Вакансии

Location: Anywhere in France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. 🚀 THE CHALLENGE - Alan is a leading European health insurer with over 1 million members across 4 countries (France, Belgium, Spain, Canada). At its core, Alan is a tech company that believes exceptional member experience is a competitive advantage: fast, empathetic, and reliable service at scale. As of Q1 2026, 40% of conversations are handled automatically. - At the intersection of Care, Legal, Security, and Data Protection sits a set of topics that are as operationally complex as they are strategically critical: data breaches, GDPR rights requests, security incidents, legal complaints, regulatory reporting. - We are looking for a Care Legal & Security Specialist to own these topics end-to-end: handling complex cases in close collaboration with Alan's Legal and DPO teams, building the processes and training that allow our ~300 Care agents to manage them with confidence, and identifying where AI and automation can reduce manual load. As Alan accelerates across four countries, what you build in France gets replicated in Spain, Belgium, and Canada: your work doesn't stay local. - This is not a pure legal role, and it is not a pure ops role. You handle regulatory cases, improve the processes that prevent them from recurring, and scale what works across countries. You will be embedded within our Operational Excellence team, working in close collaboration with Care Ops and the Corporate Unit. 👨‍🚀 MISSIONS 1/ Operational run (60%) - Handle complex security incidents, GDPR cases, and legal complaints escalated from Care agents, including CNIL notifications (drafted in close collaboration with Legal and DPO, within the 72-hour regulatory deadline), account takeover situations, Level 2 and Level 3 complaints, and incoming legal mail - Manage interactions with external stakeholders (CNIL, Insurance Ombudsman, Signal Conso) with precision and within regulatory deadlines - Own KPI monitoring and reporting for legal and security matters; organize yearly complaints reporting for Alan's Board; identify trends and escalate systemic issues to Product teams early 2/ Scalability: process, tools, and training (20%) - Design and continuously improve workflows, escalation paths, macros, and help center content so Care agents can handle legal and security cases autonomously at L1 and L2 - Identify simplification and automation opportunities across legal and security operations, then collaborate with Care Ops and Product crews to deploy them, rather than solving each case manually - Build and maintain training materials (case studies, Q&As, simulations), so Care Experts develop real judgment, not just process familiarity - Ensure regulatory training completion across the team 3/ Globalization (20%) - Translate processes, frameworks, and training materials built for France into resources that Care and Legal/Compliance teams in other countries can adopt - Coordinate actively with counterparts in other countries to share learnings, align on best practices, and anticipate regulatory divergences - Build shared resources so that when a new country goes live, the Care Legal & Security function isn't starting from scratch To deliver on those missions, you will: - Support Care Experts participating in the Legal & Security taskforce: build their judgment on complex and ambiguous cases, be the primary escalation reference for Care agents facing difficult legal or security situations - Collaborate with the Corporate Unit Lead and Care Ops to shape the Care roadmap on legal and security topics; translate regulatory constraints into executable processes and surface operational insights that should inform policy or product decisions ⭐ YOU'LL EXCEL IN THIS ROLE IF YOU: - Deliver reliably on high-stakes, deadline-driven cases with a real member-centric mindset - Have at least 1-2 years of experience in one of the following: GDPR / privacy operations, legal complaints handling in a regulated sector, or compliance ops in fintech, insurtech, or health - Communicate with precision and adapt to your audience, whether you're briefing a legal expert, aligning with a product team, or coaching a front-line agent. You get buy-in from agents and managers who didn't ask for a new process, and that's as important as designing the process itself - Spot simplification opportunities and know how to turn them into projects: you identify what should be automated or redesigned, then drive the collaboration with Care Ops and Product to make it happen - Are comfortable navigating regulatory frameworks (GDPR, complaint handling, CNIL) without being a lawyer; you know when to escalate and when to own it, and you're backed by Legal and DPO experts at Alan - Are comfortable making judgment calls in ambiguous situations and moving forward without waiting for all the answers. - Are fluent in French (C1+ written and spoken, essential for CNIL notifications, ombudsman responses, and legal correspondence) and proficient in English for internal Alan collaboration No prior legal qualification is required but a background in law is a genuine plus. We are looking for operational rigor, strong communication, and the appetite to build something that scales. For this opportunity, we are aiming to hire within the B-C level range. 🌍 HOW WE WORK Location: You must be legally eligible to work from France. Remote work: We offer remote work flexibility, but we value in-person collaboration. 🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. If you identify yourself as a woman: Did you know that research shows women often apply only when meeting 100% of requirements? Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application! 🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info. YOU WANT TO KNOW MORE ABOUT ALAN? 🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

