Location: Kuala Lumpur, Malaysia
About Us
Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.
Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.
Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.
Key Responsibilities
Cloud Security Architecture and Hardening
Design, implement, and continuously strengthen security architectures across public cloud environments, including AWS, Tencent Cloud, Huawei Cloud, and Alibaba Cloud. Areas of focus include container isolation, Identity and Access Management (IAM), VPC network segmentation, and security policies.
Security Operations and Incident Response
Build and continuously improve cloud security monitoring and operations capabilities, including Security Information and Event Management (SIEM) and Cloud Security Posture Management (CSPM). Detect, investigate, and respond to security incidents, conduct root cause analysis and post-incident reviews, and drive remediation through to closure.
Infrastructure Security and Vulnerability Management
Assess and harden cloud compute instances, containers, cloud services, and supporting infrastructure. Develop and enhance host and cloud vulnerability scanning capabilities, and track remediation to completion.
Identity and Access Management
Design and maintain cloud IAM and Cloud Access Management (CAM) permission frameworks. Establish lifecycle management policies for credentials, including access keys and secret keys (AK/SK), API keys, and access tokens. Enforce least-privilege access and conduct periodic access reviews.
Compliance and Risk Management
Conduct regular security baseline assessments and risk assessments across cloud environments. Produce security compliance reports against industry standards such as CIS Benchmarks, and support internal and external security audits, compliance reviews, and remediation activities.
Security Standards and Technical Enablement
Develop and maintain cloud security policies, technical standards, and best-practice documentation. Provide security guidance, technical support, and training to engineering and operations teams to strengthen the organization’s overall cloud security capabilities.
Qualifications
A solid foundation in Linux systems administration, with a strong understanding of networking protocols such as TCP/IP, DNS, and TLS, as well as common network security principles.
Familiarity with major public cloud platforms, including AWS, Tencent Cloud, and Alibaba Cloud, with hands-on experience in cloud resource management, security configuration, or operations.
An understanding of cloud-native technologies and their security models, with familiarity with Docker, Kubernetes, microservices, serverless architectures, and associated security practices.
Familiarity with public cloud IAM/CAM frameworks, with practical experience in permission model design, account governance, key management, or least-privilege implementation.
An understanding of common cloud security threats and attack paths, including lateral movement, privilege escalation, server-side request forgery (SSRF), and abuse of the Instance Metadata Service (IMDS).
Experience in vulnerability scanning, risk assessment, or security tool integration. Hands-on experience deploying, integrating, and operating Tenable, Orca, or comparable solutions is preferred.
Experience managing north–south and east–west traffic, reducing exposed network boundaries, or designing and implementing zero-trust network architectures is preferred.
Strong security risk awareness, analytical and problem-solving skills, and effective communication and collaboration abilities, with a demonstrated ability to drive cross-functional security initiatives and remediation efforts to completion.
Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.
Location: Hong Kong SAR
About Us
Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.
Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.
Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.
Responsibilities
Regulatory Support & MIC-IT Enablement:
Serve as the primary cybersecurity anchor for Spark. Work intimately with the ROs and MIC-IT to design, implement, and evidence the cybersecurity framework, ensuring senior management possesses full visibility and control over cyber risks as expected by the SFC.
Pre-Launch & Independent Assessments:
Take total ownership of preparing for, facilitating, and successfully passing the SFC-mandated pre-launch independent cybersecurity assessments. Remediate any findings swiftly and effectively prior to go-live.
Cybersecurity Framework & Operations:
Architect, deploy, and govern Spark’s comprehensive cybersecurity framework. Ensure strict alignment with ISO/IEC 27001, SFC guidelines, and industry best practices for network, application, and endpoint security.
Incident Readiness & Response:
Develop, test, and maintain robust Cyber Incident Response Plans (CIRP) and Disaster Recovery/Business Continuity Plans (DR/BCP). Lead tabletop exercises and ensure the organization is perpetually ready to detect, contain, and eradicate threats.
Ongoing Cyber Controls:
Establish a continuous monitoring environment. Oversee regular penetration testing, vulnerability scanning, threat intelligence gathering, and the implementation of Zero-Trust architecture across Spark’s infrastructure.
Leadership & Cross-Functional Collaboration
Strategic Alignment:
Report directly to the CTO while operating with the independence necessary to challenge technical architectures from a security and risk perspective.
Security
Culture:
Champion a security-first culture across the engineering, product, and operations teams at Spark. Develop and execute ongoing security awareness training for all employees.
Vendor Risk Management:
Oversee the security evaluation of third-party vendors, SaaS providers, and blockchain analytics platforms, ensuring external integrations do not compromise Spark’s internal security posture.
Local Presence & Communication:
Serve as the on-the-ground security leader in Hong Kong. Communicate complex security risks in clear, business-centric terms to the Board, C-suite, and regulators.
