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role AI is changing both sides of the security equation, and Anthropic is focused on putting frontier AI capabilities in the hands of defenders. Cybersecurity is a fast-growing area for Anthropic, spanning enterprise security teams that adopt Claude for their own security work and security companies that build their products on our models. The buyers are demanding and data-driven, from CISOs to hands-on practitioners in security engineering, application security, security operations, threat intelligence, and incident response. As Field Marketing Lead, Cybersecurity, you will lead Anthropic's field marketing for the cybersecurity audience around the world, helping position Claude as the trusted AI partner for security teams. You will align closely with the sales organization, develop the marketing strategies and tools the field needs, and partner with Anthropic's cybersecurity experts in product marketing, solutions marketing, and across the business to turn their positioning and messaging into programs and campaigns. You will be the cybersecurity lead that our campaigns and regional field marketing teams draw on, working with customers in every segment and with a focus on expanding within existing accounts. You will make sure that how we show up to CISOs, practitioners, and the buying committee is credible, consistent, and tied to revenue, whether in a global campaign, an executive roundtable, or a flagship industry event. Location: this is a global role, with a preference for candidates based in San Francisco or New York. Key responsibilities Own the global cybersecurity field marketing plan: define how we reach CISOs, practitioners, and the buying committee in every customer segment, the annual program calendar, and the goals and success metrics agreed with sales leadership before budget is committed Align with the sales organization worldwide: agree on target accounts and buying committees, build programs that expand Anthropic's footprint in existing accounts and open new opportunities, and make sure account teams have what they need to invite, follow up, and convert Partner with product marketing, solutions marketing, and Anthropic's cybersecurity experts: build on their positioning, messaging, and enablement, and work with them to turn cyber use cases into the programs and campaigns that build awareness and demand Develop the marketing strategies and tools the field needs: playbooks, program kits, speaker guidance, and event recommendations that let regional field marketers in the Americas, EMEA, and APAC run cybersecurity programs locally without starting from scratch Design and run flagship cybersecurity moments in the field: executive roundtables, CISO dinners, practitioner workshops, and Anthropic's field presence around major industry events such as RSAC, Black Hat, Gartner Security & Risk Management Summit, and Infosecurity Europe, in step with the launch, content, and thought leadership plans led by product and solutions marketing Serve as the cybersecurity field lead for integrated campaigns: bring audience insight, field feedback, and program ideas, and extend global campaigns into regional programs so they land with CISOs, practitioners, and the rest of the buying committee Bring the voice of the security buyer back into Anthropic: share what you hear from customers, analysts, and the field with Product, Sales, and Marketing leadership Measure what matters: sourced and influenced pipeline, expansion within existing accounts, program-level attribution, and a clear read on which programs earn more investment, built with Marketing Ops Protect the brand with a skeptical audience: hold a high bar for technical accuracy, keep the story focused on defenders and responsible deployment, avoid fear-based messaging, and know when to say no to a program that would not earn trust Operate as connective tissue across Anthropic: Sales, Campaigns, regional Field Marketing, Product Marketing, Solutions Marketing, Partner Marketing, Partnerships, Events, and Comms all touch this audience. You keep them coordinated and the customer experience coherent Minimum qualifications Working fluency in the cybersecurity landscape, across areas such as security operations, detection and response, threat intelligence, application security, vulnerability management, cloud security, and governance, risk and compliance, with enough technical depth to hold a credible conversation with both CISOs and hands-on practitioners A track record of partnering with sales teams on pipeline and on expansion within existing accounts, including account-based programs and executive engagement, with results to show for them Experience across both integrated campaigns and field marketing, and the judgment to know which one a given goal calls for Experience operating globally: you have led programs across multiple regions and enabled local teams to run them well Strong influence without authority: able to set direction for campaigns and regional field marketers who do not report to you Comfort building in ambiguity: the playbook for this motion is being written now, and you'll write much of it Rigor on measurement: fluent in pipeline attribution with sales and ops counterparts Experience working alongside product marketing and technical experts, and turning their positioning and messaging into field programs and campaigns Range across customer segments: you can adapt a program for a large enterprise, a mid-size company, and a fast-growing startup Preferred qualifications 8+ years of B2B marketing experience, with significant time in field marketing or demand generation for cybersecurity buyers at a security vendor or an enterprise technology company Hands-on background in security, such as time as a practitioner, sales engineer, or product marketer for a security product Familiarity with the AI ecosystem and how enterprises adopt AI products, including how AI is changing security work for defenders Experience marketing trust-sensitive or dual-use products, where responsible deployment is central to the story Existing relationships in the security community: CISO networks, analysts, industry groups, and event organizers Experience marketing to regulated industries or public sector buyers, where security review shapes the deal Experience working with security technology partners, managed security service providers (MSSPs), or global systems integrators The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $400,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Remote - US Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next Software Engineer, Platform Access (L2). About the job This position is an engineering role within Twilio’s Cloud Native Foundations Team, suited to an engineer focused on identity, governance, and automated access control across multi-cloud environments. Our team manages identity federation, least-privilege access, and automated provisioning for hundreds of accounts across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). As an L2 engineer, you will help design, build, and operate access controls and