Вакансии

Location: Bulgaria Company Background Our client is a travel technology company developing cloud-native, AI-powered software for airlines and hospitality brands. Its products help customers improve commercial performance, reduce costs, and evolve their digital commerce capabilities. The company’s technology is designed to work alongside existing airline systems, allowing customers to introduce new capabilities without replacing their current technology landscape. Project Description You will contribute to a large-scale greenfield travel-technology initiative supporting the launch of a new airline operation. The project uses a modern commercial platform to enable flexible retailing, pricing, and digital shopping experiences across travel products and ancillary services. Technologies GCP, AWS Wiz Cloudflare WAF, Bot Management, DNS, TLS, DDoS Protection and Rate Limiting Terraform SonarCloud and Dependabot Jira, PagerDuty and Slack Python and Bash What You'll Do Own and continuously improve cloud security posture across GCP organizations and AWS accounts, including connector coverage, runtime sensor deployment on production clusters, custom policy development, finding-triage baselines, and integrations with Jira, PagerDuty, and Slack; Operate and evolve the edge security layer, centralizing internet-facing protection through Cloudflare WAF, bot management, rate limiting, DNS/TLS, and origin routing for customer-facing production zones; Tune security rules using real production traffic, manage allow-list requests, and enable other teams to use edge-security tooling effectively; Support and automate vulnerability management and secure configuration, maintaining the intake of Wiz, SAST, penetration-test, and customer-reported findings, defining remediation baselines, and driving owners to closure; Participate in security incident response for cloud events, including DDoS and bot attacks, supply-chain alerts, credential exposure, and data-handling incidents, while creating and maintaining detection, triage, and mitigation runbooks; Help secure the software supply chain by owning SAST reporting in SonarCloud, dependency scanning with Dependabot, container base-image hardening, and the selection of SBOM and SCA tooling, and publish release-level security reports for engineering teams; Produce technical evidence for SOC 2, PCI DSS, ISO 27001, and NIS2, including evidence of log-sink configuration and retention, access reviews, authenticated scanning, and IAM remediation, and map Wiz controls to relevant frameworks to make evidence collection repeatable; Enable security self-service by training Platform, CloudOps, and Product Engineering teams on the tools they use, including Wiz and Cloudflare administration, mapping service catalogues to owners, and automating recurring customer-security and issue-triage reporting through scripting and AI-assisted workflows; Advise and partner with engineering teams on the security of new platform integrations and AI/RAG services, contributing to the annual cloud-security roadmap and target-state architecture; Job Requirements 5+ years of experience in cloud security or platform engineering with a security focus, including hands-on experience with GCP or AWS across IAM, audit logging, log routing, network security, and workload protection; Production experience with a CNAPP/CSPM platform, such as Wiz (preferably) / Prisma Cloud / Orca / Google Security Command Center, including policy authoring, integrations, and runtime protection; Hands-on administration of a WAF, CDN, and bot-management stack at scale; Strong Terraform experience, including building modules for security tooling and WAF configuration, reviewing changes, and managing configuration drift and legacy infrastructure; Experience with vulnerability management across cloud infrastructure, containers, and code, including SAST, SCA/dependency scanning, container image hardening, and penetration-test remediation tracking; Experience routing cloud security signals to a SIEM or security-monitoring platform, such as Wazuh, Microsoft Sentinel, Google Security Operations, or Datadog Security Monitoring, and integrating actionable alerts with PagerDuty and Slack; Scripting skills in Python or Bash for automation and security reporting; Security incident-response experience in a production environment, including developing runbooks and managing vendor escalations; Clear written and verbal communication skills, with the ability to train engineering teams and document security decisions; Nice To Have Experience automating security workflows, such as report generation and issue triage, with AI-assisted or LLM-based tooling; Experience working across both GCP and AWS, experience with Azure; Familiarity with Rego, OPA, or other policy-as-code languages; Experience with identity and access-management tooling, including Okta SSO/SCIM, PAM solutions, and least-privilege reviews for cloud IAM; Experience facilitating OWASP SAMM assessments, threat-modelling sessions, or security-champions programs; Airline or travel-industry experience, including PCI-scoped payment flows, partner integrations, and customer-facing security reporting; Experience supporting compliance with PCI DSS, SOC 2, ISO 27001, or NIS2; Certifications such as Google Professional Cloud Security Engineer, CCSP, or AWS Certified Security – Specialty; What Do We Offer The global benefits package includes: Technical and non-technical training for professional and personal growth; Internal conferences and meetups to learn from industry experts; Support and mentorship from an experienced employee to help you professional grow and development; Health insurance; Sports activities to promote a healthy lifestyle; Flexible work options, including remote and hybrid opportunities; Referral program for bringing in new talent; Work anniversary program and additional vacation days.

