Вакансии

Banco Plata is a major fintech platform in Latin America operating under the Open Finance principle. Languages required: Spanish (fluent), English (professional working proficiency).

Задачи: — Владение и обеспечение соблюдения стандартов безопасности поставщиков Nebius, включая перевозчиков, 3PL, экспедиторов, охранные компании и поставщиков последней мили. — Обновление требований к безопасности поставщиков в соответствии с политикой NGSCS и мировыми лучшими практиками. — Обеспечение формального подключения всех поставщиков к стандартам безопасности NGSCS с документированным принятием требований. — Взаимодействие с руководством NGSCS, юридическим отделом и отделом закупок для включения требований безопасности в контракты и соглашения. — Проведение регулярных, внеплановых и запланированных проверок соответствия на объектах поставщиков по всему миру. — Оценка соответствия поставщиков стандартам TAPA FSR, TAPA TSR и специфическим требованиям NGSCS. — Документирование результатов проверок, выявление системных рисков и эскалация проблем с предложениями по устранению. — Выдача официальных уведомлений о корректирующих действиях, отслеживание их выполнения и повторные проверки. — Эскалация серьезных или повторяющихся нарушений с рекомендациями по санкциям, приостановке или замене поставщика. — Ведение глобального реестра соответствия поставщиков. — Основной контакт NGSCS по вопросам безопасности поставщиков, проведение регулярных обзоров и оценок эффективности. — Поддержка процесса подключения новых поставщиков через оценку их безопасности. — Подготовка регулярных отчетов о соответствии поставщиков, выявление тенденций и рекомендации по улучшениям. — Внедрение инноваций в области безопасности цепочки поставок. Требования: — Значительный опыт в области обеспечения безопасности цепочки поставок, аудита поставщиков или контроля стандартов безопасности. — Подтвержденный опыт проведения физических проверок безопасности и оценки соответствия в многосторонних средах. — Опыт управления процессами корректирующих действий с эскалацией и разрешением. — Глубокое знание стандартов безопасности цепочки поставок, включая TAPA FSR и/или TAPA TSR. — Знание физических мер безопасности, применимых к логистике (контроль доступа, видеонаблюдение, проверка персонала, защитные пломбы, цепочка хранения). — Напористый и прямой стиль общения, способность требовать ответственности от поставщиков. — Высокая организованность и внимание к деталям. — Способность самостоятельно работать в разных географических регионах с минимальным контролем. — Свободное владение английским языком (устным и письменным). Желательно: — Опыт работы в правоохранительных органах, военной безопасности или корпоративном аудите безопасности. — Опыт работы с цепочками поставок высокоценных или критически важных инфраструктур (например, дата-центры, AI-оборудование, полупроводники, электроника). — Опыт работы в глобальных функциях безопасности с много региональными сетями поставщиков. — Знакомство с технологиями безопасности (GPS-трекинг, геозонирование, контроль доступа, защитные пломбы). — Дополнительные языки, релевантные регионам NGSCS (нидерландский, иврит, мандарин). Операционные ожидания: — Значительные международные командировки для проведения проверок на местах. — Готовность к быстрому реагированию и работе вне стандартного рабочего времени. — Работа в глобальной среде с координацией по часовым поясам. — Подчинение руководителю глобальной безопасности цепочки поставок с полномочиями независимого и бескомпромиссного обеспечения стандартов. Условия: — Конкурентная компенсация. — Возможности карьерного роста и обучения. — Гибкость и самостоятельность в работе. — Международная среда и талантливые команды.