Location: Budapest WorldQuant develops and deploys systematic financial strategies across a broad range of asset classes and global markets. We seek to produce high-quality predictive signals (alphas) through our proprietary research platform to employ financial strategies focused on market inefficiencies. Our teams work collaboratively to drive the production of alphas and financial strategies – the foundation of a balanced, global investment platform. WorldQuant is built on a culture that pairs academic sensibility with accountability for results. Employees are encouraged to think openly about problems, balancing intellectualism and practicality. Excellent ideas come from anyone, anywhere. Employees are encouraged to challenge conventional thinking and possess an attitude of continuous improvement. Our goal is to hire the best and the brightest. We value intellectual horsepower first and foremost, and people who demonstrate an outstanding talent. There is no roadmap to future success, so we need people who can help us build it. Technologists at WorldQuant research, design, code, test and deploy firmwide platforms and tooling while working collaboratively with researchers and portfolio managers. Our environment is relaxed yet intellectually driven. We seek people who think in code and are motivated by being around like-minded people. The Role : We are seeking a diligent and driven security operations specialist with strong hands-on technical skills, proven problem solving ability and excellent communication skills. As an security operations specialist at WorldQuant you will work closely with our technologists, researchers and portfolio managers to ensure systems are following best practices, perform incident response, provide patch and vulnerability remediation guidance, and support the identity and authorization infrastructure of the firm. Responsibilities (including but limited to): Research CVEs and other threat intelligence to formulate and deploy a response Operate and manage WorldQuant’s secrets and authentication management tool instances Develop tooling for continuous audit, code analysis and other security analysis activities Monitor and operate detection tools and respond to identified security issues in the environment Provide operational support for Authentication, Identity and other security infrastructure. Operate and improve the firms security monitoring and detection and infrastructure Provide customers support for foundational components such as Kerberos, SSH, SSL and more. Requirements : Degree in a technical or quantitative discipline from a top tier University Solid understanding of UNIX security. Knowledge of industry standard tools beneficial - (eg gitlab, nix, redhat linux, claude, jira, etc) Scripting experience, preferably in python. Experience operating security infrastructure, developing integrations of security products. Ability to communicate and design solutions related to security from first principles. Experience with Linux, Kerberos, SSL, SSH and  Active Directory Experience with agentic development Strong verbal and written communication skills in English What We Offer: Competitive compensation package Core benefits include: premium private health insurance and life insurance with savings plan Support for every aspect of life through Employee Assistance Program and fully covered sick leave Strong culture of learning and development: training courses, library, guest speakers, share and learn events, global conferences Regular offsite team buildings, annual conferences and occasional global summits – opportunity to travel and connect with our local and global teams Employee resources groups with strong diversity and inclusion culture #LI-DN1 By submitting this application, you acknowledge and consent to terms of the WorldQuant Privacy Policy. The privacy policy offers an explanation of how and why your data will be collected, how it will be used and disclosed, how it will be retained and secured, and what legal rights are associated with that data (including the rights of access, correction, and deletion). The policy also describes legal and contractual limitations on these rights. The specific rights and obligations of individuals living and working in different areas may vary by jurisdiction. Copyright © 2025 WorldQuant, LLC. All Rights Reserved. WorldQuant is an equal opportunity employer and does not discriminate in hiring on the basis of race, color, creed, religion, sex, sexual orientation or preference, age, marital status, citizenship, national origin, disability, military status, genetic predisposition or carrier status, or any other protected characteristic as established by applicable law.

Shakepay is looking for a Staff Security Engineer to design scalable security solutions, automate detections and response workflows, lead incident response, and strengthen AI-enabled security capabilities.

-Выстроить централизованную систему IT-безопасности и управления инфраструктурой для всех юридических лиц группы компаний. -Управление доступами — разделение данных, дисков и папок по юридическим лицам, централизованная выдача и отключение доступов, контроль onboarding/offboarding.