Dave is looking for a Lead GRC and Security Governance to build and operate technology risk, control, assurance, audit, incident, and business-continuity governance systems.

Тестировать сложные продукты в области информационной безопасности‍. Вы будете тестировать высоконагруженные сервисы безопасности: начинать с ручного тестирования, затем автоматизировать ключевые сценарии.

Самостоятельное выявление угроз, анализ рисков, расследование инцидентов и внедрение технических мер защиты. • Опыт в Cybersecurity / Information Security от 3 лет.

Location: New York, NY (HQ) Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE Ramp is hiring its first dedicated Physical Security Lead to build and run the program that protects our people, our leaders, our events, and our offices. Our footprint now spans a multi-floor New York headquarters, Ramp-managed offices, and a growing set of hubs across North America and Europe. Our leaders are increasingly visible on public stages. You'll own three areas in roughly equal measure: executive protection, event security, and office security (access control, cameras, guards, and building security). Your job is to turn a set of strong vendors and partner teams into one measurable, risk-based program. This is a high-ownership IC role on the Corporate Security team. It reports to the Director of IT & Corporate Security and is based at our NYC HQ. This is a physical security role; cybersecurity and information security are owned by other Ramp security teams. We aren't looking for a guard supervisor or a box-checker. We want someone who makes it safe for Ramp to move fast, host great events, and keep our leaders accessible. WHAT YOU'LL DO - Build and run Ramp's executive protection program: - Protective risk assessments and residential security reviews. - Domestic and international travel security. - Advance work for high-visibility appearances. - Selecting, standing up, and managing our executive protection provider. - Turn threat intelligence into protective action. Partner with Detection & Response to move from online threat and exposure monitoring to threat assessments, personal-information exposure reduction, and clear escalation playbooks. - Own security for internal and external events, from all-hands and offsites to conferences, customer events, and executive dinners: - Risk-tiered intake and written security plans. - Coordination with venues and vendors. - On-site leadership for the highest-risk events. - After-action reviews. - Set Ramp's global physical security standards for access control, video surveillance, intercoms, visitor management, and alarm monitoring. Tier them for headquarters, Ramp-managed offices, and flexible or serviced hub spaces. - Build security into every new office, move, and expansion: - Write the security design requirements and review drawings. - Manage integrators through installation and acceptance testing. - Partner with IT on network and identity integration. - Manage the guard program and security vendors end to end: scope, post orders, SLAs and KPIs, budget, and quarterly business reviews. Own the security relationship with landlords and building management. - Lead emergency preparedness and physical incident response: - Emergency notifications, evacuation and shelter-in-place plans, and drills. - Liaison with local law enforcement. - Workplace-violence prevention, in partnership with People and Legal. - Run physical access governance with IT. Tie access to joiner/mover/leaver events, run regular access reviews, and keep audit-ready evidence for physical security controls. - Measure and report program health to leadership. Use AI and automation to scale the program without scaling headcount. WHAT YOU NEED - 6+ years in corporate or physical security, including 3+ years owning a security program or major workstream at a multi-site company. Executing someone else's program doesn't count toward this. - Hands-on depth in at least two of the three areas (executive protection, event security, physical security systems such as access control and cameras) and solid working knowledge of the third. - Experience administering or deploying enterprise access control and video platforms (e.g., Avigilon Alta/Openpath, Verkada, Genetec, LenelS2), and partnering with IT on networking and SSO. - A track record of managing security vendors (guard, protection, integrator, event staffing) through contracts, SLAs, budgets, and performance reviews. - Strong risk judgment. You size controls to the actual threat, explain the tradeoffs, and lead with "here's how we do this safely" rather than "no." - Excellent writing. You can produce a crisp SOP, an event security plan, and a one-page executive brief. - Willingness to work from our NYC office 4 days a week, travel 10–15%, support occasional evening and weekend events, and serve as primary on-call for physical security incidents (with the Director as backup and guard and vendor partners as on-site first response). - Real, day-to-day use of AI tools in your work. NICE-TO-HAVES - ASIS CPP or PSP; formal executive protection training; first aid or Stop the Bleed certification. - Experience at a high-growth tech, fintech, or financial services company with a high-profile founder or CEO. - Experience writing security design standards for office buildouts and reading architectural or low-voltage drawings. - Familiarity with physical and environmental control requirements in SOC 2, PCI DSS, or FedRAMP. - A government protective, law enforcement, or military background, combined with corporate program ownership. - An established network of protection, event security, and integrator vendors in NYC, SF, and internationally. FAIR WARNING - This is a builder role. Parts of the program exist today (vendors, a responsibility matrix, some SOPs). You'll turn them into a system. - You're an IC who directs vendors and partner teams, not a manager of a security staff. You'll need to influence Workplace, Events, IT, Executive Assistants, People, and Legal without formal authority. - Security at Ramp enables the business. Events still happen, offices stay welcoming, and executives stay accessible. Your job is to make that safe. - Evenings, weekends, and travel come with the territory, especially around major events. BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: United States; United Kingdom; Spain; Germany; The Netherlands Workplace: Remote ClickHouse is focused on growing a vibrant user community and becoming a Cloud-first company. We are looking for a Product Manager experienced in developing security features for ClickHouse. This is an exciting opportunity to work with a popular open-source project to extend and deepen its core capabilities and to develop cloud-native extensions that delight developers and data analysts across many use cases and market segments. If you are a doer with a “can do” mentality and a bias for action, we would love to hear from you. WHAT YOU WILL BE DOING: - Understand the real-time analytics and cloud database markets, competition, and technology trends in depth - Engage with the ClickHouse open-source user community and ClickHouse Cloud customers to understand current and aspirational use cases for ClickHouse core database - Distill and prioritize feature requests and issues into clear priorities for net-new capabilities and improvements - Work with engineering teams to scope and refine approaches to solving customer problems, both in the core database and in ClickHouse Cloud offerings - Set clear measurable goals around customer success, and use data-driven approaches to ensure new capabilities meet customer needs - Stay up-to-date on the state of the market and competitive landscape to identify needed features and areas of improvement for ClickHouse that align with the roadmap and general requests received by our community and customers - Work with partners to grow ClickHouse awareness and visibility WHAT YOU BRING ALONG: - Proven experience with database security principles and best practices - Knowledgeable and passionate about data engineering markets - data warehousing, data analytics, security, and observability - Strong vision around where these markets are headed, and what it takes to become a leader in this space - Previous experience with ClickHouse or a highly related OLAP technology at a deeply technical level - Previous experience with open-source projects, ideally as a product manager - Passionate about building enterprise capabilities that are powerful yet easy to use - Excellent written and verbal communication skills - Ability to influence multiple stakeholders without direct authority - Comfortable working with ambiguity and evolving based on business needs - Ability and desire to work with customers or community members, providing technical guidance and support during their POC. BONUS POINTS FOR: - Previous contributions to open-source projects - Engineering experience, ideally around distributed/cloud systems in C++ - Experience effectively working remotely in a global, distributed organization PERKS - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new team member who joins our company receives stock options. - Time off - Flexible time off in the US, generous entitlement in other countries. - A USD$500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. CULTURE - WE ALL SHAPE IT As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse. EQUAL OPPORTUNITY & PRIVACY ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.