Location: San Francisco, CA • New York, NY • United States Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As a Security Scientist, you will leverage your data analysis skills and help identify and drive impactful projects to improve the safety and security of Figma's product, platform, and our IT systems. The mission of the Figma Security team is to help Figmates ship the most secure and safe product to our users. We are looking for security scientists with a strong grasp of security and anti-abuse fundamentals. You will partner closely with teams in Security Engineering as well as teams across the company to focus on systemic security and safety improvements and risk reduction. You will also apply your security expertise and analytical skills to support and participate in security design reviews and consulting, incident response, and risk management. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Collaborate cross-functionally across the company to understand existing security and anti-abuse problems and work with engineering, product, data science, and other teams on solutions Understand attacker and user behavior on the Figma platform and inside Figma through creation of new datasets, metrics, experimentation, etc., and guide strategy and decision making Build detections, tune signal quality, and measure coverage across Figma's products, platforms, and internal systems, turning attacker behavior into durable, data-driven detections Lead and support security investigations, developing the datasets, tooling, and analysis that help us scope incidents, understand root cause, and reduce time to detect and respond Translate threat intelligence into action, operationalizing intel on relevant threat actors and techniques to prioritize detection coverage, harden high-risk surfaces, and guide security strategy Conduct investigations and design reviews to identify current and new attack vectors against Figma products and services Advocate for security and secure practices throughout Figma We'd love to hear from you if you have: Strong understanding of real-world security, anti-abuse, and detection and response challenges Fluency in SQL, with proficiency in Python, R, or a similar scripting language Experience working with distributed data processing systems and frameworks such as Hive, Redshift, Presto, Snowflake, or Spark Strong knowledge of statistical methods and experimental design Excellent judgment and creative problem-solving skills While it's not required, it's an added plus if you also have: A self-starting mindset along with strong communication and collaboration skills At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you're excited about this role but your past experience doesn't align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. Pay Transparency Disclosure Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law. Annual Base Salary Range: $140,000 — $348,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: Remote About us OpenZeppelin is the security standard onchain finance is built on. Founded in 2015, our mission is to accelerate the world's transition to an open financial system, built on open standards and secured by rigorous research. Our open-source Contract Libraries have facilitated over $35 trillion in onchain value and are used by 10 of the top 10 tokenized money market funds and 9 of the top 10 stablecoins by market cap. We combine AI-native security tooling with deep research and a decade of audit expertise to support leading institutions and crypto-native teams shaping the next generation of digital assets like DTCC, Fidelity, Coinbase, Uniswap, Aave, the Ethereum Foundation, and many more across the full secure development lifecycle. Please note: Always refer to OpenZeppelin's official job page for the most accurate information about our open roles, as we have seen multiple third party job sites posting inaccurate information. The IT & Security Team The Information Security function operates independently under our Legal team and owns everything that keeps the OpenZeppelin organization secure. That means managing our Security, Privacy & IT Program end-to-end: our SOC 2 and ISO 27001 posture, vendor and privacy risk, incident response, our bug bounty programs, and the identity, endpoint, and access systems the whole company depends on. It is also the team our customers meet during security diligence. As our enterprise relationships deepen, increasingly with banks and other regulated institutions, our own program must be as credible as the security we deliver to customers. Today that program is established and audit-ready. The next chapter is turning it into an enterprise-grade security function that stands up to the scrutiny of the most demanding enterprise customers, partners, and regulators, while safely accelerating our adoption of AI across the company. What you'll be doing You will own the strategy, design, and continuous maturation of OpenZeppelin's Information Security Program, and be accountable for managing the team executing it. You can issue-spot security and privacy risks before they materialize, explain the principles behind security and compliance controls to auditors and enterprise security teams, and calibrate our security program proportionate to risk. IT and infrastructure: Oversee identity and access management, provisioning and onboarding/offboarding, end-user security (MDM, endpoint protection, security training), physical security, disaster recovery, business continuity, and data backup, using automation and AI-powered workflows to make IT and security operations scale faster than headcount. Strategy, governance and budget: Set the strategic direction, multi-year roadmap, and risk posture of the Information Security Program; deliver on department OKRs; and own the IT and technology budget, with ultimate responsibility for technology procurement. AI security and governance: Own the secure adoption of AI across the company: evolve our AI governance framework, review and approve AI tools and agentic workflows, and secure our agentic infrastructure (identity, least-privilege tool and data access, secrets handling, monitoring, auditability). Manage frontier model providers as critical vendors, covering security and data-handling diligence, retention and training-use commitments, DPAs and subprocessor flow-downs. Meet emerging obligations such as the EU AI Act, so we can make transparent, defensible commitments to enterprise customers about how our products and internal AI usage handle their data. Compliance, audit and enterprise trust: Own our audit, certification, and attestation strategy and execution (penetration testing, SOC 2 Type 2, ISO/IEC 27001, successor frameworks) alongside internal security audits; run a third-party and vendor risk management program; and serve as the external face of our security program with customer security teams, regulated financial institutions, and auditors. Privacy and data governance: Maintain a comprehensive data map of how data flows into, through, and out of the organization, including flows to model providers and through agentic workflows, with data classification, records of processing, and a vendor/subprocessor inventory. Own privacy compliance in partnership with Legal: GDPR, CCPA/CPRA, DPAs and contractual security commitments, and privacy-by-design reviews of new products and features. Security operations and incident response: Own the incident response program end-to-end, including playbooks, tabletop exercises, post-incident reviews, and breach-notification obligations in partnership with Legal. Manage our bug bounty programs, and partner with development teams to embed security best practices in the SDLC and our software offerings. You have 10+ years of Security and IT experience, including 3+ years leading a IT Security and GRC function (not solely IT operations) in a high-growth tech company, with demonstrated ownership of strategy, not just execution. A demonstrated trajectory toward CISO: you have owned a security program end-to-end, presented to executives or boards, and can articulate the "why" behind every control you have implemented. Experience securing or governing AI/LLM-enabled products or enterprise AI adoption including agentic systems and third-party model-provider risk, with an ability to apply privacy and data-protection laws and practices (e.g., GDPR, CCPA/CPRA) in the AI context. Nice to have 5+ years working in blockchain or a FinTech with an enterprise client base (e.g., financial services), including navigating rigorous third-party security diligence. Logistics: Our interview process takes place on Google Meet or Zoom and tends to consist of the following stages: Recruiter Call (30 minutes) Hiring Manager Call (30 minutes) Team Interview (30 minutes) Leadership Interview (30 minutes) Paid work test (up to 20 hours of paid work) Reference checks Benefits Meet your teammates at company gatherings around the world 😎 Enjoy the flexibility of fully remote work 🌎 Take the time you need with flexible time off 🏝 Grow your family with 8 weeks of paid leave for primary caregivers, 4 weeks for secondary caregivers, and a one-time $3,600 baby bonus 💙 Build your ideal home office with up to $500 in equipment support 🪑 Stay covered with medical insurance 🏥 Keep growing with learning and development opportunities 🧠 Get a monthly stipend for your preferred co-working space 💻 At OpenZeppelin , we are an equal opportunity employer and we value different perspectives. We are committed to building a diverse workforce. This includes but is not limited to gender, race, sexual orientation, religion, national origin and other characteristics that make each one of us unique. In this uniqueness, we find the most value. Come join us! Use of AI as part of the recruiting process As part of OpenZeppelin’s recruitment process, we may use automated tools, including artificial intelligence, to assist in reviewing applications and assessing candidate qualifications. These tools are used to support our People team by identifying relevant skills and experience, and are not used to make decisions solely by automated means. All hiring decisions involve human review. Any personal data provided as part of your application will be processed in accordance with OpenZeppelin’s Data Privacy Notice . If you have questions about this recruitment process or would like to request human review of your application, please contact us at talent@openzeppelin.com.

We are seeking an elite, hands-on Senior Security Compliance Consultant (SOC 2 & GRC Specialist) to lead a critical, company-wide SOC 2 Type II audit readiness initiative. In this strategic engagement, you will perform comprehensive gap analyses, assess existing security controls, design robust compliance workflows, and drive cross-functional teams toward audit completion. The ideal candidate brings a proven track record in GRC frameworks, control mapping, evidence automation, and policy development. Utilizing automated compliance platforms such as Sprinto, you will build repeatable compliance processes, validate technical controls, and ensure a seamless audit experience across the entire organization. General Information (About the Client): Our client is a fast-scaling, cloud-native technology platform committed to maintaining enterprise-grade trust, security, and data privacy. To support their rapid commercial growth and enterprise sales pipeline, they are establishing a formal, highly disciplined security governance model. They operate a modern, cloud-first environment where compliance is treated not as a passive checklist, but as an active, automated operational advantage. By leveraging modern GRC platforms and fostering a security-conscious culture, they provide an empowering environment for compliance experts to drive real architectural and procedural improvements. Tasks and Deliverables: SOC 2 Readiness & Gap Analysis: Conduct a thorough assessment of existing technical and operational security controls, pinpointing compliance gaps and building an actionable remediation roadmap. Control Design & Implementation: Author, refine, and operationalize security controls, policies, and procedures aligned with SOC 2 Trust Services Criteria (TSC) and PCI DSS standards. Automated Evidence Collection: Lead evidence-gathering workflows using automated GRC tooling (Sprinto), ensuring all technical artifacts, access logs, and policy attestations are validated and audit-ready. PCI DSS Guidance: Provide expert advisory on maintaining PCI DSS alignment alongside SOC 2, ensuring overlapping control requirements are mapped efficiently to reduce operational drag. Cross-Functional Coordination: Collaborate with engineering, DevOps, HR, and IT teams to embed compliance workflows into daily operations without slowing down feature execution. Auditor Interface & Readiness: Serve as the primary liaison during the audit preparation phase, coordinating directly with external auditors to present evidence, resolve findings, and ensure a successful audit cycle. Required Experience: SOC 2 Mastery: Proven track record of leading end-to-end SOC 2 readiness, gap remediation, and audit preparation initiatives for cloud-native or B2B SaaS companies. GRC & PCI DSS Acumen: Deep familiarity with Governance, Risk, and Compliance (GRC) frameworks, risk assessment methodologies, and PCI DSS compliance requirements. Tooling Proficiency (Sprinto): Direct, practical experience leveraging automated compliance and evidence-collection platforms, specifically Sprinto (or equivalent modern platforms like Vanta/Drata). Policy & Control Mapping: Exceptional capability to author clear, enforceable security policies and translate abstract regulatory requirements into concrete engineering controls. Cross-Functional Facilitation: Strong stakeholder management skills with a history of driving accountability across distributed engineering, product, and operations teams.