platform security tools at scale. You'll get hands-on with multi-cloud IAM, contribute to Terraform-based infrastructure automation, and write code to ensure secure, seamless developer access—using modern AI-assisted tooling to move faster and ramp up your skills. Responsibilities In this role, you’ll: WEAR THE CUSTOMER'S SHOES: Help design, build, and operate automations and access tools that streamline developer workflows while keeping multi-cloud environments secure. Work with security and technical leadership to turn well-scoped tasks into working code. BE AN OWNER (CODE QUALITY): Participate in code reviews and follow established patterns, testing standards and policy-as-code frameworks across the platform. BE AN OWNER (INFRASTRUCTURE & OBSERVABILITY): Support multi-cloud access infrastructure spanning AWS, Azure, and GCP accounts using Infrastructure as Code (Terraform). Help maintain least-privilege IAM policies, identity federation, role provisioning, and automated lifecycle workflows across hundreds of cloud accounts. Help maintain observability coverage, including metrics, alerts, and basic distributed tracing, across core data pipelines. CHAMPION ENGINEERING HEALTH: Build awareness of secure architectural practices and IAM best practices. Flag access drift, technical debt, security vulnerabilities, and platform issues to your team as you encounter them. GROW AND COLLABORATE: Actively seek feedback and mentorship from senior engineers, participate in sprint planning, and share what you learn with peers as you grow into a more senior role. Qualifications Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table! Experience: 1–2+ years of professional software engineering or DevOps/Platform engineering experience, with practical exposure to multi-cloud environments, Identity & Access Management (IAM), or platform automation. Modern Development Workflow: Practical experience with, or a strong desire to learn, AI-assisted development tools (e.g., Claude Code, GitHub Copilot) to help write code, automate testing, and support debugging workflows. Infrastructure as Code & Automation: Practical experience or familiarity with Terraform, Harness, or similar IaC tools to manage cloud resources and access permissions programmatically. Multi-Cloud Infrastructure: Experience with cloud environments, including basic exposure to account management, IAM permissions, or core services in at least one major provider— AWS (e.g., IAM, Organizations, SSO/Identity Center), Microsoft Azure (e.g., Microsoft Entra ID/Azure AD, RBAC, Subscriptions), or Google Cloud Platform (GCP) (e.g., Cloud IAM, Workload Identity, Projects). General familiarity with multi-account/multi-project cloud architecture is a plus. Language Proficiency: Working knowledge of at least one of Shell, Terraform, YAML, or Go (Golang), with a willingness to build proficiency across the rest. Security & Governance Mindset: Solid understanding of core security concepts (authentication, authorization, least-privilege principles, secrets management) and an eagerness to build self-service, developer-friendly platform tooling. Desired: Familiarity with centralized identity federation, SAML, OIDC, or Okta integration with cloud service providers. Hands-on experience with containerized workloads ( Docker , Kubernetes ) or managing access to Kubernetes clusters (EKS/AKS/GKE RBAC). Interest in automated cloud governance tools, account vending machines, or identity lifecycle management at scale. Coursework or personal projects involving distributed systems, cloud security, or API development. Enthusiasm for working across multi-cloud environments and expanding hands-on depth across AWS, Azure, and GCP over time. Location This role will be remote, but is not eligible to be hired in CA, CT, NJ, NY, PA, WA. Travel We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings. What We Offer Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location. Compensation The estimated pay ranges for this role are as follows: Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $116,960.00 - $146,200.00 Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): 123,760.00-154,700.00 Based in the San Francisco Bay area, California: 137,520.00-171,900.00. This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave. The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location. Applications for this role are intended to be accepted until 10/31/2026  but may change based on business needs. Twilio thinks big. Do you? We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call Twilio Magic . Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts. So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for, please consider other open positions. . Stay alert to recruitment fraud We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @ twilio.com email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps. . Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Location: United States Who We Are MEMX is a technology-driven exchange operator founded by members to benefit all investors. We operate MEMX Equities, MEMX Options, and MX2 Options, and provide market technology to clients. Our mission is to create healthy competition and advocate for market structure reform that results in more efficient and sensible trading experiences for all investors. Description MEMX is seeking a motivated and curious Information Security Intern to join our Information Security team during Summer 2027. This is an exciting opportunity for students who have a passion for technology, an interest in financial markets, and the drive to contribute to a fast-growing exchange. You will gain hands-on experience in cybersecurity and learn how a modern exchange protects its systems, data, and clients in a rapidly evolving threat landscape. This internship position will be offered as hybrid with 2 days in-person at our co-working office in Midtown-NYC. *MEMX has currently approved ONLY the following states for remote work: California, Colorado, Connecticut, Delaware, Florida, Georgia, Illinois, Kansas, Maine, Maryland, Massachusetts, Michigan, Nevada, New Jersey, New York, North Carolina, Pennsylvania, South Carolina, Texas, & Utah. What You’ll Be Doing Work with a talented and experienced group of technologists focused on the security of a U.S. options and equities exchanges Monitor and analyze system alerts, logs, and dashboards to help identify and mitigate potential security threats Assist in vulnerability management activities including scanning, patch verification, and documentation Support the creation and maintenance of security policies, standards, and procedural documentation Participate in evaluation and testing new security tools and technologies including AI Security Posture Management Collaborate with Engineering, Infrastructure, and Compliance teams to ensure security best practices are implemented across all systems Contribute to ongoing projects focused on identity and access management, endpoint Take part in a summer-long project designed to solve a real-world information security challenge, culminating in a final presentation Share ideas, learn