Задачи: — Управление операциями офиса в Оттаве — Работа с поставщиками — Организация мероприятий — Обеспечение соответствия требованиям безопасности — Контроль доступа — Ведение записей по безопасности Требования и условия в тексте не указаны.

Location: Global Remote Workplace: remote Metabase is the easiest way for people to get insights from their data, from tiny startups who get up and running quickly to major corporations with tens of thousands of users. That's why people love us.   We bring data tools with the elegance and simplicity of consumer products to the crufty world of enterprise business intelligence. We provide an opinionated open source starting point for how companies should measure, analyze and share their data, which is used by tens of thousands of companies. About the Role We’re looking for a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them. Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise with frontier AI tools to find vulnerabilities, develop fixes, and make Metabase secure by default across its product, dependencies, and runtime. Things you’ll do Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption. Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes. Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices. Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities. Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective. Turn individual findings into broader improvements that prevent entire classes of vulnerabilities. What you bring A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research. The ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries. Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data. Sound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly. Strong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn. A thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output. Ownership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution. Compensation The US base salary range for this role is $160K–$225K annually, plus equity and benefits. Compensation is determined by role, level, location, and individual qualifications, including skills, experience, and scope of responsibility. Pay may vary by geographic location and other job-related factors. Benefits We offer meaningful equity and a comprehensive US benefits package, including fully employer-covered medical, dental, and vision insurance (with 75% coverage for dependents), a 401(k) with employer match available to enroll after the first 30 days, flexible and unlimited paid time off including sick time, and an asynchronous, remote-first environment. We're a global team (50% outside the US), fully distributed (from Thailand to California), who get things done asynchronously, with plenty of uninterrupted time, supporting each other to do the best work of our careers. We offer flexibility (define your own schedule and work from wherever you want), autonomy, and an environment that fosters growth, learning, and development. We're relentlessly user-focused and believe in building long-term value, not short-term hacks. And we raised a $30M Series B to take our approach to the next level for years to come.   For U.S. applicants: Metabase participates in the federal E-Verify program, which confirms employment authorization of newly hired U.S. based employees. E-Verify is not used as a tool to pre-screen candidates and is only initiated upon hire.   E-Verify Participation Notice (English/Spanish) Right to Work Notice (English/Spanish)