Обладать способностью быстро изучать новое и внедрять это в свою работу Коммуникабельность и открытость в общении Будет плюсом: Владение powershell, bash, на уровне уверенного пользователя. • Интерес к области информационной безопасности, и желание в ней разбираться.

Within this, you will: Own features of the OpenZeppelin Contracts Library for Daml end to end, from design through audit: examples include a Timelock, access control, vaults, or token standard support. Implement and shepherd the OZ Daml versions of CIP-56, CIP-86, CIP-103, future CIPs.

Figure is looking for a Security Engineer Intern to assess systems and build security and privacy controls.

OpenRouter is looking for a Security Solutions Engineer to lead customer security reviews and provide accurate technical security guidance to enterprise buyers.

Act as the subject matter expert (SME) for Datadog Security products across a targeted account patch. Collaborate closely with Enterprise AEs to support net new logo acquisition and expansion in strategic accounts.

Pave Bank is looking for a Senior Security Engineer to identify, test, and remediate security vulnerabilities across applications and systems.

Location: Remote, Canada; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Backend Engineer on GitLab's Security Factory: Code Security team, you help developers find and fix security issues. Those issues live in the code they write and in the open source components they depend on. Your work spans complementary parts of a complete security analysis. On the dependency analysis side, you teach the analysis engine what a project depends on. You parse dependency manifests, lockfiles, and SBOMs so the engine knows which libraries and frameworks are in play and how the code uses them. You also extend the service that turns security advisories into automated merge requests that update vulnerable dependencies. On the vulnerability detection side, you grow GitLab's security analysis engine with hybrid analyzers that blend rule-based detection and AI reasoning. You build and apply the tooling that develops, evaluates, and ships those analyzers, and you measure how well they find real problems. That work also expands coverage of the libraries, frameworks, and AI agent tooling that real-world applications are built on. These threads reinforce each other. What a project depends on, and how its code uses those dependencies, are parts of one picture, and this team works across all of it. We make thoughtful use of AI-assisted development tools in our daily work. We expect you to use them effectively and with good judgment. What you do Act as the directly responsible individual (DRI) for team initiatives from design through delivery, shipping with minimal guidance in partnership with the technical lead Bring systems built by one engineer to team ownership through documentation, tests, and shared review Design and ship analyzers that pair deterministic analysis capabilities with AI-driven analysis, and build the evaluation harnesses that measure their false positives and missed findings against benchmark applications with known vulnerabilities, raising the bar for what counts as a trustworthy result. That includes detection rules mapped to CWE and the test fixtures that prove they work. Package those analyzers for every place GitLab runs them, including CI jobs, AI agent workflows, and command-line tools, with findings reported in GitLab's standard security report formats Design and ship the manifest, lockfile, and SBOM parsing that tells the static analysis engine what a project depends on, and extend it to new ecosystems and formats Ship features across the automated remediation service that turns security advisories into dependency update merge requests, from sandboxed updates to merge request creation Solve technical problems of high scope and complexity, actively seek out difficult impediments affecting the whole team, and advocate for improvements to quality, security, and performance with Product Management, Engineering stakeholders such as Frontend and UX, and partner teams such as Code Scanning and Composition Analysis Mentor Intermediate engineers through code review and pairing, and maintain our internal standards for style, maintainability, and best practices through review Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues What you bring Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't Substantial professional experience writing and testing production code in a systems language, particularly Go and/or Rust, with depth in at least one. We use both, plus Ruby on the remediation side and Python for some analyzers, and value willingness to work across them. Familiarity with package managers and dependency management in one or more language ecosystems, such as npm, Maven, pip, Bundler, or Cargo. Experience building tooling around them is better still. Demonstrated application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE) and the software supply chain A track record of taking ownership of ambiguous problems and shipping with minimal guidance, with the self-motivation and organizational skills suited to a remote, largely asynchronous environment Demonstrated capacity to communicate clearly and concisely about technical problems, and to write design proposals that bring a team to a decision Helpful experience Experience evaluating AI-driven detection against labeled data, including measuring false positives and missed findings Experience with performance optimization at scale Hands-on program analysis experience, such as parsing, ASTs, or data-flow analysis Familiarity with popular web or mobile application frameworks and how they handle input, data, and