Location: Dublin, Ireland Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT US: Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money.   In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays.   ABOUT THE ROLE: Millions of people rely on Notion to do their most important work. Protecting that trust starts with protecting the people who build Notion: our employees, their laptops, their identities, and the SaaS apps they rely on every day. We are looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our workforce and corporate environment safe. This is a security engineering role focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, not a traditional IT support or corporate engineering role. You'll own and evolve core security controls, design systems and automation that scale with the company, and help make security both stronger and easier to use. You'll partner closely with IT, Infrastructure, GRC, and Detection & Response to improve the security foundations that employees rely on every day.   WHAT YOU'LL ACHIEVE: - Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS. - Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS. - Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools. - Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift. - Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection. - Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse. - Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream. - Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC.   SKILLS YOU NEED TO BRING: - Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company. - Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM). - Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments. - Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration. - Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors. - Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level. - Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC. NICE TO HAVES: - Experience at a fast-growing tech or AI company where the security program had to outpace headcount. - A background in IT engineering, SRE, or production engineering that transitioned into security engineering. - Experience building internal security tooling or workflows that improved employee or developer experience. - Contributions to the security community through open-source tools, blog posts, or conference talks.   We hire talented and passionate people from a variety of backgrounds because we want our global employee base to represent the wide diversity of our customers. If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you.   Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.   By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550. https://dev.notion.so/a3ce416456924276a59de91bca740028?pvs=21   #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Samsara is the pioneer of the Connected Operations™ Cloud, a platform that enables organizations that depend on physical operations to harness IoT data to improve safety, efficiency, and sustainability. Key requirements: — proficiency in Go, Python, and JavaScript — bonus: experience with C/C++ (firmware/embedded systems)

Требования: — владение Go, Python и JavaScript — опыт с C/C++ (прошивка/встроенные системы) будет плюсом

Требования: — владение Go, Python и JavaScript — опыт с C/C++ (прошивка/встроенные системы) будет плюсом

Samsara is the pioneer of the Connected Operations™ Cloud, a platform that enables organizations that depend on physical operations to harness IoT data to improve safety, efficiency, and sustainability. Key requirements: — proficiency in Go, Python, and JavaScript — bonus: experience with C/C++ (firmware/embedded systems)

Требования: — владение Go, Python и JavaScript — опыт с C/C++ (прошивка/встроенные системы) будет плюсом

Location: Kyiv; Lviv; Vinnytsia Workplace: onsite Ajax Systems is an international technology company and the largest security systems manufacturer in Europe. Ajax products are trusted by more than 4.5 million end users and 330,000 PRO users across over 180 countries. The company offers comprehensive solutions for protecting residential and commercial properties of various sizes. Today, the Ajax portfolio includes 280 devices for intrusion protection, video surveillance, fire safety, and comfort and automation. Every year, we demonstrate exponential growth both in the size of our team and in the number of users worldwide.   Ajax Systems operates a full-cycle production model, from idea generation and prototyping to mass production and global sales. Each department fully covers a specific operational need of the business. The company’s specialists are involved at every stage — from the production line in Ukraine to the logistics center in Poland, from where products are shipped to distributors worldwide. Now we are looking for a hands-on Cyber Security Specialist to strengthen our security posture and operational resilience. You will be at the forefront of our cybersecurity defense, responsible for incident monitoring and investigation, the deployment and improvement of security solutions, and ensuring our corporate processes and infrastructure meets compliance standards. If you are passionate about building secure systems, incidents investigation and translating technical findings into efficient mitigation actions, this role is for you. Key Responsibilities: Security systems support and improvements: Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support. Security Monitoring & Incident Response: Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats. Conduction Security Assessments: Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation. Compliance & Governance: Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2). Consultancy & Support: Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction. Reporting & Strategy: Participate in preparation of reports for management, definition and description of security strategy. Required Technical Skills & Qualifications: Experience: 5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation. Core Proficiency: Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti). Domain Knowledge: Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST). Security assessment: Practical experience performing IT systems and application security assessments and reports preparation. Security governance: Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation. Language Proficiency: Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners. Preferred Skills & Certifications: Certifications: Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued. Frameworks: Practical knowledge of ISO 27001 organizational controls implementation. Why Join Us: Impact: Take ownership of security projects from concept to deployment. Culture: Work in a "zero bullshit" environment that values technical excellence and autonomy. Growth: Access to corporate English training and professional development/certification support. Health care: medical insurance. Beta Access: Get hands-on experience with new Ajax security systems before they reach the market. Innovation: Help shape the future of "Made in Ukraine" reliability.