Location: Colombia; Brazil; Argentina Solvd Inc. is a rapidly growing AI-native consulting and technology services firm delivering enterprise transformation across cloud, data, software engineering, and artificial intelligence. We work with industry-leading organizations to design, build, and operationalize technology solutions that drive measurable business outcomes. Following the acquisition of Tooploox, a premier AI and product development company, Solvd now offers true end-to-end delivery—from strategic advisory and solution design to custom AI development and enterprise-scale implementation. Our capability centers combine deep technical expertise, proven delivery methodologies, and sector-specific knowledge to address complex business challenges quickly and effectively. Solvd is hiring a Security Engineer to help design and secure a modern, cloud-first environment built around identity, automation, and Zero Trust. In this role, you will own security across endpoints, SaaS platforms, and access controls, using scripting and AI to build scalable, efficient security operations for a distributed workforce. What You’ll Do - Architect the Modern Perimeter: Lead security strategy for a 100% remote/hybrid workforce where Identity is the new perimeter. - Automation & Scripting: Take full ownership of our Conditional Access policies and security workflows. You will be expected to write and maintain scripts to automate onboarding, offboarding, and real-time posture enforcement. - AI as a Force Multiplier: Proactively use AI and LLMs to enhance your technical output, automate repetitive tasks, and solve complex security puzzles faster than traditional methods. - Logical Problem Solving: Approach security from a first-principles perspective. Since we don't have a traditional stack, you must be able to think logically to build guardrails that don't exist yet. - Endpoint & SaaS Security: Oversee device management (macOS/Windows) and the security configuration of our SaaS ecosystem (Rippling, Office 365, Salesforce). - Zero Trust & Identity: Implement and refine Zero Trust access, DLP policies, and SSO enforcement across all vendor platforms. - Compliance & Governance: Ensure our cloud-native operations remain aligned with SOC2, HIPAA, and GDPR requirements. Who You Are - A Modern Security Engineer: You understand that security today is about protecting data and identity, not firewalls and servers. - Logic-Driven: You enjoy breaking down complex problems and building elegant, logical solutions. - Scripting Savvy: You are highly proficient in scripting (Python, PowerShell, or Bash) and see manual tasks as a failure of automation. - AI-Forward: You are already using AI tools to help you code, document, and troubleshoot. You know how to use these tools to do the work of a much larger team. - Independent: With no internal apps or physical infra to manage, you are comfortable owning the entire IT security lifecycle end-to-end. Key Technologies You’ll Work With - Zero Trust Architecture - Conditional Access Policies - Modern Identity - SaaS Operations - AI Tools - MDM When you join Solvd, you'll… - Shape real-world AI-driven projects across key industries, working with clients from startup innovation to enterprise transformation. - Be part of a global team with equal opportunities for collaboration across continents and cultures. - Thrive in an inclusive environment that prioritizes continuous learning, innovation, and ethical AI standards. Ready to make an impact? If you're excited to build things that matter, champion responsible AI, and grow with some of the industry’s sharpest minds. Apply today and let’s innovate together. Solvd is an equal opportunity employer.

Ищем сильного Security Engineer с практическим опытом защиты инфраструктуры, расследования инцидентов и проектирования архитектуры безопасности. • Опыт в Cybersecurity / Information Security от 3 лет.

We’re looking for an experienced Cybersecurity Specialist to protect and strengthen the company’s infrastructure, networks, cloud services, and web applications. We’re looking for a hands-on professional who can independently assess risks, investigate security incidents, implement Zero Trust solutions, and ensure the security of critical infrastructure.

-Выстроить централизованную систему IT-безопасности и управления инфраструктурой для всех юридических лиц группы компаний. -Управление доступами — разделение данных, дисков и папок по юридическим лицам, централизованная выдача и отключение доступов, контроль onboarding/offboarding.