configuration Experience with containerized workflows and CI/CD (we use Docker heavily) About the team The Security Factory: Code Security team builds GitLab's code-level security scanning capabilities, spanning static application security testing and dependency scanning. We help developers find and fix security issues in both the code they write and the open source components they depend on, as early as possible. We work closely with the Static Analysis team on GitLab's SAST engines, with Composition Analysis on the broader software supply chain, and with other groups across the Sec Section. We rely heavily on asynchronous work across time zones. Remote-Global The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $139,200 — $235,200 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Staff Backend Engineer on GitLab's Security Factory: Code Scanning team, you help developers find and fix security issues. Those issues live in the code they write, and you set the technical direction for the static analysis engine that finds them. Your work spans two complementary parts of a complete security analysis. On the engine side, you shape how the static analysis toolkit models a program: parsing source into intermediate representations, resolving symbols, building call graphs, and tracking tainted data across files and languages. You define the architecture and specifications the team builds against, and you delegate component specifications within them to engineers and to the AI agents that implement them. On the evaluation side, you build and apply tooling that tests, measures, and validates what the engine finds against benchmark applications with known vulnerabilities. What the engine can model and how we measure what it finds are parts of one picture. As a Staff engineer you hold that picture, shape the long-range technical goals of the team, and raise the bar for every engineer on it. We build the engine with AI agents that write and review code from written specifications, under human direction. We expect you to direct that work effectively and with good judgment, and to help the team do the same. What you do Act as the directly responsible individual (DRI) for the team's highest-scope initiatives from design through delivery, shipping large features with minimal guidance and shaping the long-range goals of the team Bring systems built by one engineer to team ownership through documentation, tests, and shared review Set the technical direction for the AI-assisted tooling that implements, reviews, and validates engine changes and findings, design the checks that decide whether an agent-written change or generated result is fit to merge, and measure detection quality against benchmark applications with known vulnerabilities, raising the bar for what counts as a trustworthy result. That includes static application security testing (SAST) rules mapped to CWE and OWASP, and the test fixtures that prove they work. Own the architecture of the program model (parsing, symbol resolution, intermediate representations, call graphs, and taint and data-flow analysis) and of the pipeline that turns source code into findings, and define how both extend to new languages and frameworks Solve technical problems of the highest scope and complexity, actively seek out difficult impediments affecting the whole team, and advocate for improvements to quality, security, and performance with Product Management, UX, and partner teams such as Code Security and Composition Analysis Mentor all engineers on the team through code review and pairing, remove blockers to their autonomy, and shepherd the definition and improvement of our internal standards through review Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues Define the overarching architecture and specification documents for the engine, delegate component specifications within them, and drive their implementation by AI agents and engineers working independently through phased plans, small reviewable units of change, and specifications kept in lockstep with the code Build and maintain the harness, agent instructions, and agentic skills that keep agent-written code trustworthy, including separate coding and reviewing agents, rules and tests the coding agents cannot change, independent review panels of agents from different model providers, and performance, API, and dependency gates, with risky changes escalated to human review Stay current with research in program analysis and security, run AI-assisted research and spikes, and turn the findings into prototypes, proposals, and upstream contributions, including responsible disclosure of findings in open source projects What you bring Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't Extensive professional experience writing, testing, and reviewing production code in Rust, Go, or a comparable systems language, with depth in at least one. The engine is Rust, the analyzer wrapper is Go, and the monolith integration is Ruby, and we value willingness to work across them. Experience with performance optimization and with containerized workflows and CI/CD (we use Docker heavily) A deep program analysis and static analysis background, such as parsing and ASTs, intermediate representations (SSA, control-flow and call graphs), taint and data-flow analysis, type inference, incremental and fixpoint computation, or writing detection rules, with the ability to read, evaluate, and apply the research literature Deep application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE) Demonstrated capacity to communicate clearly and concisely about complex technical, architectural, and organizational problems, and to write architecture and design specifications