from senior technologists, and gain exposure to how cybersecurity supports the broader mission of MEMX Requirements Current undergraduate student entering their junior or senior year, pursing a degree in I nformation Security, Computer Science, Information Systems, or a related field Strong interest in cybersecurity, technology, and financial markets Comfortable working with macOS General understanding of core cybersecurity concepts and terminology, including firewalls, encryption, authentication, and ransomware Familiarity with operating systems, networking principles, and cloud environments (AWS, Azure, or similar) is a plus Excellent analytical, problem-solving, and communication skills with attention to detail Collaborative and curious mindset, eager to learn from others and contribute to a growing team Ability to work in person at our Midtown Manhattan office during the summer Permanent residence in one of MEMX’s approved states for remote work during the internship What You’ll Gain Hands-on experience with real-world security operations and tools used to protect an active financial exchange Exposure to the intersection of technology, cybersecurity, and financial markets in a dynamic environment Mentorship from experienced professionals in cybersecurity, engineering, and infrastructure Opportunities to apply classroom knowledge to practical, impactful projects Enhanced understanding of how security enables innovation, resilience, and trust in financial systems A meaningful contribution to MEMX’s mission of building a fairer, more efficient U.S. equities and options marketplace Why MEMX At MEMX, you’ll contribute to meaningful work alongside experienced professionals while developing your skills and learning how our exchanges operate. As part of our summer internship program, you’ll also have access to: Learning opportunities: Attend Lunch & Learn sessions, professional development workshops, and relevant courses Mentorship and support: Learn from a mentor and a designated buddy who can help guide you throughout the summer An intern cohort: Connect with interns working across other MEMX teams Social events: Get to know colleagues, with opportunities to connect with members of MEMX’s C-suite Regular feedback: Check in with your manager and HR to discuss your progress, ask questions, and get support Future opportunities: All interns are considered for potential internship extensions or a full-time opportunity after graduation, based on performance and business needs Pay Rate: $30/hourly for undergraduate students Equal Opportunity Statement MEMX is an equal opportunity employer. We are committed to creating a diverse and inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Diversity Inclusion Statement At MEMX, we believe that diversity and inclusion are essential to driving innovation and success. We welcome and celebrate individuals from all backgrounds and perspectives, and we strive to create an inclusive culture where everyone can thrive.

Location: US - Hybrid - Massachusetts - Boston, US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: The Services Architect is an advanced individual contributor within the Services Architecture team, contributing to the technical direction, quality, and delivery of content across the Professional Services Portfolio. Operating with a high degree of autonomy while aligning with the overarching portfolio strategy, this role leads the design and execution of net-new consulting service offerings, courses, and enablement programs, and helps establish standards for the broader team. In this position, the architect provides technical guidance across team projects, handles content and offering escalations, and actively mentors Associate Services Architects. Working in close collaboration with portfolio leadership, the role supports offering strategy and product roadmap alignment, while periodically teaching customer classes or delivering service engagements to ensure content remains grounded in real-world customer experience. Your Opportunity: Strategy & Portfolio Leadership Portfolio Direction: Shape the Professional Services Portfolio by identifying gaps and opportunities and proposing and prioritizing new offerings aligned with corporate strategy and product roadmaps. Offering Ownership: Design, draft, and update consulting service offerings, enablement content, educational material, and technical presentations for webinars and events, and lead development of the most complex and strategic net-new offerings. Standards & Quality: Maintain high technical, content, and lab quality standards across the portfolio, ensuring that project outputs and contributions, including work from Associate Services Architects, consistently adhere to established team standards and templates. Roadmap Alignment: Stay informed about Tenable product changes, evaluate requirements for offering updates, and plan portfolio updates well ahead of product release. Advisory: Advise the Senior Director, Services Portfolio, on offering strategy, resourcing, and delivery risk. Content Development & Delivery Requirements Review: Review user and technical requirements for completeness and clarity. Collateral: Create collateral for new offerings and evaluate existing offerings and content for accuracy and relevance. Pre-Production Training: Deliver pre-production training sessions to evaluate product suitability and gather early feedback. Live Demonstrations: Create live demonstration recordings for the Tenable product suite. Content Review: Perform content reviews with peers in Services, Technical Support, Customer Success, and Product Management to ensure quality and alignment with customer needs, and act as the final technical approver for release. Customer Experience: Periodically teach customer classes or deliver service engagements to obtain intimate knowledge of the customer experience. Strategic Engagement & Support Field Perspective: Collaborate with Professional Services peers to understand the field perspective on service and training offering requirements. Customer & Partner Engagement: Engage with customers and partners to analyze market trends and the competitive landscape, and translate findings into portfolio decisions. Problem Solving: Provide solutions to a wide range of difficult problems while maintaining a positive attitude and positive working relationships, gathering information to support data-driven decisions. Escalation Support: Act as the final escalation point for Customer Care, Services, and Product escalations relating to portfolio content that the Associate Services Architect cannot resolve. Staying Current: Remain abreast of corporate direction and strategy, product roadmaps, messaging, and emerging trends in the security industry. Project, People & Process Delivery Oversight: Independently manage assigned projects and provide delivery oversight of team members’ projects to ensure delivery on schedule and on budget. Mentoring: Mentor and develop Associate Services Architect colleagues, including setting expectations for the Associate role’s intake and review. Process Improvement: Remain abreast of educational