Communication:
Exceptional verbal and written communication skills in English (fluency in Mandarin is a strong plus given the Hong Kong location).
Educational & Professional Qualifications
Academic Background:
Holds a relevant university degree (Bachelor’s required, Master’s preferred) in Cybersecurity, Computer Science, Information Technology, or a related highly technical discipline.
Industry Certifications:
Must possesses active, industry-recognized professional cybersecurity certifications such as CISSP, CISM, CISA, or CRISC.
Specialized Credentials (Optional but Preferred):
Additional certifications in cloud security (e.g., CCSP), offensive security (e.g., OSCP), or blockchain/smart contract security demonstrate a strong advantage.
Extensive
Security
Tenure:
10+ years of dedicated experience in cybersecurity, risk management, or IT audit, with at least 3-5 years in a senior leadership or Head of InfoSec capacity within the financial services sector (TradFi, FinTech, or Digital Assets).
SFC
VASP
/VATP Expertise:
Demonstrates sufficient, highly relevant experience directly navigating Hong Kong SFC VASP / VATP (Type 1 & Type 7) license applications from a cybersecurity perspective.
Digital Asset
Security
:
Deep, hands-on operational experience with the unique threat vectors of the crypto industry. Proven expertise in securing Hot/Cold/Warm wallet infrastructures, Multi-Party Computation (MPC), Hardware Security Modules (HSMs), and node network security.
Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.
Location: Remote - Americas
Who We Are:
Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure
for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more.
Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts.
Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.
Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.
Our Team Members:
We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond!
We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.
Your Role:
We are seeking a Security Operations Engineer to own the daily operation and continuous improvement of Alpaca’s SIEM and SOAR capabilities. You will onboard security logs, develop and tune detections, keep alerts actionable, maintain operational dashboards, and automate repeatable response actions.
You will be hands-on and operationally minded. You will keep log onboarding, detection quality, and alert handling consistent, and you will turn security signals into action as the business grows.
This role reports to the Enterprise Security Architect and works closely with Security, IT, DevOps, and Engineering.
The Security Team is 100% distributed and remote.
Things You Get To Do:
The core responsibilities of the Security Operations Engineer are focused on detection, response automation, operational excellence, and cross-functional coordination.
SIEM Operations and Detection Engineering:
Log Onboarding:
Onboard new security log sources across cloud, identity, endpoint, SaaS, and application systems, including parsing, normalization, and data quality checks.
Detection Development:
Build, test, and tune detection rules based on threat intelligence, incident learnings, and emerging attack techniques, mapped to frameworks such as MITRE ATT&CK.
Alert Quality:
Tune, enrich, and manage the lifecycle of detections so alerts stay actionable.
Detection Coverage:
Maintain detections for critical systems and priority attack techniques.
Operational Dashboards:
Build and maintain dashboards for alert volume, ingest health, and response status.
Incident Response & Metrics:
Incident Support:
Support security incidents with evidence collection, detection queries, and containment actions, working with IT, Engineering, and external partners.
Runbooks:
Develop and improve alert-handling and incident response runbooks and escalation paths.
Operational Metrics:
Track and report security operations metrics, including mean time to detect (MTTD) and mean time to respond (MTTR).
On-Call:
Participate in the Security Operations on-call rotation after onboarding and cross-training.
SOAR and Response Automation:
Playbooks:
Design, build, and maintain SOAR playbooks that automate repeatable response actions, including enrichment, containment, ticketing, and notification.
Triage and Investigation:
Triage, investigate, and respond to security alerts across endpoints, identity, cloud, network, and application logs.
Threat Hunting:
Run hypothesis-driven hunts based on threat intelligence and incident learnings, and turn findings into new detections.
Who You Are (Must-Haves):
Excited about Alpaca’s mission and what we’re building
3+ years of experience in Security Operations or detection engineering roles
Hands-on experience operating and tuning a SIEM
Experience building SOAR playbooks or equivalent response automation
Working with Linux
Scripting or automation experience (Python, Bash) for security operations tasks
Experience onboarding and parsing log sources from cloud, identity, and SaaS platforms
Strong alert investigation skills across identity, endpoint, network, and cloud environments
Understanding of common attacker techniques and detection methodologies
Experience supporting security incidents, including evidence collection, detection queries, and containment
Willing to participate in an on-call rotation
Strong written and verbal communication skills, especially during incidents
Comfortable working cross-functionally and handling escalations calmly and decisively
Who You Might Be
(
Nice-to-Haves):
Experience securing financial, trading, or other highly regulated platforms
Familiarity with compliance frameworks such as SOC 2 or ISO 27001
Experience with detection-as-code, GitOps, and CI/CD pipelines
Knowledge of cloud security logging (AWS/GCP/Azure) and SaaS security telemetry
Familiarity with Kubernetes-hosted security tooling
Experience working with a managed SOC or MSSP
Security certifications (GCIA, GCIH, GCED, or similar)
Ability to balance security rigor with operational efficiency and business needs
How We Take Care of You:
Competitive Salary & Stock Options
Health Benefits
New Hire Home-Office Setup: One-time USD $500
Monthly Stipend: USD $150 per month via a Brex Card
Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.