that bring a team to a decision A track record of taking ownership of ambiguous, team-wide problems and shipping them from concept to production with minimal guidance, with specific, regular async updates on progress, blockers, risks, and next steps Experience defining a system's overarching architecture, delegating component specifications to engineers and AI agents, and getting them implemented reliably A track record of mentoring engineers, raising a team's technical bar, and influencing technical direction by achieving consensus with peers and leadership Helpful experience Familiarity with popular web or mobile application frameworks and how they handle input, data, and configuration Experience designing guardrails for agent-written code, such as mutation testing, fuzzing, and CI gates the coding agent cannot modify A record of engaging with the research community, such as publications, tool papers, or upstream open source contributions in program analysis or security About the team The Security Factory: Code Scanning team develops GitLab's SAST capabilities for customer software repositories. We work closely with the Code Security team on scanning rules & flows, with Composition Analysis on the broader software supply chain, and with other groups across the Sec Section. We rely heavily on asynchronous work across time zones. Remote-Global The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $152,800 — $259,200 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: United States, Remote Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. As a Senior Product Security Analyst within our Game Security Team, you play a critical role in safeguarding our community from bad actors, ensuring that the spirit of friendship remains the cornerstone of every world we create. You will leverage our anti-cheat detections and use your detective skills to find those folks who would compromise our worlds and spoil our players’ experiences. You will work with engineers and data scientists to piece together the clues to make the picture come together and create a portfolio of evidence so that we can confidently isolate cheaters and ensure fair and honest gameplay. Responsibilities: Conduct in-depth investigations using game data and telemetry focused on identifying cheaters Prepare clear, detailed investigation reports where findings and recommendations are supported by specific data and evidence. Work with the team to prioritize, validate, and tune cheat detections. Collaborate as a valued team member, contributing to and supporting our collective pursuit of shared objectives REQUIRED Skills: Solid track record as a tech-savvy investigator, adept in uncovering information, tackling complex problems, and conducting thorough monitoring of adversaries Possess the versatility to effectively collaborate within a team setting and the initiative to autonomously drive projects to completion with minimal supervision Proven ability to craft and present conclusive, data-driven reports that drive action and targeted outcomes Proficient with querying relational databases (e.g., SQL), big data service (e.g., Redshift, Omni, Snowflake or Big Query) Familiarity with the AAA Games Cheating/Security landscape, and a passion for protecting player experiences. Bachelor’s degree or equivalent Nice-to-have Skills : Game security, anti-cheat, or similar investigative experience. Utilizing data visualization tools (e.g., Tableau, Omni) to interpret and present data insights Additional language proficiency (e.g., Chinese, Korean, Russian, Japanese, Spanish) At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. This is a flexible role that can be remote, with varying pay ranges based on geographic location. For example, if you are based out of Seattle, the estimated base pay range for this role is listed below. $177,300 — $265,900 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: United States of America What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Product Research Location: Remote US Compensation Range: $215,000.00 to $225,000.00  base plus bonus and equity What You’ll Do: Lead product research initiatives that develop and evaluate macOS security product strategies and technologies Identify and prototype new telemetry from Apple's Endpoint Security API and other macOS subsystems to expand prevention, hardening, and detection capabilities Reproduce and analyze macOS attacks through hands-on execution of attacker techniques, malware detonation, and vulnerability exploitation Reverse engineer macOS malware and Apple's own security frameworks (XProtect, XProtect Remediator, Gatekeeper, TCC) to identify coverage gaps and inform product direction Prototype and test new tools and methodologies for offensive operations against macOS endpoints, including EDR evasion and bypass research Build proof-of-concept implementations that demonstrate the feasibility of new capabilities Document research findings and collaborate with Detection Engineering on writing and tuning detectors Coordinate with Product and Engineering teams to integrate and operationalize solutions developed by Security teams Stand up ephemeral research environments and attacker infrastructure using cloud, VM, and container technologies Track Apple platform changes across beta and release cycles, and assess their impact on agent capability, telemetry, and detection coverage Identify and address gaps in macOS product coverage, including false positive and false negative investigations Develop internal and external technical documentation to educate customers and adjacent teams on macOS security risks and opportunities Mentor and teach across the team on macOS internals, malware analysis, and