learning frameworks, content development approaches, and technologies that may reduce cost or shorten development timelines, and drive adoption where they do. Other Duties: May perform other duties and responsibilities that management may deem necessary from time to time. What You'll Need: Experience Security Foundations: 5+ years of overall experience in Information Security. Vulnerability Management & Cybersecurity: 1+ years of experience in vulnerability management and broader cybersecurity operations, ideally utilizing enterprise assessment tools such as the Tenable product suite. Services Experience: 3+ years of professional services, technical support, or sales engineering experience. Curriculum Design: Proven experience designing and delivering technical curricula, training, and customer enablement programs, as well as leading others to do so. Knowledge and Education Education: B.S. degree in Computer Science or a related field preferred; equivalent experience considered. Technical Depth: In-depth knowledge of Windows and Linux operating systems and of TCP/IP networking. Emerging Domains: Working knowledge of web application security, container security, cloud environments (AWS/Azure), and ICS/SCADA systems, with in-depth expertise in at least one. Security Tools: Familiarity with security assessment tools such as Nessus, Kali Linux, and Metasploit. Other Requirements Communication: Strong written and verbal communication skills, including the ability to present to senior internal and customer audiences. Collaboration: Strong interpersonal skills with the ability to work effectively with internal and external stakeholders, including at a senior level. Autonomy: Strong initiative and the ability to work remotely, both in a self-directed manner and as part of a geographically distributed team, setting direction for others without day-to-day supervision. #LI-Hybrid #LI-MS1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $145,000 — $193,666.67 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: Paris, France Workplace: Hybrid We’re a team of experts pushing the limits of what’s possible, united by our common goal to unlock true freedom through digital ownership, making technology accessible for all. We believe in a world where users, creators and enterprises manage their value with ownership and freedom. Our curiosity drives us to innovate, empowering individuals on a global scale. We believe change is constant and our team moves forward as one, with a culture of problem-solving where every employee is empowered and supported to challenge tradition and create solutions. Our mission is simple: to make self-custody accessible and give people the keys to their own financial futures. If you want to make a true impact, we want you to join us at Ledger. At Ledger, we’re proud to be the global platform for digital assets and Web3, with over 20% of the world’s crypto assets secured through our Ledger devices. With our headquarters in Paris, and offices in Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich and Central Singapore, we have a team of around 600 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 7.5 millions units already sold in 200 countries.   The team To sustain the company's growth, Ledger is looking for a Senior Scala Backend Engineer to join the Cloud Wallet team. This team builds and operates the backend services that power blockchain account management, transaction processing and on-chain data aggregation across all Ledger wallet surfaces, from Ledger Live to Ledger Enterprise, the custody platform used by financial institutions. Every client transaction goes through these services, and so does every new blockchain Ledger supports. We believe in the power of functional programming to build robust and scalable platforms. We take time to share, challenge, and grow together through bi-weekly knowledge-sharing sessions, meetups, conferences, and open source contributions.   What you’ll be doing - Design, build and operate the Scala services that connect Ledger wallets and the Ledger Enterprise platform to blockchain backends: account creation, operation history, transaction crafting, broadcast and lifecycle tracking. - Lead new blockchain integrations end to end, from the integration design (ADR) to production, across account-based, UTXO and privacy-preserving chains. - Own production quality on your scope: SLIs and SLOs, observability, distributed tracing. Take part in the firefighting rotation and drive incidents to resolution, including those raised by institutional clients. - Define clear contracts with the Coin Integration and Ledger Enterprise teams, for example where UTXO selection lives or how transaction states are exposed to consumers. - Write and review ADRs, challenge designs, and raise the bar on code quality, testing (including end-to-end on testnets) and technical debt management. - Work in an AI-native way: use coding agents daily, write the specifications, constraints and verification that let them deliver safely, and contribute to the team's AI tooling. - Mentor other engineers and share your knowledge across the Backend Blockchain community.   You will collaborate cross-functionally with: - The Coin Integration team for coin modules and new blockchain integrations. - The Ledger Enterprise team, main consumer of the team's services for institutional custody. - The Ledger Wallet, Ledger Button and Wallet XP teams as consumers of the team's backend APIs. - The Blockchain platform team for data model alignment, indexing and event streaming. - The Infrastructure and SRE teams for deployment, reliability and scalability. - The Security team (Donjon) for vulnerability analysis and remediation. - The Product team for roadmap prioritization and customer-driven requirements.   What we’re looking for - 5+ years of backend engineering, with real production ownership of distributed systems. - Strong production experience - Interest for Scala and functional programming practice - Hands-on blockchain integration experience: transaction lifecycle, fees, finality, reorgs, on at least two models among account-based, UTXO and privacy-preserving chains. - Experience with event-driven systems and data infrastructure (PostgreSQL, RabbitMQ, NATS or equivalent) and with observability tooling (Datadog or equivalent). - Able to diagnose an incident across several services and own the outcome, from root cause to fix in production. - Comfortable reading and contributing to TypeScript code, as the team works on a polyglot stack. - Daily use of AI coding tools, with a critical eye on their output. - Clear written communication in English, especially for design documents and incident reports. At Ledger, we are dedicated to continually investing in our employees which is why we offer more than just salaries; we provide comprehensive compensation packages that include a wide range of benefits. Here are some of the benefits you can look forward to: - Flexible work options - Our hybrid policy allows employees to work from home up to 3 times per week - Health & Wellness support - Health and Life Insurance. - Financial growth opportunities - Employees can become shareholders in Ledger as well as other financial benefits depending on your country of work. - Commuter allowance - Ledger offers a commuter allowance to contribute to your preferred means of transportation. - Learning & Development - A comprehensive suite of training solutions providing a personalised learning experience for every employee. For regionally specific benefits, your Talent Acquisition contact will be able to provide you with more information. We’re committed to building an inclusive hiring process. If you need any adjustments or accommodations, just let us know, we’ll do our best to support you.