Location: Toronto; San Francisco; London; New York; Montreal Workplace: Remote WHO ARE WE? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! As a Senior Security Engineer you will: - Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues - Lead security operation functions – including vulnerability management, SAST, DAST, detection engineering, and incident response – in CI/CD and cloud-native production environments - Integrate security into our applications throughout the software development lifecycle - Collaborate with product and development teams, driving the success of larger projects to ensure that software is built and deployed securely without compromising agility and speed - Driving and supporting bug bounty program, application security reviews and threat modeling, including code review and dynamic testing - Assess and integrate security tools to automate and scale security processes, i.e: evaluate open-source vs vendor solutions - Gather and analyze security metrics to address security issues with cross-team dependencies - Be a problem solver who is empathetic to developer concerns and will employ constructive and flexible approach to building innovative solutions You may be a good fit if: - 5+ years previous experience in Application/Product Security or Security Operations with a strong focus on security tool onboarding and optimization - You have an understanding of vulnerability management, network security, cloud security concepts, and industry best practices across many fields of security - You are comfortable with ambiguity and are able to make informed decisions with little data - You employ a flexible and constructive approach when solving problems - You are able to make trade-offs between build vs. buy decisions - help build solutions and able to review what tools are available - You understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences - You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls - You’re a hands-on security engineer interested in automating controls FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS: - A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch. - Full health and dental benefits, including a separate budget for mental health. - RRSP matching, 401K, Pension Scheme. - 100% Parental Leave top-up for up to 6 months, for either parent. - Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit. Education & learning stipend for conferences, courses, and coaching. - 6 weeks of paid vacation (30 working days!) - Budget for traveling to other offices if you are remote, plus an annual company offsite. HOW AND WHERE WE WORK: - Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon. - For those in the office: a daily lunch program, plenty of snacks, and regular community and social events. - For those not near an office: a co-working benefit so you can work alongside others in your city. - Everyone receives a $500 home office stipend to set up your workspace properly. If any of the above doesn’t line up exactly with your experience, we still encourage you to apply. We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs. We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider. Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.

Location: United States; Canada Workplace: OnSite WHO ARE WE? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! AS A MANAGER OF SECURITY ENGINEERING, YOUR KEY RESPONSIBILITIES INCLUDE: - Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues - Execute the long-term vision for the Security team in alignment with Cohere’s product and business goals. - Collaborate closely with leadership to prioritize high-impact initiatives and strategic customer engagements. - Vulnerability Management: Develop and implement enterprise-wide vulnerability management processes and tooling, including identification, prioritization, remediation tracking, and reporting, including customer artifacts - Static Application Security Testing (SAST): Establish SAST programs, integrate tools into CI/CD pipelines, and analyze results to identify and remediate security flaws in source code - Dynamic Application Security Testing (DAST): Implement DAST methodologies, configure scanning tools, and conduct regular assessments of running applications - Penetration Testing: Lead and oversee internal and external penetration testing engagements, including web application, API, network and agentic AI platform including managing our bug bounty program - Security Architecture Review: Collaborate with development teams to review and validate security architecture and design patterns - Secure SDLC Integration: Embed security practices throughout the software development lifecycle, working closely with engineering and product teams - Team Leadership: Lead and grow a high-performing team of Security engineers through hiring, coaching, and mentorship - Metrics and Reporting: Establish key security metrics, generate regular reports for leadership, and communicate security posture to stakeholders - Compliance and Standards: Ensure application security practices align with industry standards (OWASP Top10 for LLMs, ISO 27001) and regulatory requirements YOU MAY BE A GOOD FIT IF: - You have 8+ years of previous experience in Application Security / Security Engineering with a strong focus on vulnerability management, SDLC and bug bounty programs. - Proven experience with SAST, DAST, and penetration testing methodologies and tools - Proficiency with programming languages (Python, GoLang, etc.) and web technologies - Experience with cloud platforms (AWS, GCP, Azure) and container security - Excellent communication and interpersonal skills with ability to influence technical and non-technical stakeholders - Experience building and managing high-performing security teams - You are comfortable with ambiguity and are able to make informed decisions with little data. - You employ a flexible