research methodology Promote Huntress' reputation through public speaking, CFPs, blogs, and media interaction What You Bring To The Team: Deep expertise in macOS system internals, including the security model, code signing and notarization, TCC, SIP, persistence, and the Mach-O file format Hands-on experience with Apple's Endpoint Security API and system extension development Authority on macOS security threats, attack techniques, and the current macOS malware landscape Familiarity with macOS fleet management (MDM, configuration profiles, mobileconfig deployment) Experience red teaming and performing attack emulation to bypass EDR on macOS Proficiency with Swift. Additional understanding of Go, Python, and/or Ruby is preferred. Experience with the MITRE ATT&CK matrix, Sigma, YARA, and Elasticsearch/Kibana Track record of building POCs and carrying research from concept through to a shipped product capability Experience leading data requirements work and tying it to cost/benefit analysis on collecting and storing only high-value telemetry Commitment to clear written documentation of research findings Comfortable reading Apple developer documentation, framework headers, and API references to answer undocumented questions An understanding of how SMBs utilize IT automation tools such as PSAs and RMMs is strongly preferred Bonus : Comfortable reverse engineering Mach-O binaries and scripted payloads using debuggers and a disassembler suite (Binary Ninja, IDA Pro, Hopper, or Ghidra) What We Offer: 100% remote work environment - since our founding in 2015 Generous paid time off policy, including vacation, sick time, and paid holidays 12 weeks of paid parental leave Highly competitive and comprehensive medical, dental, and vision benefits plans 401(k) with a 5% contribution regardless of employee contribution Life and Disability insurance plans Stock options for all full-time employees One-time $500 reimbursement for building/upgrading home office Annual allowance for education and professional development assistance $75 USD/month digital reimbursement Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: Remote - US West About the Job: We're looking for a senior security leader to run our Product Security team and partner to the Director of Security. In this role, you'll own how Security operates: a program led by risk rather than audit calendars, where engineering teams own their security health and Security informs, guides, and validates, where automation and AI take the first pass on every finding, and where posture is measured and published to executives every quarter. You'll build that model, starting with Product Security and extending across the division. You'll bring a balance of people management, security judgment, and program leadership as you manage a team of security engineers, act as incident manager of record, hold delegated approval for vendor and access decisions, and run the division when the Director is in an audit, a board cycle, or on vacation. You'll work closely with every engineering team to make the secure path the easy one. Responsibilities: Manage the portfolio of your team's work, appropriately managing everyone's time and assigning them to the highest priority work. Help your team and the engineering organization make sense of, and simplify, how security work gets done: who owns what, what is automated, and what Security stops doing. Guide product engineering teams in owning their own security health: findings route to them with mapped severity, Security reviews and validates rather than fixes, and each team sees its security health in its own service review. Own the wiring and routing of security findings and requests, driving down noise and the human-decision rate across intake, triage, and review. Serve as incident manager of record for security incidents: first escalation for our service-level commitments, delegated approver for vendor and access decisions, and cover for the Director's operational duties. Publish posture: monthly service-level attainment to engineering, quarterly posture to the executive team, and a risk register that drives priorities. About You: You have led a security team out of the gatekeeper model once already, and you can say what teams owned afterward, what Security stopped doing, and what the numbers did. You think in risk, not control lists, and you would rather defend a priority call than a checklist. You treat automation and AI as the first responder and yourself as the escalation path. You have been the second leader to a director or CISO and know which decisions to make in their name. You have run security incidents end to end, including the comms and the review afterward. You were a strong Senior or Staff security engineer before you managed, and you can still read a PR, a threat model, or a cloud finding and make a call. You track and drive metrics, and you understand what they can and can't tell you. Qualifications: 5+ years of experience in a formal security or engineering management role, including managing senior engineers. Experience moving a security function from gatekeeper to team ownership, with measurable results. Experience as incident manager for security incidents at a SaaS company, including external communication. Experience guiding teams through technical tradeoffs and developing senior engineers' careers. The ability to track and drive metrics, and the wisdom to understand what they can and can't tell you. Familiarity with AWS security at scale and with external audits (SOC 2, ISO 27001, or FedRAMP) as a participant or control owner. Excellent communication skills with both technical and non-technical stakeholders. A thoughtful, empathetic approach