Location: Paris, Remote Workplace: remote Our Security and IT team keeps the 360Learning platform secure, compliant and auditable for the 1,500 organisations that learn on it every day. As a Senior DevSecOps Engineer, your mission is to make our infrastructure secure by design, detectable by default, and provable at audit time. 360Learning runs its learning platform on Azure and Kubernetes, certified ISO 27001:2022 and SOC 2 Type II. Over the past two years the technical security workload has grown on every front: a larger and more regulated customer base sending their own scans and security assessments, a wider detection and response scope, more infrastructure to keep hardened and auditable, and a growing backlog of security engineering projects that never reach the top of the queue. We are creating this position to add real technical capacity on the infrastructure side of security, and to move part of our security posture from manual effort to automated guardrails. You will be the bridge between security and platform engineering: deep enough in infrastructure to fix things yourself, and close enough to security operations to know what to look for. “Ours is a small, senior team with a broad scope: information security, compliance, infrastructure governance and internal tooling, with dual audit accountability on ISO 27001:2022 and SOC 2 Type II. That means direct impact and no layers between you and the decision. Roughly half of this role is greenfield build work you will own end to end.” Guillaume Seigneuret, CISO and Hiring Coach. Within 1 month, you will: Complete our onboarding and learn how we work through our own platform and our Convexity culture Map our Azure and AKS environment, our detection and logging coverage, and our ISO 27001 and SOC 2 control scope with the CISO and the Security Engineer Meet the DevOps, platform engineering and IT teams you will work with daily Shadow alert triage and one customer security assessment end to end Within 3 months, you will: Be autonomous on our AKS and Azure environment and handle infrastructure related alerts end to end Have shipped at least one concrete hardening or automation improvement in production Own the infrastructure scope of vulnerability management, from triage to remediation follow up Within 6 months, you will: Have the honeypot live and producing high fidelity alerts Have measurably widened SIEM connector coverage, with documented log sources and retention Run infrastructure vulnerability remediation on a predictable cycle with SLA reporting Within 12 months, you will: Manage detection content as code, with reviewed and tested rules and documented runbooks Have largely automated audit evidence on the infrastructure scope Have eliminated long lived credentials on the critical paths, so engineering teams ship on secure defaults they did not have to think about The Skill Set: 5+ years in infrastructure, cloud or platform engineering with a strong security focus, or in security engineering with hands on infrastructure practice Production experience with Kubernetes: RBAC, network policies, admission controllers, secrets handling, workload identity, runtime security Solid cloud experience, ideally Azure. Strong AWS or Google Cloud experience with a genuine interest in converting works too Infrastructure as code: Terraform, GitOps workflows, CI/CD pipelines Scripting and automation: Python or Go, plus shell. Comfortable reading and writing code, and opening pull requests on repositories owned by other teams Log analysis and investigation: cloud audit logs, query languages, correlation across identity, network and application sources Fluent English (US/UK) / B2 level or equivalent (FR). Enthusiasm for our working environment explained here: https://bit.ly/Convexity360L What we offer: Compensation: Package includes base salary, a variable component and equity 📈 Benefits/Perks : Work From Home stipend, RTT, lunch vouchers, medical insurance, gym subscription, 1 month parental leave for the second parent. Balance: Flexible hours, full remote work possible anywhere in France 🏠 Diversity, Equity, and Inclusion : We have 6 active ERGs including Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity. Each group has at least one executive team member serving as a member of the group, bringing greater awareness to each group’s activities and providing a quick path to impact 🤝 Corporate Social Responsibility : Review our CSR Charter: 360learning.com/blog/corporate-social-responsibility-charter 🌎🌏🌍 Culture: A framework that will help you make an impact - envision our way of working and our Convexity Culture: https://bit.ly/Convexity360L & find out more about the teams, product and processes https://bit.ly/42H1ggC 🚀👩🏻‍💻🏆 Interview Process: Phone Screen with our Talent Acquisition Manager Discovery Meeting with our Head of Security Live exercise with our Head of Security and our Head of Devops: investigation of an incident scenario, or review of an insecure infrastructure configuration Clarification Meeting with the Security Engineer and a DevOps engineer Culture Fit Meeting with our VP of Engineering Offer! Who We Are 360Learning enables companies to upskill from within by turning their experts into champions for employee, customer, and partner growth. With our LMS for collaborative learning, Learning & Development teams can accelerate upskilling with the help of internal experts instead of slow top-down training. 360Learning is the easiest way to onboard and upskill employees, train customer-facing teams, and enable customers and partners–all from one place. 360Learning powers the future of work at 1,700 organizations. Founded in 2013, 360Learning has raised $240 million with 400+ team members across North America and EMEA. Learning Includes Everyone. In concert with our culture, 360Learning believes learning includes everyone and that means embracing the strengths of diversity, connectedness, and inclusion. Through conscientious efforts, our global footprint celebrates cultures, perspectives, and experiences from all over the world to support our platform that is built for all regardless of race, ethnicity, gender identity or expression, sexual orientation, religion, age, neurodiversity, disability status, citizenship, veteran status or any other aspect which makes an individual unique or protected by laws and regulations in the locations where we operate. Thus, 360Learning is proud to be an equal opportunity workplace, and we commit to continue this throughout our processes for recruitment, compensation, benefits, performance, promotion, and all other conditions and terms of employment. We want to learn from and with you!