and constructive approach when solving problems. - You are able to make trade-offs between build vs. buy decisions—help build solutions and be able to review what tools are available. - You understand secure engineering best practices, can articulate problem statements, and propose solutions to both technically savvy and non-technical audiences. - You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls. APPLY: If you are passionate about solving complex revenue challenges in a dynamic AI environment and want to join a team that values technical excellence and innovation, we encourage you to apply. WORKING LOCATION: Remote US or Canada FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS: - A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch. - Full health and dental benefits, including a separate budget for mental health. - RRSP matching, 401K, Pension Scheme. - 100% Parental Leave top-up for up to 6 months, for either parent. - Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit. Education & learning stipend for conferences, courses, and coaching. - 6 weeks of paid vacation (30 working days!) - Budget for traveling to other offices if you are remote, plus an annual company offsite. HOW AND WHERE WE WORK: - Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon. - For those in the office: a daily lunch program, plenty of snacks, and regular community and social events. - For those not near an office: a co-working benefit so you can work alongside others in your city. - Everyone receives a $500 home office stipend to set up your workspace properly. If any of the above doesn’t line up exactly with your experience, we still encourage you to apply. We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs. We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider. Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.

Location: Remote, Global Workplace: Remote ABOUT SUPABASE Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth. Start in minutes with a fully managed, scalable Postgres database and a suite of tools that eliminate the complexity of backend development. Use one or use all—Supabase gives teams the flexibility of open source with the speed and simplicity of a modern platform, so they can move fast without sacrificing control. WHAT ARE WE LOOKING FOR We’re looking for a Platform Security Engineer to join our team and help strengthen the security of Supabase’s infrastructure, cloud platform, Kubernetes environments, and containerized workloads as we continue to scale. You’ll work closely with infrastructure, platform, SRE, product engineering, and technical leadership, helping us proactively reduce risk across the systems that run Supabase. This role is ideal for someone who has deep hands-on experience with AWS, Kubernetes, containers, Linux, and large cloud environments and is excited about securing developer infrastructure without slowing teams down. Success in this role means improving the security posture of the platform through pragmatic engineering, clear technical judgment, and scalable guardrails. WHAT YOU’LL BE RESPONSIBLE FOR In this role, you’ll: - Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure. - Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems. - Partner closely with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns. - Improve Kubernetes and container security across areas like workload isolation, RBAC, admission control, secrets, network policy, and runtime hardening. - Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios. - Strengthen AWS security posture across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration. - Build scalable mechanisms such as automation, guardrails, paved paths, detection, secure defaults, and review frameworks. - Distinguish between theoretical risk and material platform risk to prioritize security efforts effectively. YOU MIGHT BE A GOOD FIT IF YOU - Have senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering. - Have deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals. - Have worked in large cloud environments, multi-cluster Kubernetes setups, developer platforms, SaaS platforms, or high-scale infrastructure teams. - Can reason clearly about identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius. - Communicate clearly across both technical and non-technical audiences, especially in a written, asynchronous environment. - Are able to manage security efforts across complex projects with various stakeholders - Are energized by solving real-world infrastructure security problems and navigating ambiguity while moving quickly. - Prefer building guardrails, automation, and secure defaults over creating unnecessary process or bottlenecks. WHAT WE OFFER - Fully Remote We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world. - ESOP Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together. - Tech Allowance Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work. - Health Benefits Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us. - Annual Off-Sites Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year. - Flexible Work We operate asynchronously and trust you to manage your own time. You know what needs to be done and when. - Professional Development Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth. ABOUT THE TEAM Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love. - ~400 team members - 60+ countries - 20+ languages spoken - Over $1B raised (including our $500M Series F) - 540,000+ community members We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. As our Manager, Security Incident Response, you are at the center of how 1Password handles the moments that matter most. You will build and lead a team of builders: responders who don't just work incidents, but engineer the automation, tooling, and systems that make response faster and more scalable over time. You will guide program maturity, scale