Recruitment Privacy Policy
Location: Remote - Americas
Who We Are:
Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure
for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more.
Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts.
Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.
Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.
Our Team Members:
We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond!
We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.
Your Role:
We are seeking an IT Security Engineer to own the security standards and controls that protect Alpaca’s workforce identities, endpoints, and critical business systems. The scope includes identity and access management, single sign-on, privileged access, multi-factor authentication, endpoint security, secure network access, and email security.
You will maintain those standards, measure how the controls are working, and partner with IT, who run devices and day-to-day administration.
This role reports to the Enterprise Security Architect and works closely with IT, DevOps, Engineering, GRC, and the wider Security team.
The Security Team is 100% distributed and remote.
Things You Get To Do:
The core responsibilities of the IT Security Engineer are focused on identity security, endpoint security, email and domain protection, and measurable control enforcement.
Identity and Access Security:
IAM and SSO Standards:
Define and maintain security standards for SSO and conditional access across cloud, SaaS, and internal systems.
Multi-Factor Authentication:
Own multi-factor authentication standards, including phishing-resistant methods, and keep them enforced.
Privileged Access:
Maintain privileged-access standards, approval policies, and periodic access reviews with system owners.
Joiner, Mover, Leaver:
Partner with IT and People teams so access changes are timely, complete, and auditable.
Endpoint, Email, and Domain Security:
EDR Policy:
Own endpoint detection and response policy and tuning, with IT handling deployment.
Device Posture:
Maintain device-posture and secure network access requirements for access to business applications.
Control Measurement:
Measure identity and endpoint controls and follow up where they are not met.
Detection Partnership:
Work with Security Operations on identity, endpoint, and email detections and response playbooks.
Admin Access:
Maintain security baselines for administrator access to critical SaaS platforms and vendor accounts.
Vendor Security Events:
Assess the identity and account impact when a SaaS provider or vendor reports a security event.
Email Security:
Own email authentication standards and email security configuration.
Domain Protection:
Maintain security standards for company domains and for monitoring lookalike domains.
Phishing Response:
Triage reported phishing and coordinate takedowns.
Incident Response and Collaboration:
Incident Support:
Lead the identity, endpoint, and email aspects of security incidents, including account containment.
On-Call:
Participate in the Security Operations on-call rotation after onboarding and cross-training.
Enablement:
Give IT and employees clear guidance on security requirements, so controls are adopted without slowing the business.
Who You Are (Must-Haves):
Excited about Alpaca’s mission and what we’re building
3+ years of experience in IT security, identity security, or security engineering roles
Hands-on experience with an identity provider and SSO, including SAML and OIDC
Experience enforcing phishing-resistant MFA, such as FIDO2 or hardware security keys
Hands-on experience with an endpoint detection and response platform
Scripting or automation experience (Python, Bash, or PowerShell)
Experience with zero-trust network access or device-posture controls
Working knowledge of email authentication (SPF, DKIM, DMARC) and phishing response
Experience working closely with IT teams and translating security requirements into operational workflows
Experience investigating identity, endpoint, or email security alerts
Willing to participate in an on-call rotation
Strong written and verbal communication skills, especially during incidents
Comfortable working cross-functionally and handling escalations calmly and decisively
Who You Might Be
(
Nice-to-Haves):
Experience securing financial, trading, or other highly regulated platforms
Familiarity with compliance frameworks such as SOC 2 or ISO 27001
Experience with just-in-time privileged access tools
Experience securing administrator access to SaaS platforms
Experience with password managers and secrets management at company scale
Experience with MDM platforms for macOS and Windows
Experience with cloud IAM in AWS, GCP, or Azure
Ability to balance security rigor with operational efficiency and business needs
How We Take Care of You:
Competitive Salary & Stock Options
Health Benefits
New Hire Home-Office Setup: One-time USD $500
Monthly Stipend: USD $150 per month via a Brex Card
Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.
Recruitment Privacy Policy
Location: Remote - Americas
Who We Are:
Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure
for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more.
Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts.
Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.
Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.
Our Team Members:
We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond!
We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.
Your Role:
We are seeking an AI Security Engineer to own the technical security controls for how Alpaca uses AI. The scope includes identity for AI agents and automations, security requirements for AI tools and integrations, guardrails, and security logging. You will also assist in developing AI-powered security tooling.
You will keep those controls consistent as AI adoption grows, and you will work with the teams building with AI so security is part of the design.