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Frontier AI is on track to be among the most consequential and most adversarially-targeted technology in the world. The capability curve is steep, the adversaries who want these systems are extremely well-resourced, and the security bar this will eventually require is well beyond where the industry operates today. Incremental hardening alone is not going to close that gap, so we need breakthroughs and a group of people to go find them. Security Labs is that team. We run a portfolio of high-risk, high-expected-value security projects: the work that seems impractical until someone optimistic and stubborn enough actually tries it. Projects run on the order of weeks rather than quarters, and each one is either handed off to the Anthropic team that will own it in production or wound down with a writeup of what we learned. We expect a meaningful fraction of our bets not to land. This team is intentionally scrappy and ambitious. We're intentionally iterating fast on high-risk research bets and we expect a meaningful fraction not to land. If a 30% project success rate sounds uncomfortable, or uncharted and chaotic territory isn’t both frightening and exciting, this probably isn't the right fit. There are other places in Anthropic Security doing important work with more structure, less risk, and more certain paths to positive outcomes. The questions we're trying to answer include: Can our core research workflows survive extreme isolation? Can we replace trust with cryptographic guarantees? Can the models themselves become our most effective security control? What would it actually take to defend against a tier-1 state adversary, and how much of that can we build now? Who we're looking for. We're hiring generalists with rare depth. You're a strong software engineer as a baseline, and on top of that you've gone deep in at least one area most engineers don't get near: firmware or hardware security, applied cryptography, OS / kernel / hypervisor internals, formal methods, reverse engineering, or high-assurance and cross-domain systems. You've built things under your own direction, you're comfortable jumping layers when the problem demands it, and you'd rather take a swing at something that might not work than ship the safe incremental thing. You think the trajectory of AI matters a great deal, you're not comfortable with how the security side of it is going by default, and you'd rather be on the inside building the answer than watching from outside. Current Project Areas The portfolio changes as we learn. The kinds of bets currently in flight or queued: Standing up a prototype high-assurance research cluster: running real Anthropic training and research workloads under extreme isolation and physical security controls, and finding out exactly where productivity breaks and what we'd need to invent to get it back Provable inference: cryptographic verification (zero-knowledge proofs, attestation chains) that a given output came from a specific model running specific code, replacing "trust us" with math Build hypervisor-isolated microVM workload isolation across the fleet Compiling an ML kernel through a formally verified pipeline where every lowering step carries a machine-checked proof of equivalence, making compilation-layer sabotage mathematically detectable Regenerating clusters: automation that spins up a purpose-built cell, runs a workload, and tears the whole thing down on a TTL measured in hours, so attacker persistence has an expiry date Using Claude itself to drive security work end to end: threat modeling new compute platforms, rewriting critical services to zero external dependencies, running the test equipment that validates what hardware datasheets claim Part of your job is deciding what comes next. We hire people we trust to pick good bets, and project selection is owned by the engineers doing the work. Key responsibilities Own Security Labs projects end to end. You'll scope the bet, build the prototype, run it against real workloads, and bring it to either a hand-off or a documented exit Stand up novel security infrastructure fast (isolated clusters, attestation chains, hypervisor and runtime work, verification tooling) optimizing for what we learn rather than for permanence Find the receiving team early, bring them along while you build, and hand them something they actually want to own Work embedded with research and infrastructure teams (Pretraining, RL, Inference, Compute) to test whether their workflows survive what you're proposing, and document precisely where they don't Turn experimental results into short writeups that shape Anthropic's long-term security architecture, and into costed contingency plans we could execute on short notice Help pick the next round of bets and influence the industry to get better along the way Minimum qualifications Genuinely care about where AI is heading and want to work on the security problems that determine whether it goes well. This is the most important thing on this list Have real depth in at least one area most software engineers don't touch (e.g. firmware or hardware security, applied cryptography, OS / kernel / hypervisor internals, formal methods and verification, reverse engineering and exploit development, or high-assurance / cross-domain systems) Have built and shipped things under your own direction. Maybe you founded a company or research group, maintained an open-source project other people depend on, or shipped research that changed how people in your field work. We weight this far more than where you've worked or for how long Have a track record of choosing the problem yourself and seeing it through, rather than only executing a plan someone else handed you Are comfortable jumping between domains and layers of the stack when the problem calls for it, and have actually done so Have run prototypes or experiments where the goal was answering a hard question rather than shipping a permanent system, including ones that didn't pan out Write clearly enough to turn weeks of work into a couple of pages someone can act on Change your mind when the evidence says to, and are fine being the least-expert person in a room full of specialists Care about defense. Plenty of folks here come from offense and that background is valuable, but what you actually want to spend your time on now is making systems hold up Are a strong programmer (Python plus at least one of Rust, Go, or C/C++) and can stand up real infrastructure without that being the interesting part of your week Preferred qualifications Experience inside airgapped or high-side environments (classified networks, cross-domain solutions, ICS/SCADA, financial trading infrastructure) and the operational realities of working in them A background in offensive security, red teaming, or vulnerability research, with calibrated intuitions for which threats actually matter Familiarity with ML infrastructure (training pipelines, distributed schedulers, inference