the team's capabilities through AI-assisted tooling, reinforce operational excellence, and step in as incident manager during complex, high-severity events. Success in this role blends strong people leadership with technical depth and sound judgment. As part of the Security leadership team, you will shape response strategy, build effective cross-functional partnerships, and help protect a product trusted by millions. This role reports to the Senior Manager, Threat Operations. How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: • 5+ years in security incident response, with 2+ years as a people manager or technical leader supporting career development and performance management. • Experience building or scaling incident response automation, tooling, or AI-assisted workflows (triage, enrichment, investigation), with sound judgment about where automation should and shouldn’t make decisions. • Experience setting clear expectations, defining ownership, delegating work, and measuring outcomes. • Experience managing high-pressure security incidents with clarity, structure, and calm. • Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and how to respond to them. • Strong communication skills, including the ability to explain complex findings, tradeoffs, and recommendations to technical and non-technical audiences. • Experience breaking down strategic initiatives into projects, coordinating team sprints, and managing work across competing priorities. • Passion for fostering psychological safety and stability in stressful environments. Who you are: • A people-first leader who prioritizes team development, psychological safety, and performance. • A builder at heart, someone who thinks in systems and automation, not just case queues, and hires and develops engineers with that same instinct. • Proactive in identifying gaps, inefficiencies, or operational risks and bringing forward actionable solutions, including where AI or automation can close them. • Effective at driving alignment across teams with differing priorities and perspectives. • Calm and decisive during high-pressure situations, with the judgment to prioritize effectively and make difficult tradeoffs. • A clear and transparent communicator who can align teams with differing priorities, surface tradeoffs, and advocate for sound security decisions. • Motivated by protecting people, data, and the business. What you can expect: • Build, lead, and develop a team of incident responders and security builders, setting clear expectations, creating meaningful ownership, and supporting growth. • Delegate effectively based on team strengths, development goals, capacity, and operational needs while maintaining accountability for outcomes. • Define and drive the security incident response roadmap and strategic priorities, including maturing agentic incident response, structured threat hunting, and insider risk investigations as sustained, scaled capabilities rather than one-time builds. • Balance competing priorities across incident response, strategic initiatives, and team development; make tradeoffs clear and push back when timelines, approaches, or requests create unnecessary risk or unsustainable workload. • Scale team capacity through AI-assisted tooling and automation, maintaining appropriate controls around human judgment, approval, auditability, and rollback. • Oversee detection, triage, containment, remediation, and post-incident learning, serving as an escalation point and incident manager for complex or high-severity events. • Partner with Detection Engineering, Cyber Threat Intelligence, Red Team and other teams to improve cross-functional processes and close detection or response gaps identified through investigations. • Evolve playbooks, training, tabletop exercises, metrics, and reporting to strengthen operational readiness and program maturity. • Participate in the on-call rotation, serving as the leadership escalation or incident manager during major or complex incidents. • Track and report on incident trends, operational metrics, and program maturity, including the impact of automation and AI tooling on response time and coverage. USA-based roles only: The annual base salary for this role is between $192,000 USD and $278,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $171,000 CAD and $248,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are looking for an AI Agent Security Architect to function as the primary technical authority for Replit’s autonomous and AI agent security blueprint. In this critical role, you will design, implement, and maintain the runtime defense systems, guardrail frameworks, and sandboxing architectures that govern AI agents executing code, invoking tools, and reasoning across our platform. You will be a key technical contributor—leading high-impact AI security initiatives and bridging the gap between non-deterministic AI behavior and rigorous cybersecurity controls for both engineering and executive leadership. What You'll Do - AI Agent Security Strategy & Technical Execution - AI Agent Security Blueprint: Define the long-term vision and architectural patterns for securing autonomous agent workflows, Model Context Protocol (MCP) integrations, multi-turn reasoning loops, and multi-agent coordination. - Runtime Guardrails & Policy Enforcement: Architect and deploy dynamic input/output guardrail systems, semantic firewalls, and real-time intent verification filters to prevent goal hijacking, system prompt leaks, and indirect prompt injections. - Agent Execution & Tool Sandboxing: Partner with Infrastructure and AppSec teams to design secure, short-lived, micro-isolated environments (e.g., microVMs, WebAssembly, container sandboxes) where agents can dynamically execute code, run shell commands, and interact with host operating systems safely. - Agentic Threat Modeling & Red Teaming: Conduct specialized threat modeling against non-deterministic