This role reports to the Enterprise Security Architect and works closely with AI Enablement, Engineering, DevOps, GRC, and the wider Security team.
The Security Team is 100% distributed and remote.
Things You Get To Do:
The core responsibilities of the AI Security Engineer are focused on AI access controls, secure AI platforms, guardrails, visibility into AI usage, and AI-powered security tooling.
AI Identity and Access Controls:
Agent Identity:
Define how AI agents, bots, and automations authenticate, what they can access, and how their actions are attributed and audited.
Tool Access:
Own security requirements for AI tool integrations, including least-privilege access and credential handling.
AI Assistant Controls:
Define and enforce security settings for approved AI tools, including data handling and access policy.
Least Privilege:
Limit each agent and integration to the access it needs, and review that access when the integration changes.
Secure AI Platform, Tooling, and Response:
Security Requirements:
Define security requirements for internal AI applications, including identity, data handling, secrets, and review of new integrations.
Guardrails:
Design and implement guardrails for AI applications and agents.
Design Reviews:
Review new AI applications and integrations for security risks, and give builders clear, practical requirements.
Security Tooling:
Assist Security Operations in developing AI-powered tooling that supports detection, investigation, and response work.
Safe Use in Security:
Apply the same identity, data handling, and logging requirements to security team AI tools as to the rest of the company.
Telemetry Requirements:
Define the security logging AI systems must produce, and work with Security Operations on detection.
Approved Use:
Maintain visibility into AI tool usage and confirm it follows approved configurations.
Incident Support:
Lead the AI-specific aspects of security incidents, such as agent misuse or data exposure through AI tools.
On-Call:
Participate in the Security Operations on-call rotation after onboarding and cross-training.
Governance:
Standards:
Turn AI security standards into technical controls.
GRC Partnership:
Partner with GRC on AI governance and provide technical evidence for control design.
Who You Are (Must-Haves):
Excited about Alpaca’s mission and what we’re building
2+ years of experience in security engineering, application security, or cloud security roles
Hands-on experience securing LLM applications, AI agents, or AI developer tools
Understanding of AI-specific risks, such as prompt injection, data leakage, excessive agency, and insecure tool use (for example, the OWASP Top 10 for LLM Applications)
Experience with identity and access controls for services and non-human identities, including OAuth, service accounts, and secrets management
Programming experience in Python or another general-purpose language
Experience with CI/CD security checks and cloud-native deployments
Experience with security operations or incident response
Strong written and verbal communication skills, especially when explaining risk to non-security builders
Comfortable working cross-functionally and making pragmatic security decisions
Willing to participate in an on-call rotation
Experience building AI-assisted workflows for security operations
Experience building security telemetry for AI systems
Who You Might Be
(
Nice-to-Haves):
Experience securing financial, trading, or other highly regulated platforms
Experience securing enterprise AI coding tools and AI integrations
Experience with policy-as-code and Kubernetes
Familiarity with AI governance frameworks, such as the NIST AI Risk Management Framework or ISO 42001
Ability to balance security rigor with operational efficiency and business needs
How We Take Care of You:
Competitive Salary & Stock Options
Health Benefits
New Hire Home-Office Setup: One-time USD $500
Monthly Stipend: USD $150 per month via a Brex Card
Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.
Recruitment Privacy Policy
Responsibilities:
— Configure security monitoring systems
— Integrate the platform
— Guide customers through implementation
The role involves working with decentralized systems, web3 technologies, blockchain security, incident response, security training, and risk assessment. Python scripting and cybersecurity expertise are required.
Задачи:
— Обеспечивать информационную безопасность на всех этапах жизненного цикла проектов — от предпроектного анализа до внедрения и последующего контроля.
— Проводить экспертизу архитектуры решений на соответствие требованиям ИБ, участвовать в согласовании организационно-распорядительной, архитектурной и технической документации.
— Моделировать сценарии угроз, оценивать и пересматривать риски информационной безопасности.
— Анализировать планы и бэклог разработки, формировать требования к безопасности новых функций и консультировать команды по безопасному коду, архитектуре и требованиям ИБ.
— Проводить Code Review, анализировать результаты ручного и автоматизированного поиска уязвимостей, приоритизировать их устранение и контролировать исправления.
— Участвовать в расследовании инцидентов информационной безопасности.
Требования:
— Высшее образование в области информационной безопасности и опыт практического анализа защищённости и экспертизы архитектурной документации от 4 лет.
— Глубокие знания основ информационной безопасности: протоколов, средств защиты информации, PKI и принципов работы криптографических алгоритмов.
— Экспертиза в Application Security: выявление и устранение уязвимостей OWASP Top 10, OWASP Mobile Top 10, CWE Top 25, знание практик повышения защищённости веб-приложений.
— Опыт анализа архитектуры информационных систем и проектной документации, включая выявление уязвимостей в бизнес-логике, разработку и обоснование механизмов защиты.