serving, accelerator hardware) sufficient for grounded conversations with researchers about what their workloads actually need A history of working in environments built around rapid iteration rather than rigid change control: startups, applied research groups, independent consulting, small security shops The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the team Secure Frameworks is the team in Anthropic's Security Engineering org that builds shared security libraries and frameworks the rest of the company builds on. We collaborate closely with teams and leaders across Anthropic to own critical security foundations, including workload identity and authorization, cryptographic frameworks, and the centralized access proxy that  secures traffic to internal applications. Our mission is to make the secure thing easy and the easy thing secure by helping Anthropic engineers get secure behaviour by default and preventing entire classes of vulnerabilities through careful design. We own what we ship, help customers adopt better security practices and at times we work embedded directly in research, infrastructure or product teams. About the role You will design, build and run security foundations used across Anthropic's fleet, from threat model through production, on-call and adoption. Much of the work is greenfield: our infrastructure is growing quickly and the timelines are compressed, so you will help define the architecture rather than inherit it. Depending on your strengths you will focus on one or two of the areas below and contribute across the rest. Build critical security foundations including cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems, designed to prevent entire classes of vulnerabilities Partner with product, research, infrastructure, and other security teams to ensure frameworks integrate smoothly with lower-layer security controls Scope, design and build security services and libraries end-to-end, maintain them in production, and drive through ambiguous technical problems with minimal oversight Build and operate the zero-trust access gateway that fronts Anthropic's internal services Design and roll out authorization frameworks so services enforce least privilege consistently instead of each inventing its own access controls Own cryptographic frameworks and libraries Mentor engineers, contribute to hiring, and grow security engineering culture across Anthropic Minimum qualifications 8+ years of software engineering experience building security-relevant systems in production, including leading complex initiatives independently Strong programming skills in Go, Rust or Python Deep understanding of authentication and authorization systems: OAuth 2.0 / OIDC, JWTs, service-to-service auth, policy-based access control Hands-on experience with PKI, X.509, mTLS and workload identity Working knowledge of applied cryptography: choosing and composing primitives correctly, key management, and the ways libraries fail in practice Experience shipping and operating high-reliability services on Kubernetes across cloud and on-prem environments, including being on call for them A track record of bringing clarity and ownership to ambiguous technical problems and driving them to resolution across teams A strong sense of developer experience Clear communication across all levels of the organization Passion for AI safety and the role security engineering plays in building trustworthy AI systems Preferred qualifications Built security frameworks or libraries adopted across an engineering organization, and done the work to drive that adoption Built or operated a zero-trust / BeyondCorp-style access gateway or identity-aware proxy Migrated a fleet to mTLS at scale, including certificate issuance and staged enforcement Maintained or contributed to open-source cryptographic libraries Designed authorization systems using policy languages or relationship-based models Familiarity with ML infrastructure (training, inference serving) The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $32,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the team Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward a fundamentally different kind of GRC: one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits. Within Security GRC, Compliance and Audit Programs (CAP) runs the integrated audit across our frameworks and maintains the Common Control Framework the program hangs off. This role sits in Compliance & Audit Programs and works one regime family, US public sector, from requirements through authorization and ongoing compliance, working alongside the public sector engineering pods rather than downstream of them. About the role You'll help drive the compliance programs that keep Anthropic's US government authorizations current: federal civilian (FedRAMP, including FedRAMP 20x for Claude Enterprise), Department of War (DoD impact levels, CMMC, NIST SP 800-171), and state and local (StateRAMP, TX-RAMP and agency requirements). You'll own the recurring cycles those authorizations run on (continuous monitoring, POA&M, annual assessments, significant changes), help build new authorizations as we add them, and keep every frontier model's authorizations current. You'll turn government requirements into specific, testable requirements that engineering teams build against, review the evidence that comes back, and say so when a launch is not ready for a government boundary. You'll map US government requirements onto our Common Control Framework so the public sector view and the integrated audit view of the same control stay one framework. Building with Claude is a normal part of the job: mapping, evidence collection and reporting, with you deciding where human judgment stays in the loop. This is an individual contributor role, working closely with a peer on US public sector compliance, for someone who works well independently, writes clearly, and gets satisfaction from a government authorization that holds up as the product changes underneath it. Key responsibilities Run the recurring compliance cycles for our US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes and incident notifications), starting with C4G on Palantir FedStart and the NIST SP 800-171 assessment with Schellman Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations (first-party FedRAMP High, DoW impact levels, StateRAMP and TX-RAMP) with requirements and evidence work Support model authorizations in GovCloud and Vertex for every model launch, as the GRC member of the Inference and model delivery pod Translate government obligations into partner team requirements, for example vulnerability SLAs in our internal vulnerability reporting platform, and review the evidence Answer public sector customer and deal questions (what a boundary allows, CUI, IRS Publication 1075, CJIS, ITAR), and handle questionnaires and RFIs until they move to Customer Trust Map US government requirements onto the Common Control Framework with the Controls Assurance Lead and keep one source of truth for status Build with Claude: automate mapping, evidence collection and reporting, and verify machine-drafted language before