to leadership and collaboration. Pay: Target pay ranges based on Geographic Zones* for Level M3: Zone 1: San Francisco/Bay Area or NYC Metropolitan Area, Boston, Seattle - $240,600 - 330,700* Zone 2: Irvine, LA, Monterey, Santa Barbara, Santa Rosa, Austin, Portland, Philadelphia, Chicago - $216,500 - 297,600 ** Zone 3: All other US locations - $ 204,500 - 281,100 ** All Zones Inclusive of 15% Bonus Target LaunchDarkly operates from a place of high trust and transparency; we are happy to state the pay range for our open roles to best align with your needs. Exact compensation may vary based on skills, experience, and location. *Within the United States, our geographic pay zones are defined by counties surrounding major metropolitan areas. **Restricted Stock Units (RSUs), health, vision, and dental insurance, and mental health benefits in addition to salary. About LaunchDarkly: Modern software delivery was supposed to be the foundation for a thriving digital business but reality has proven otherwise. Slow, inefficient development cycles, costly outages, and fragmented customer experiences are preventing developers from building their best software. The LaunchDarkly platform helps developers innovate on new features faster while protecting them with a safety valve to instantly rewind when things go wrong. Developers can target product experiences to any customer segment and maximize the business impact of every feature. And by gradually rolling out new application components, they escape nightmare "big-bang" technology migrations. The LaunchDarkly platform was built to guide engineers to the next frontier of DevOps by: Improving the velocity and stability of software releases, without the fear of end customer outages Delivering targeted experiences by easily personalizing features to customer cohorts Maximizing the business impact of every feature through the ability to experiment and optimize Coordinating the release and optimization of software to provide consistent experiences across mobile platforms and device types Improving the effectiveness and productivity of engineering teams, by providing insights into engineering cadence and stability At LaunchDarkly, we believe in the power of teams. We're building a team that is humble, open, collaborative, respectful and kind. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, or disability status. LD invites any applicant to review our written Affirmative Action Plan. To do so, contact People Ops at hr@launchdarkly.com . Do you need a disability accommodation? Fill out this accommodations request form and someone from our People Operations team will contact you for assistance. Your safety matters to us. To protect yourself from potential scams, LaunchDarkly recruiters will only contact you from @LaunchDarkly .com email addresses or via LinkedIn from "Verified Recruiter" accounts. Be cautious of emails from other domains.  Legitimate LaunchDarkly recruiters will never ask for money, fees, or banking information before making a job offer. LaunchDarkly will never make a job offer without conducting a formal interview process. Our interview process does not involve asking detailed questions by email. If you are ever unsure about a communication that you receive, don't click any links—visit Careers | LaunchDarkly directly for confirmed job openings and links to apply. Please notify us of any fraudulent representation by sending an email to careers@launchdarkly.com .

Location: United States, San Mateo, CA Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Sony Interactive Entertainment Security Architecture | Cloud | AI Security | Enterprise Platforms We are seeking a Staff Security Architect to help shape and secure the next generation of enterprise, cloud, platform, and AI-enabled technology. This role combines deep security architecture expertise with strong engineering judgment and the ability to influence technical direction across complex, global environments. The successful candidate will partner with engineering, infrastructure, product, and security teams to identify systemic risk, develop scalable security patterns, and guide secure adoption of emerging technologies, including generative AI and agentic systems. Key Responsibilities Design, review, and approve security architecture for enterprise, cloud, SaaS, platform, and application environments, balancing business objectives, engineering constraints, and risk. Lead cloud security architecture across AWS, Google Cloud, and hybrid environments, including identity, network security, data protection, logging and monitoring, key management, workload isolation, security posture management, and the effective use of native and third-party cloud security controls. Define and review security architecture for SaaS and PaaS platforms, including identity federation, privileged access, tenant configuration, data protection, API and integration security, logging, third-party risk, and secure adoption of enterprise SaaS services. Drive security throughout the software delivery lifecycle, including source control, CI/CD pipelines, build systems, artifact repositories, infrastructure as code, secrets management, code and artifact signing, software provenance, deployment automation, and security controls for developer platforms. Lead security architecture for AI-enabled systems, including generative AI, large language models, retrieval-augmented generation, AI agents, model-serving platforms, and AI-assisted developer workflows. Design mitigations for risks such as prompt injection, insecure tool use, excessive agency, sensitive-data disclosure, model or supply-chain compromise, unsafe output handling, and abuse of AI services. Define security