— Понимание архитектуры современных веб-приложений, микросервисов, контейнеризации, CI/CD и процессов безопасной разработки (SSDLC).
— Навыки программирования и анализа исходного кода.
— Знание регуляторных требований в области ИБ, умение определять их применимость к разрабатываемому функционалу и преобразовывать в конкретные технические меры защиты.
— Владение методологией риск-ориентированного подхода: качественная оценка рисков и моделирование сценариев угроз.
— Экспертное владение Burp Suite: использование кастомных расширений, построение многоэтапных атак и комбинирование техник.
— Развитые коммуникативные навыки: взаимодействие с бизнесом, ИТ и проектными командами, урегулирование разногласий, поиск компромиссов, аргументированная защита решений, проведение обсуждений и презентаций, конструктивная обратная связь и поддержание продуктивного диалога.
Условия:
— Можно работать удаленно.
Location: Tel Aviv Office
Workplace: OnSite
Chainalysis is building the data, intelligence, and technology that enable organizations to investigate and prevent crypto-related crime. Our teams combine deep blockchain expertise with advanced technology to help make the digital asset ecosystem safer and more trusted.
This team is a small, highly technical group focused on exploring emerging threats and technologies, turning insights into practical solutions, and bringing new ideas from early concepts through production.
We are looking for a talented Researcher who is excited by new and emerging technologies and can help move the organization forward by developing new capabilities, from design and proof of concept through production.
The position is office-based in Tel Aviv.
In this job, you'll:
- Design, implement, and improve threat detection models and frameworks
- Be an expert on bleeding-edge web3 technologies
- Write excellent code and be an integral part of engineering efforts
- Solve sophisticated technical problems and "make hard things work"
- Work in a small, agile, fast-moving team that is best in class
We’re looking for candidates who have:
- Proven experience in research in highly technical environments / low level R&D
- Ability to excel in a dynamic environment with rapidly changing requirements
- Previous experience in software development or R&D style teams
Nice to have experience:
- Blockchain prior experience / interest
- Experience with Python, Go, or Rust
- Experience with classic data science / machine learning
- Experience with building agentic LLM-powered products
Technologies we use:
- Python
- Go
- Rust
- Agentic workflows
AI at Chainalysis
AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.
AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.
About Chainalysis
Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.
You belong here.
At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.
We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here https://go.chainalysis.com/rs/503-FAP-074/images/Interview%20Accommodations%20Request.pdf. We can’t wait to meet you.
Responsibilities:
— Review and assess all infrastructure, systems, cloud environments, and security tools.
— Manage and optimize FortiGate firewalls, VPNs, and network access policies.
— Administer endpoint defense using CrowdStrike Falcon and manage patching/monitoring via ManageEngine.
— Strengthen cloud identity (IAM), MFA, privileged access controls, and data protection.
— Investigate security alerts, handle incident response, and lead vulnerability remediation.
— Establish security baselines, write internal policies, and train staff on safe data practices.
Requirements:
— Strong professional background in IT, information, or infrastructure security.
— Hands-on expertise with FortiGate firewalls and CrowdStrike Falcon.
— Experience with ManageEngine or equivalent patching/endpoint tools.
— Strong background in cloud security, access control (MFA), Windows/Linux hardening, and vulnerability management.
— Ability to work independently as the first dedicated security officer.
Benefits:
— Remote work option available in Cyprus, Serbia, or fully remote.
Location: Chicago, Illinois
Fin
, now part of Salesforce, is on a mission to help businesses provide perfect customer experiences.
Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey, from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk, giving modern support teams one single system.
Together with Salesforce, the #1 AI CRM, where humans with agents drive customer success, we're building the future of customer experience. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword, it's a way of life. The world of work as we know it is changing, and we're looking for Trailblazers who are passionate about bettering business and the world through AI.
Ready to level up your career at the company leading workforce transformation in the agentic era? You're in the right place. Agentforce is the future of AI, and you are the future of Salesforce.
What's the opportunity?
Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission.
Fin's Security Engineering team is unlike most security teams. We own and operate critical security services, build customer-facing security features, and partner with engineering teams to make secure development the default. We're engineers first; designing, building, and operating systems that protect Fin and its customers. The team owns and operates tier-zero services including authentication, SAML/SSO, teammate activity logs, malicious URL scanning, and other critical trust and security capabilities.
The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how products are designed, developed, and delivered. As Fin continues to expand its capabilities and adoption, you'll help shape how security evolves alongside some of the most ambitious AI-powered products in customer service. We're taking an AI-first approach to security, exploring areas such as AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape.
What will I be doing?
Own and engineer tier-zero security capabilities that help customers securely deploy and manage Fin.
Design, build, and evolve customer-facing security features, including authentication, SAML/SSO, permissions systems, audit and activity logging, malicious URL scanning, and other enterprise security controls.