it becomes the record Minimum qualifications Several years in security compliance or IT audit with hands-on US government compliance for a cloud service (FedRAMP, DoD impact levels, CMMC or NIST SP 800-171, or StateRAMP), including the ongoing compliance cycle after authorization Working command of the NIST SP 800-53 Moderate baseline and the mechanics of authorization: boundary definition, control implementation statements, assessment, continuous monitoring, POA&M and significant change Experience writing requirements for engineering teams from a control baseline and reviewing the evidence that came back Working knowledge of how a GovCloud or Vertex style government region differs from commercial, and what changes when a model, feature or region is added to an authorized boundary Enough technical fluency to read a runbook, configuration or pipeline definition and judge whether it enforces the written control Clear writing, because implementation statements and status reports are what assessors, engineers and leadership work from Ability to get partner teams to prioritize and close compliance work without authority over them Preferred qualifications Have taken a service through FedRAMP High or DoD IL4 or IL5, or supported a service on classified networks Have worked on a FedRAMP 20x pilot or built machine-readable evidence or reporting for an assessor Have applied LLMs to compliance work such as control mapping, evidence testing or continuous evidence collection Hold or are eligible for a US security clearance Experience with state and local requirements such as StateRAMP, TX-RAMP, IRS Publication 1075 or CJIS You don't need to Have done everything on this list or worked every regime. The scarce combination is running a government authorization on its recurring cycle plus the judgment to tell whether a control actually works Write production code. The bar is fluency sufficient to read, query and challenge Hold every certification. CISSP, CISA, CGRC or similar are welcome and not required Have prior AI industry experience Deadline to apply: None. Applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $255,000 — $270,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE We're looking for a Security Engineer with deep incident response experience to help defend Replit, a fast-moving, cloud-native AI vibe-coding platform. You'll be the person who takes charge when something goes wrong. You'll lead investigations from first signal to root cause, coordinate containment across Security, SRE, and Engineering, and keep stakeholders informed while the incident is moving fast. This isn't a pure responder role. We want a well-rounded security engineer who has run real incidents and wants to make the next one faster. You'll write the scripts, automations, and tooling that take manual work out of triage, evidence collection, and containment. You'll also turn lessons from each incident into better detections, playbooks, and platform hardening.   RESPONSIBILITIES Incident Response - Serve as incident commander or technical lead for security incidents, from detection and triage through containment, eradication, recovery, and post-incident review. - Coordinate response across Security, SRE, Engineering, Legal, and leadership. Drive decisions under pressure and keep a clear record of actions taken. - Communicate incident status, impact, and risk clearly to technical and executive audiences. - Participate in and help shape the security on-call rotation. Investigation & Forensics - Investigate suspicious activity across cloud infrastructure, containers, identity systems, and application layers using SIEM, Cloud Logging, telemetry, and host and container artifacts. - Determine scope, root cause, attacker behavior, and blast radius for confirmed incidents. - Quickly assess whether emerging threats (0-days, active exploitation campaigns, bug bounty findings, customer reports) apply to Replit, and whether we're already affected. IR Automation & Tooling - Build scripts, automations, and tools (Python, Go, Bash, or directly on Replit) that speed up response, such as automated enrichment, evidence collection, credential and session revocation, workload isolation, and alert triage. - Develop and maintain response playbooks and runbooks, and automate them where possible. - Integrate response workflows with SIEM, SOAR, ticketing, and chat tooling to cut time-to-contain. Detection & Continuous Improvement - Turn incident findings into new or improved detections, logging coverage, and visibility. - Lead blameless post-incident reviews and drive remediation items to completion. - Run tabletop exercises and simulations to test readiness and find gaps.   REQUIRED SKILLS & EXPERIENCE - Proven experience leading or serving as technical lead on security incidents in a cloud or SaaS environment. - Strong hands-on investigation skills with SIEM, cloud audit logs, and log-based analysis. Comfortable working through large datasets under time pressure. - Proficiency writing production-quality scripts or tools in Python, Go, or Bash for investigation and automation. - Solid knowledge of cloud architecture and security, especially Google Cloud Platform (IAM, audit logging, GKE, networking). - Working knowledge of Kubernetes and containers, including how to investigate and contain compromised workloads. - Understanding of identity systems, SaaS architectures, and common cloud attack paths (credential theft, privilege escalation, supply chain, token abuse). - Familiarity with software engineering fundamentals, CI/CD pipelines, and package ecosystems, so you can work effectively with Engineering on code-level fixes. - Understanding of IR frameworks and lifecycle (for example NIST 800-61), plus the vulnerability lifecycle and exploitability analysis.   PREFERRED QUALIFICATIONS - Experience building or operating SOAR or other response automation platforms. - Digital forensics experience with cloud, Linux hosts, or containers. - Experience with threat intelligence, threat hunting, or security research. - Experience with bug bounty programs or coordinated vulnerability disclosure. - Familiarity with detection-as-code practices and writing detection rules. - Experience in fast-paced, cloud-native, or AI/ML-driven environments. - Relevant certifications (such as GCIH, GCFA, GCFR), or equivalent hands-on experience. WHAT WE VALUE - Curiosity & initiative: Strong desire to understand attacker behaviors, emerging threats, and how they apply to real-world systems. - Speed & analytical rigor: Ability to quickly assess high-risk vulnerabilities with clear, evidence-based reasoning. - Collaboration: Comfort working across cross-functional teams spanning Security, SRE, Engineering, and Infrastructure. - Clear communication: Ability to explain findings, risks, and mitigation strategies to stakeholders at all levels. - Ownership mindset: Takes initiative to drive investigations, improvements, and remediations to completion. - Continuous learning: Passion for staying up to date on new vulnerabilities, exploit trends, and cloud-native security best practices. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.