Location: United States, San Diego, CA Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Senior Director, Corporate Security & Crisis Management San Diego, CA (preferred); Los Angeles or San Mateo, CA (also considered) Hybrid | minimum two days onsite per week Role Summary: Sony Interactive Entertainment (SIE), the company behind PlayStation, is seeking an accomplished and forward-thinking Senior Director, Corporate Security & Crisis Management to lead and continue evolving our global corporate security function. Reporting to the SVP, People & Places Operations and Strategy, this leader will be responsible for safeguarding our people, assets, and business operations through proactive security strategies, comprehensive crisis preparedness, and effective risk management. This is an opportunity for a strategic, hands-on leader who thrives in complexity, exercises sound judgment, and brings the confidence to make difficult decisions. We're looking for someone who can build on an established foundation while continuing to elevate our security capabilities, develop our people, and strengthen partnerships across the business. This leader will bring a pragmatic, solutions-oriented approach to security - one that prioritizes employee safety while enabling the organization to operate confidently, efficiently, and without unnecessary restrictions. The ideal candidate combines deep security expertise with strong business acumen, executive presence, and a personable, collaborative leadership style. They understand that effective security leadership requires balancing risk with business objectives, knowing when to adapt and when to hold firm. What You'll Be Doing: Global Security Strategy & Operations Lead and evolve SIE's global corporate security strategy, aligning security priorities with organizational objectives and emerging business risks. Oversee global physical security, travel security, event security, and Global Security Operations Center (GSOC) operations. Establish scalable security standards, policies, and processes across a complex, multinational organization. Assess existing programs and identify opportunities to strengthen operational effectiveness, consistency, and organizational resilience. Crisis Management & Business Continuity Lead the development and execution of global crisis management, emergency response, and business continuity programs. Provide calm, decisive leadership during critical incidents, including natural disasters, workplace violence, cyber-related incidents, and other business disruptions. Partner with executive leadership and cross-functional teams to coordinate effective responses, communicate risks, and support business recovery. Drive organizational readiness through crisis simulations, training, and continuous improvement. Enterprise Risk Management & Governance Apply a risk-based, proportionate approach to security decision-making, balancing employee safety, business continuity, and operational needs. Provide practical, evidence-based recommendations to executive leadership, distinguishing between material threats and risks that can be appropriately managed through existing or enhanced safeguards. Establish clear risk thresholds, escalation protocols, and governance practices that enable informed, timely business decisions. Partner with business leaders to develop security solutions that support workplace accessibility, operational effectiveness, and organizational objectives. Leadership & Organizational Development Lead, coach, and develop a high-performing global corporate security team. Continue building organizational capabilities, strengthening accountability, and raising standards across the function. Foster a culture of collaboration, sound judgment, operational excellence, and continuous improvement. Build trusted relationships across Legal, IT, Facilities, HR, and other business functions, serving as an approachable and credible security advisor. Operational Excellence & Executive Partnership Oversee security service providers, external partners, budgets, and resource allocation. Establish meaningful performance measures and provide executive leadership with clear reporting on security trends, risks, incidents, and strategic initiatives. Develop security awareness and preparedness programs that promote a culture of safety throughout the organization. Influence and challenge constructively when necessary, ensuring critical security considerations are understood and appropriately addressed. What We're Looking For: Bachelor’s degree in Security Management, Criminal Justice, Business Administration, or a related field (Master’s preferred) or equivalent experience. Progressive experience in corporate security, crisis management, or business continuity, including at least five years in a senior leadership capacity. Demonstrated experience leading global corporate security operations within a large, complex, multinational organization. Deep knowledge of physical security, risk assessment, incident response, crisis management, and business continuity. Experience overseeing security technologies, systems, and operational programs. Proven success building, transforming, or meaningfully elevating security programs, teams, or organizational capabilities. Strong executive communication and stakeholder management skills, with the ability to influence across functions and organizational levels. Demonstrated sound judgment in ambiguous, high-pressure situations and the confidence to make and defend difficult decisions. An approachable, collaborative leadership style combined with a strong sense of accountability and conviction. Experience managing budgets, external vendors, and cross-functional security initiatives. Additional Experience That Would Be Valuable Professional certifications such as Certified Protection Professional (CPP), Certified Business Continuity Professional (CBCP), or equivalent. Experience within technology, gaming, entertainment, or other fast-paced, evolving industries. Broad international experience, including an understanding of regional security risks, regulatory considerations, and cultural nuances. Experience modernizing or scaling security operations in an evolving global business environment. Leadership Qualities That Will Set You Apart You're a leader who can see both the big picture and the operational details. You recognize that security isn't simply about preventing risk - it's about enabling the business to operate confidently and responsibly. You bring conviction without rigidity, confidence without ego, and the ability to build meaningful relationships while holding a high bar for performance. Above all, you're energized by the opportunity to build, improve, and lead a function that continues to evolve alongside the business. #LI-SF1 At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. The estimated base pay range for this role is listed below. $228,600 — $343,000 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Squads is looking for a Senior Security Engineer Product and Infrastructure to lead product and infrastructure security, conduct reviews, manage vulnerabilities, and strengthen secure development practices.