Partner with engineering teams throughout the software development lifecycle to build secure products and services.
Perform architecture reviews, threat modelling exercises, and security assessments for new features and systems.
Build security tooling, automation, and developer-facing building blocks that make secure development easier and more scalable.
Contribute to secure development standards, guidance, and best practices across Fin.
Lead application security initiatives across the software development lifecycle, helping teams identify and address security risks early.
Participate in a shared on-call rotation and lead security incident response, investigation, and remediation efforts.
Drive security initiatives from problem definition through design, implementation, and measurable outcomes.
Partner with teams building AI-powered products to assess and mitigate emerging security risks.
Help shape Fin's AI-first approach to security, including AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities.
Support the secure adoption of AI-assisted software development tools and engineering workflows.
What skills do I need?
Proven application security, product security, or security engineering experience within a SaaS environment.
Strong software engineering skills with experience designing, building, and operating production systems.
Deep understanding of modern application security threats, secure software development practices, and threat modelling.
Experience designing, building, or securing authentication, authorization, identity, or enterprise security capabilities.
Experience conducting architecture reviews and security assessments for complex systems.
Hands-on security incident response experience, including leading investigations and remediation efforts.
Strong programming skills and experience building tools, automation, or developer-focused solutions.
Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness.
Ability to communicate security concepts clearly and collaborate effectively with engineering teams.
A pragmatic approach to balancing security, customer impact, and engineering velocity.
Bonus skills & attributes
Experience building or owning authentication, SAML/SSO, identity, or access management capabilities.
Experience securing AI-powered products or familiarity with security considerations for large language models, agentic systems, retrieval-based architectures, or AI tool integrations.
Experience building security automation or security-focused platform capabilities at scale.
Familiarity with cloud security, infrastructure security, or distributed systems.
Experience working across both large-scale SaaS environments and high-growth companies.
*Proof of eligibility to work in the United States is required.
The base salary range for candidates within the Greater Chicago Area is [$190,000 - $210,000]. Actual base pay will depend on a variety of factors such as education, skills, experience, location, etc. The base pay range is subject to change and may be modified in the future. All regular employees may also be eligible for the corporate bonus program or a sales incentive (target included in OTE) as well as stock in the form of Restricted Stock Units (RSUs).
#LI-Hybrid
Unleash Your Potential
When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. At Fin, we want to give people what they need to do the best work of their careers. Our benefits and programs are designed to support your health and wellbeing, your family, your time away from work, and your financial future. Offerings vary by location in line with local practices and requirements. Learn more about working at Fin and the benefits we offer at
fin.ai/careers
. Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.
Policies
Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week.
We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our
core values
.
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination.
Know your rights: workplace discrimination is illegal.
Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
Location: Remote, Israel; Remote, Poland; Remote, United Kingdom
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Threat Research Engineer, you’ll take ideas from the first question to a working proof of concept, deploy it, and analyze the results yourself. This is a full-stack role, with AI central to how we work. You’ll build agentic workflows for research, analysis, and detection, and use AI tools every day to move faster.
What you’ll do
Research new attack surfaces and threat vectors, including AI coding agents, agent plugins, and package ecosystems.
Find and responsibly disclose vulnerabilities in open source projects and developer tools.
Analyze software supply chain incidents and events.
Build AI-powered workflows and agents that automate research, analysis, and detection.
Build and maintain the cloud-based systems behind our detection and advisory work.
Improve the quality and coverage of our vulnerability and malware advisories.
Write up your findings as blog posts and present them at conferences.
Take part in on-call or operational support where your team's ownership model requires it.
What you’ll bring
Hands-on security experience in research, malware analysis, penetration testing, or security tooling, with both a developer mindset and an adversarial mindset: you can build systems and think about how to break them.
Demonstrated experience using AI in real work, such as building with large language model APIs or agent frameworks like LangChain, LangGraph, or agent SDKs.
Strong programming skills in Go or Python, with good software engineering practices including testing, code review, continuous integration and continuous delivery, and maintainable code.
Experience deploying and running production services on a public cloud.
Understanding of how package ecosystems work and how software supply chain attacks happen.
Ability to map possible attack vectors, name trade-offs, and make data-driven decisions, balancing quality and speed with customer outcomes in mind while keeping up with security and AI industry trends.
Clear writing that explains findings to both engineers and a general audience.
Helpful, but not required: published vulnerability findings; security research on AI agents, large language model applications, or Model Context Protocol (MCP) servers; Google Cloud Platform experience; or infrastructure as code experience with Terraform or OpenTofu.
You don’t need deep knowledge of compilers or static application security testing engines. A high-level understanding is enough.