systems. Lead automated and manual AI red-teaming initiatives to uncover vulnerabilities in RAG context pipelines, vector stores, and tool-calling interfaces. - Identity, Delegation & Least Privilege: Architect fine-grained permission models and step-up Human-in-the-Loop (HITL) authorization patterns for agents acting on behalf of users—ensuring agents never exceed the delegated privileges of the end user or misuse API keys. - Context & Memory Boundary Security: Design strict data isolation and poisoning prevention controls for vector databases, retrieval-augmented generation (RAG) pipelines, and long-term conversation memories across multi-tenant workloads. - Risk Management & Cross-Functional Enablement - Maintain the AI Security Source of Truth: Define, document, and maintain authoritative secure design patterns and SDKs for engineering teams building internal or customer-facing AI agent capabilities. - Contribution to Risk Register: Identify, quantify, and document non-deterministic and agentic security risks (e.g., OWASP Top 10 for LLMs & AI Agents, MITRE ATLAS), ensuring they are accurately represented in the Cybersecurity Risk Register. - Auditability & Observability: Design tamper-evident logging and telemetry standards for agent reasoning chains, tool execution history, and context assembly to support incident response, forensics, and GRC requirements. - Compliance & Sales Enablement: Partner with GRC to translate complex AI security controls into enterprise-ready audit documentation (e.g., ISO 42001, NIST AI RMF, EU AI Act readiness) and support Sales on complex enterprise security inquiries regarding AI safety. Required Skills & Experience - 6+ years of experience in security engineering or security architecture, with at least 2+ years dedicated specifically to AI/ML security, LLM application security, or securing agentic frameworks. - Deep understanding of agentic architectures and protocols (e.g., Model Context. Protocol (MCP), LangChain, AutoGen, CrewAI, ReAct frameworks, and vector database technologies). - Hands-on expertise with threat vectors unique to agentic AI: Indirect Prompt - Injection, Goal Hijacking, Tool Parameter Tampering, Data Poisoning, and Context Contamination. - Strong background in applying safety standards and risk frameworks such as OWASP Top 10 for LLMs & AI Agents, NIST AI RMF, and MITRE ATLAS. - Proficiency in Python, Go, or TypeScript/JavaScript with a proven track record of reviewing code and building functional security tooling or guardrails. - Experience authoring, maintaining, and evangelizing technical security architecture documentation. - Exceptional ability to communicate complex non-deterministic AI risks to both deep technical engineers and executive stakeholders. - Proven track record of contributing to an enterprise Cybersecurity Risk Register. Bonus Qualifications - Experience designing runtime sandboxing and isolation technologies (e.g., Firecracker, gVisor, Docker, WebAssembly) for dynamic code execution environments. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: USA (Remote) Workplace: Remote Tempo is a layer-1 blockchain purpose-built for stablecoins and real-world payments, born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.   Tempo’s payment-first design provides a scalable, low-cost predictable backbone that meets the needs of high-volume payment use cases. Our goal is to move money reliably, cheaply, and at scale. Our north star is simplicity for users: fintechs, traditional banks, merchants, platforms, and anyone else looking to move their payments into the 21st century.   We're building Tempo with design partners who are global leaders in AI, e-commerce, and financial services: Anthropic, Coupang, Deutsche Bank, DoorDash, Mercury, Nubank, OpenAI, Revolut, Shopify, Standard Chartered, Visa, and more.   We’re a team of crypto-optimists, building the infrastructure needed to bring real, substantial economic flows onchain. We like to move fast and swing for the fences — join us! THE ROLE You'll be Tempo's first dedicated product security engineer, standing up application and infrastructure security from the ground floor. You'll build real tooling, respond to real incidents, and work directly with engineering to secure systems that help onboard the largest enterprises onchain. RESPONSIBILITIES - Build and deploy security tooling across endpoint management, supply-chain security, infrastructure, and application layers - Identify and remediate security gaps across Tempo's production systems and development pipelines - Lead incident response end-to-end: triage, containment, remediation, and post-mortems - Partner with engineering on secure design reviews and operational security decisions - Establish repeatable, practical security practices for how systems are built, deployed, monitored, and secured - Improve supply-chain security across dependencies, build systems, and deployment artifacts - Scale application-security coverage as Tempo's infrastructure and product surface grow - Operate with autonomy, build what's needed without waiting for large-company support structures QUALIFICATIONS - 5–8 years of hands-on product or application security engineering experience - Track record building security practices at a company in the 100–500 person range, or similar environments with limited existing security infrastructure - Hands-on coding ability: you build security tooling, automation, and detection, not just recommendations - Deep incident-response experience including high-severity situations owned end-to-end - Strong infrastructure security knowledge: hosting environments, network security, monitoring, and securing system integrations - Application security fundamentals: threat modeling, secure code review, vulnerability management, supply-chain security - Comfortable communicating technical security decisions to engineers with real depth and specificity