Location: Paris; New York; US (EST); US Workplace: Remote ABOUT MORPHO Morpho is a leading Decentralized Finance (DeFi) lending protocol backed by a16z crypto, Paradigm, Ribbit Capital, Apollo, Vaneck, Coinbase Ventures, Variant and 50 others to build an open credit network giving anyone, anywhere, access to the best possible terms. Morpho is experiencing exponential adoption, with over billion in deposits on the network and used by institutional clients including Bitwise, Galaxy, and Anchorage Digital and the largest crypto exchanges, such as Coinbase, Binance, and Kraken. Now, Morpho is scaling its team of contributors to establish itself as the open credit network, not just of DeFi, but of the world.   WHY MORPHO EXISTS Everyone has the potential to build something great for the world. But fulfilling that ambition almost always requires more: people willing to trust you with their capital. Yet access to capital still depends on where you live, who you know, and which institutions are willing to trust you. Even when capital is available, it sits fragmented across disconnected networks and hidden behind intermediaries. The result is a system that fails most of the people it should serve. Borrowers overpay. Lenders earn less than they should. Many are shut out entirely, not because they are unworthy of credit, but because today's infrastructure was never built to connect them. Morpho exists to solve this. Full article here https://morpho.org/blog/why-morpho-exists/. LOCATION: Paris or remote (from -5h GMT up to +2h GMT to ensure sufficient overlap with the rest of the team). ABOUT THE ROLE: As Head of Security, you'll define and drive Morpho's security strategy across the entire organization - corporate IT, cloud and infrastructure, application, supply chain, identity, incident response, threat intelligence, and counterparty security - and you'll build the team and function to deliver it. This is a hands-on leadership role: in the early days you'll personally do the work while you hire, and you'll stay close enough to the technical detail to earn the trust of a deeply technical organization. You'll also be Morpho's credible security voice, internally to leadership, and externally to the integrators, institutions, and ecosystem partners who depend on us. You'll partner closely with Engineering on infrastructure and deployment integrity, and with our Integration team, which works with various partners across the Morpho ecosystem. RESPONSIBILITIES: - Own and continuously evolve Morpho's security strategy and roadmap across, cloud/infrastructure, application, supply-chain, identity, and operational security. - Build and lead the security function - hire, grow, and develop the team, recruiting skillsets across security operations and application security. - Oversight of the IT function - Stay hands-on. Personally execute critical security work - threat modeling, architecture review, control implementation, and incident command - while the team scales. - Set the governance architecture: a coherent security framework that ties tooling and controls together, rather than accumulating tools in isolation. - Own incident response end to end - runbooks, incident command, severity and escalation structure, and market communication during an event. - Build and run a counterparty security program for curators and partners - identity verification, screening, operational diligence, and bidirectional incident-coordination channels. - Lead Morpho's certification strategy (e.g. SOC 2, ISO 27001), meeting both the spirit and the letter sustainably. - Represent Morpho's security posture externally - to fintechs, financial institutions, and the broader ecosystem - and internally to executives. - Partner cross-functionally with Engineering, Protocol, and Integrations, driving security outcomes through both direct ownership and influence. WHAT SUCCESS LOOKS LIKE: FIRST 30 DAYS - You've built a clear, independent picture of Morpho's posture, architecture, threat model, and in-flight work - and pressure-tested the existing strategy against it. - You've met the team and established working relationships with the people who own the surfaces you'll most depend on. - You understand the path-to-funds attack surface in depth and have an early, evidence-based view of the highest-severity risks and quick wins. - You know exactly where incident-response readiness stands today. FIRST 60 DAYS - You've published a clearly prioritized security roadmap with clear sequencing, owners, and the rationale for what's deferred and aligned leadership behind it. - You've defined the team build-out plan and opened the first hire. - You're personally driving the top-severity gaps - identity and authentication enforcement, deployment guardrails, and a documented incident-response runbook among them. - You've set the governance framework and the certification path in motion. FIRST 90 DAYS - Demonstrable progress closing the highest-priority gaps, with key controls enforced rather than optional. - A documented incident-response capability that's been validated by at least one tabletop exercise. - Hiring underway, and a clear operating rhythm established with Engineering, Protocol, and Integrations. - Morpho's external security posture is taking shape - trust surface, counterparty security program, and ecosystem engagement - and you're recognized internally and externally as Morpho's credible security voice. MUST-HAVE EXPERIENCE & SKILLS: - 10+ years in security, several of them building or leading a security function, ideally at a crypto/web3, fintech, or financial-services company where security is core to the business. - Strong grasp of the crypto/web3 threat model - Proven experience building and growing a security team from a small base, recruiting across security operations and application/infrastructure security. - Deep, hands-on technical expertise across cloud, infrastructure, CI/CD, supply-chain, identity, and application security - you do the work, not just direct it. - Owned incident response end to end, including incident command and external communication. - Sharp prioritization and the ability to galvanize action through hard and soft influence, including driving outcomes through teams you don't own. - Exceptional, organized, responsive communication - credible to executives and to external audiences from fintechs to Fortune 500 institutions. - Humble. NICE TO HAVE: - An established network and public profile in the security or crypto-security community, and comfort representing security work publicly (talks, writing, framework contribution). - Offensive security depth, or experience standing up red/blue capabilities. - Familiarity with institutional and regulatory expectations and threat-sharing networks (e.g. Crypto ISAC, TIBER-style frameworks). - Taken an organization through certifications (SOC 2, ISO 27001, or equivalent) PERKS & BENEFITS We design benefits around deep work and growth, so you can do the best work of your career. Expect fair, top-tier compensation, real flexibility, time together in Paris, great health coverage, and support to keep learning.   EQUAL OPPORTUNITY We welcome applicants from all backgrounds and hire based on talent, potential, and values alignment.