About the team
The
Threat Research group
researches security threats as they emerge and turns what we learn into protection for GitLab customers. We maintain the GitLab Advisory Database, which powers GitLab’s dependency scanning. We also build detection capabilities, do original vulnerability research, and publish what we find. Recent work includes the Shai-Hulud npm worm and a critical remote code execution vulnerability in Serena, a popular MCP coding agent. You can read more on the
Security Labs blog
.
The base salary range for this role’s listed level is currently for residents of the EU, applicable in the specified country or countries only. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location and having regard to any applicable collective agreements. The base salary range does not include bonuses, equity, or benefits.
Poland base salary range: 272,000 - 408,000 PLN
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Responsibilities:
— Enhance security governance, risk management, and compliance across enterprise systems and IT infrastructure.
Requirements:
— Bachelor's degree in Cybersecurity or related field.
— Professional experience in Information Security GRC.
— Familiarity with GRC and risk management tools.
— Knowledge of ISO 27001, SOC 2, NIST frameworks.
— Experience with security risk assessments and compliance monitoring.
— Strong analytical and communication skills.
— Fluency in English and Russian.
Benefits:
— Assistance with relocation.
Location: Kazakhstan; Serbia; Poland; Georgia
Workplace: Remote
🌍 Remote | UTC+8 | Core collaboration hours: 12:00–6:00 PM Manila Time
Salmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines.
We combine global fintech expertise with deep local market knowledge to make financial services simple, accessible, and useful for millions of people across the region.
7M+ app downloads. 2M+ monthly active users. 7,000+ partner stores. US$310M+ raised from leading global investors.
Manila-based, globally distributed, and hybrid-first — our team spans 45+ countries.
If you want to solve complex problems at scale and impact how millions of people access and manage money, come build with us.
Southeast Asia's fintech moment starts here.
ABOUT THE ROLE
You'll help run and improve practical security controls across Salmon, a regulated group spanning banking, consumer finance, and a shared technology platform, and drive recurring risks to resolution.
WHAT YOU'LL DO
- Work across Microsoft Defender, Intune, Entra ID, Microsoft 365 and Sentinel to find security issues, judge how much they matter, and get them fixed.
- Work daily with the Manager, Security Operations and with IT and engineering teams, moving issues from identification to remediation.
- Take cases from the Security Service Desk, find the underlying cause, and fix recurring problems instead of closing tickets one by one.
WHAT YOU'LL OWN
- Own the operational side of vulnerability management: review findings, prioritise by risk, track remediation, and escalate material or overdue issues.
- Own security update, patch compliance, and device configuration follow-up for corporate laptops.
- Own day-to-day DLP and access controls: alert review, investigations, suspicious sign-ins, privileged access monitoring, SSO coverage, and periodic access reviews.
- Run the security awareness platform and LMS: training campaigns, completion tracking, reporting, and phishing simulations.
- Investigate and resolve security Service Desk cases covering endpoints, access, policy exceptions, and suspicious activity.
- Improve recurring Security Operations work through better processes, KQL queries, playbooks, documentation, and lightweight automation, including Sentinel detections where useful.
WHAT MAKES YOU A STRONG FIT
- Hands-on experience with Microsoft Defender XDR / Defender for Endpoint, Intune, Entra ID, and Microsoft 365 security and audit telemetry
- Working knowledge of Microsoft Sentinel and KQL for investigation and correlation
- Experience running vulnerability management and patch compliance, including follow-up with system owners
- Experience with DLP and access controls
- Ability to understand the risk behind operational issues, set sensible priorities, and work independently
- Track record of following problems through to resolution and documenting findings so others can act on them
WHAT WE OFFER
OWNERSHIP AND FLEXIBILITY
- Fully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8)
- Company-provided tools and equipment
HEALTH AND TIME OFF
- Medical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits
- Access to an internal mental health support specialist
- 22 vacation days, Philippine public holidays, and 15 sick days
GROWTH AND TEAM EXPERIENCE
- Opportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications
- Company-sponsored trips to Manila to meet and work with your team in person
- High-performing teams can earn a dedicated beach house week in Southeast Asia
We believe strong teams are built by people with different backgrounds, experiences, and points of view. Salmon is an equal opportunity employer, and we make hiring decisions based on skills, experience, and potential.
Rebellions are looking for a Security Platform Engineer to design and develop software that integrates security data and automates monitoring vulnerability management inspections and reporting.
Location: Almaty, Kazakhstan; Astana, Kazakhstan; Dnipro, Ukraine; Kharkiv, Ukraine; Kyiv, Ukraine; Lviv, Ukraine; Odesa, Ukraine; Remote.KZ, Kazakhstan
We are looking for a motivated Information Security Specialist Intern to support the InfoSec team with vulnerability management, risk assessments, compliance tasks, and security assurance activities while building practical cybersecurity experience.
This project gives you hands on exposure to core cybersecurity practices in a professional InfoSec team. You will contribute to vulnerability management, compliance support, and risk assessment activities while learning from experienced security specialists.