requirements for AI data, models, prompts, embeddings, vector stores, APIs, tools, and agent identities, including least-privilege access, secrets management, encryption, isolation, provenance, logging, monitoring, and lifecycle controls. Architect and improve identity, authentication, authorization, network security, key management, cryptography, application security, and production security controls across complex environments. Identify security design gaps in existing and proposed systems; translate findings into practical architecture improvements, reference patterns, hardening standards, preventative controls, and responsible automation that improves repeatability and operational effectiveness. Provide technical leadership across multi-disciplinary teams, clearly articulating risks, tradeoffs, and recommended solutions to engineering leaders, business stakeholders, and audiences without a security background. Required Qualifications 15+ years of relevant experience in security architecture, security engineering, product security, cloud security, infrastructure security, or related disciplines, with demonstrated leadership at senior or staff level. Deep knowledge of security architecture principles across cloud, application, network, identity, platform, infrastructure, and enterprise environments. Hands-on experience designing or securing cloud-based and containerized environments, including major cloud platforms such as AWS or Google Cloud. Strong understanding of modern identity and access management, PKI, OAuth/OIDC, SAML, TLS, VPNs, secrets management, key management systems, cloud KMS, and HSMs. Expertise in network and application security controls such as WAFs, NGFWs, segmentation, DMZ design, DDoS mitigation, load balancing, proxies, intrusion detection/prevention, and host-based controls. Experience with secure software development, threat modeling, CI/CD and developer platforms, application security, and engineering mitigations across the software lifecycle. Working knowledge of AI/ML security concepts and the ability to evaluate security risks in generative AI, LLM, and agentic system architectures, including data flows, trust boundaries, model access, and tool integrations. Strong critical thinking, risk prioritization, communication, and influence skills, with the ability to lead through ambiguity and work effectively across global, cross-functional teams. Bachelor's degree in Computer Science, Mathematics, Engineering, Information Security, or equivalent practical experience. Preferred Qualifications Experience securing AI/ML platforms, generative AI applications, model gateways, RAG architectures, vector databases, or agentic workflows in production environments. Experience with AI security evaluation, red teaming, adversarial testing, model abuse testing, or control validation for AI-enabled systems. Experience securing large-scale Linux, distributed, multi-tenant, or high-availability production environments. Development or automation experience in Python, C++, Java, or similar languages. Recognized technical leadership through patents, publications, open-source contributions, conference participation, teaching, or security community involvement. Penetration testing, adversarial security, or attacker-minded design experience. Master's degree or Ph.D. in Computer Science, Mathematics, Engineering, Information Security, or a related field. Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: Zürich, CH About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As Anthropic's models grow more capable, so does the interest of people who want to attack or misuse them. The Detection and Response (D&R) team spots those threats and responds to incidents across every layer of Anthropic's technology stack. The team is early-stage, so you'll help build our detection and response capabilities from the ground up and work closely with our security and research teams. Key responsibilities Lead incident response across a range of domains, from external attacks to insider threats, spanning all layers of Anthropic's technology stack Build and deploy tooling, including tools that use large language models, to improve how we detect and respond to threats Create and tune detections, playbooks, and workflows to catch and respond to incidents quickly Review incident response metrics and procedures, and drive improvements Work across security and engineering teams Take part in an on-call rotation Minimum qualifications Experience handling security incidents and investigating anomalies as part of a team Working knowledge of EDR, SIEM, SOAR, or similar security tooling A solid understanding of cloud environments and operations Experience working with engineering teams in a SaaS environment Proficiency with a scripting language such as Python and query languages such as SQL Strong communication and collaboration skills Able to lead projects with little guidance Able to pick up new languages and technologies quickly Preferred qualifications 7+ years of software engineering experience, or 7+ years of detection engineering, incident response, or threat hunting experience Security operations or investigations involving large-scale Kubernetes environments Experience analyzing attack behavior and prototyping high-quality detections Experience with threat intelligence, malware analysis, infrastructure as code, or forensics Experience contributing to a high-growth startup environment Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Разработка автоматизированных сценариев и инструментов, облегчающих тестирование и анализ эффективности антивируса. Ручной и автоматизированный поиск дефектов в разрабатываемом ПО, разработка PoC-эксплойтов.