• Ensure the security of the company’s server, network, and cloud infrastructure. • Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts.

🕹 Список обязанностей: Выстроить централизованную систему IT-безопасности и управления инфраструктурой для всех юридических лиц группы компаний. Управление доступами — разделение данных, дисков и папок по юридическим лицам, централизованная выдача и отключение доступов, контроль onboarding/offboarding.

Location: Berlin Office; Bosnia; Norway; Estonia; Latvia; Slovenia; Netherlands; Hungary; Kosovo; Portugal; Poland; Serbia; Germany; Austria; Finland; Montenegro; Albania; Lithuania; Slovakia; Ireland; Bulgaria; Denmark; Belgium; Czech Republic; United Kingdom; Croatia; Spain; Greece Workplace: Remote The AI orchestration of your wildest imagination. n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact. Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve: - Cultivated a community of more than 650,000 active developers and builders - Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects - Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation That’s the company we’ve built. Now we’d love to see what you can build. If you’re applying, try n8n out - whether you’re technical or not - and share a screenshot of your first workflow with us. The easiest place to start is here: app.n8n.cloud/register http://app.n8n.cloud/register. We’re in a defining moment of an incredible journey. Come and build with us. 🎯 Your main goal will be to identify and reduce security risks across n8n's product and internal systems, using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems. You'll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You'll help us build a move from reactive security management to a proactive, scalable security practice. Here's what you'll be driving: THREAT MODELLING, RISK ASSESSMENT & SECURITY DESIGN - Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations. - Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls. - Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently. VULNERABILITY MANAGEMENT & COORDINATED DISCLOSURE - Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact. - Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes. - Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and GitHub Security Advisories. SECURITY OPERATIONS & INCIDENT READINESS - Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications. - Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents. - Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk. CUSTOMER TRUST & COMPLIANCE ENGINEERING - Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations. - Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests. - Partner with Legal, Finance, IT, and other stakeholders to assess security risks, improve security policies and controls, and strengthen trust with enterprise customers. We're hiring two Security Engineers with complementary strengths, so you don't need to be an expert in every security domain. REQUIREMENTS MUST-HAVES - 🔍 Threat Modelling & Risk Assessment: You have hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls that teams can implement. - 🛠️ Technical Security Expertise: You can validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed to demonstrate risks or improve security processes. - 🔐 Security Engineering Experience: You've worked hands-on in infrastructure, product, or application security within a product-focused organisation, with a strong understanding of how modern systems are designed and secured. - 🤝 Cross-functional Influence: You're comfortable acting as an internal security consultant, advising teams, challenging technical decisions constructively, and influencing stakeholders without direct authority. - 🎯 Risk Remediation & Ownership: You've helped secure systems you don't directly own, translating security findings into actionable requirements and working with responsible teams to ensure effective remediation. - 🤖 AI & LLM Fluency: You're comfortable using LLM-assisted tooling and understand its limitations, security implications, and potential failure modes. - ✍️ Clear Communication: You can explain complex security risks, document technical findings, and provide practical guidance that engineers and non-technical stakeholders can confidently act on. You also bring deep expertise in at least two of the following areas: - 💻 Application Security: You've developed security checks, engineering guardrails, tooling, or guidance that helps product teams build and ship secure software. - ☁️ Platform Security: You have experience securing a major cloud provider and Kubernetes environments, including areas such as sandboxing, multi-tenancy, or identity. - 🔑 Corporate Security: You've worked on identity and access management, endpoint security, employee access lifecycles, or data access controls across corporate environments. - 🚨 Security Monitoring: You've implemented logging, protective monitoring, or security detection capabilities that support effective investigation and incident response. - 📋 Security Assurance & Compliance: You've supported SOC 2 or ISO 27001 from an engineering perspective, including implementing technical controls or automating compliance evidence collection. NICE-TO-HAVES - 🐛 Vulnerability Disclosure: You've helped operate bug bounty or coordinated vulnerability disclosure programmes, including publishing security advisories such as GHSAs or CVEs. - 🧠 AI & Agent Security: You have experience assessing or securing LLM-powered applications and AI agents, including risks related to permissions, tool access, prompt injection, or sensitive data. - 🏢 Corporate IT Tooling: You're familiar with platforms such as Okta, Azure, or Drata and their role in securing corporate systems and supporting compliance. - 🌍 Open-source Ecosystems: You've worked with open-source or source-available products, contributed to security communities, or are already familiar with n8n. - 🎯 Penetration Testing: You have practical penetration testing experience and can independently identify, demonstrate, and help remediate security vulnerabilities. - 🌱 Early-stage Security Experience: You've been an early security hire or helped establish security practices in a startup or rapidly scaling organisation. Why join us? At n8n, you'll help shape security at a defining stage of our growth. We're building a security practice that goes beyond reacting to vulnerabilities, and you'll play a key role in how we identify risks, influence engineering decisions, and establish security practices that scale with the business. You'll work across a broad range of challenges, from securing AI-powered product features and our source-available automation platform to improving corporate security, strengthening incident readiness, and making compliance more automated. You'll have direct exposure to teams across the company, the opportunity to influence important technical decisions, and the autonomy to turn your expertise into measurable security improvements. Sound like a challenge you're excited to take on? Apply now — and help us build the future of secure automation. n8n is an equal opportunity employer and does not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, gender identity, age, marital status, veteran status, or disability status. We can sponsor visas to Germany; for any other country, you need to have existing right to work. Our company language is English. You care about diversity and inclusion? We do too! Check out our Diversity, Inclusion and Belonging initiatives at n8n https://www.notion.so/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35?pvs=21 (https://www.notion.so/n8n/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35). Location disclaimer: If you see multiple job postings for the same role, it is most likely because we're hiring remotely for this role and posting in different locations to make sure every potential candidate can see the role. Please apply to the location you're the most likely to work from in the future. BENEFITS - Competitive compensation 💸 – We offer fair and attractive pay. - Ownership 💪 – Our core value is to “empower others,” and we mean it—you’ll get a slice of n8n with equity. - Work/life balance 🏖️ – We work hard but ensure you have time to recharge: - Europe: 30 days of vacation, plus public holidays wherever you are. - US: 20 vacation days, 8 sick days, plus public holidays wherever you are. - Health & wellness 🩺 – - Europe: We provide benefits according to local country norms.* - US: Multiple low-premium, low-deductible medical plans with coverage for individuals and families—plus a no-cost premium HDHP option with a pre-seeded HSA—along with dental and vision coverage. - Future planning 💰 – - Europe: We provide pension contributions according to local country norms.* - US: 401(k) retirement plan with a 4% employer match. - Financial security 🛡️ – - Europe: We provide benefits according to local country norms.* - US: Company-paid short-term and long-term disability insurance, plus life insurance to support you and your loved ones. - Career growth 📈 – We hire rising stars who grow with us! You’ll get €1K (or equivalent) per year to spend on courses, books, events, or coaching to level up your skills. - A passionate team 🤩 – We love our product, and we prove it with regular hackathons where we see who can build the coolest thing with it! - Remote-first 🌏 – Our team works remotely across Europe, with regular off-sites for team bonding. Some roles, like sales in the US, are hybrid—please check the job description. - Giving back 🤝 – We're big fans of open source, and you'll get $100 per month to support projects you care about. - Transparency 🙏 – We all know what everyone’s working on, how the company is doing—the whole shebang. *Country and/or State specific details provided in your employment agreement.