Support vulnerability management activities by reviewing scan results and tracking remediation
Follow up with system owners on remediation progress
Help prepare responses to client and vendor security questionnaires
Assist with risk assessments of tools vendors and internal processes
Help maintain security documentation including policies guidelines checklists and audit evidence
Support compliance activities such as SOC 2 by collecting and organizing audit evidence
Monitor security advisories and CVEs and help assess their relevance to the environment
Understanding of cybersecurity concepts including the CIA triad vulnerabilities threats risk and access control
Familiarity with networking operating systems and web application basics
Interest in security frameworks and standards including ISO 27001 SOC 2 NIST and OWASP
Good written and spoken English
Hands on experience with vulnerability scanners including Nessus OpenVAS or Qualys
Knowledge of CVSS and vulnerability prioritization
Basic scripting skills in Python PowerShell or Bash
Cloud basics in AWS Azure or GCP
Security certifications or courses such as Security+ CEH or similar
Location: Remote - US
About the Job:
LaunchDarkly's Governance, Risk, and Compliance team is hiring a Security Analyst III to facilitate the definition, implementation, and operation of security and privacy programs at LaunchDarkly.
LaunchDarkly is critical infrastructure. Our security team keeps it safe for the global systems that depend on us and the
GRC
team demonstrates that to earn the trust of our customers. As a member of the team, you'll drive initiatives to assess and reduce security risks to the company, advise stakeholders, and maintain compliance with the frameworks that we adhere to including ISO 27001, SOC 2 Type II, and FedRAMP.
You'll report to the Director of Security and partner closely with stakeholders in Legal, Revenue, and other members of our security team. We expect you to bring a sharp point of view on where AI can take work off the team's plate and make our coverage deeper.
Responsibilities:
Collaborate with stakeholders to design and operate security controls that comprise the LaunchDarkly
GRC
program
Use technology to automate compliance activities like gathering evidence and verifying controls
Operationalize the health and maturity of the program by tracking metrics based on quantitative and qualitative data
Drive progress towards results for
GRC
-related continuous improvement projects
Contribute to documentation for security standards, policies, and processes
Support audits and assessments with internal and external stakeholders
Work with product and infrastructure delivery teams on engineering projects related to
GRC
requirements
Qualifications:
Deep cybersecurity, privacy, and risk management knowledge and skill
Excellent communication skills - written and verbal
Experience working on collaborative projects
Depth with modern cloud-based SaaS organizations - specifically AWS control environments
Information security experience at an organization with significant compliance requirements
Strong familiarity with security standards (SOC 2, ISO 27001, ISO 27701, FedRAMP) as well as privacy laws (
CCPA
and
GDPR
)
Familiarity with LaunchDarkly’s collaboration tools like Confluence, Slack, and Github
Nice to Have:
Considerable knowledge of software development and architecture
CCSP,
PCI
QSA
,
CISSP
, or
CISA
/
CISM
certifications
Qualifications:
You're proactive by default. You'd rather spot compliance drift early and fix the cause rather than chase symptoms during an audit.
You believe good governance is a craft of habits and systems. Small consistent improvements beat heroic one-offs.
You invest in relationships with the teams you work with.
You know good governance and compliance relies heavily on trust and communication.
You're a good partner. You're helpful and direct, you say no with reasons and alternatives, and you don't mistake gatekeeping for rigor.
You're engineering-curious by nature. You want to understand how the systems work and how to adapt for compliance frameworks.
You treat AI as part of the toolkit. You're skeptical where you should be, aggressive where it pays off, and you want to work somewhere that's serious about both.
Pay:
Target pay ranges based on Geographic Zones* for Level 4:
Zone 1: San Francisco/Bay Area or NYC Metropolitan Area: $152,900 - $210,210**
Zone 2: Boston, DC, Irvine, LA, Monterey, Santa Barbara, Santa Rosa, Seattle: $137,600 - $189,200**
Zone 3: All other US locations: $129,900 - $178,640**
LaunchDarkly operates from a place of high trust and transparency; we are happy to state the pay range for our open roles to best align with your needs. Exact compensation may vary based on skills, experience, and location.
*Within the United States, our geographic pay zones are defined by counties surrounding major metropolitan areas.
**Restricted Stock Units (RSUs), health, vision, and dental insurance, and mental health benefits in addition to salary.
About LaunchDarkly:
Modern software delivery was supposed to be the foundation for a thriving digital business but reality has proven otherwise. Slow, inefficient development cycles, costly outages, and fragmented customer experiences are preventing developers from building their best software. The LaunchDarkly platform helps developers innovate on new features faster while protecting them with a safety valve to instantly rewind when things go wrong. Developers can target product experiences to any customer segment and maximize the business impact of every feature. And by gradually rolling out new application components, they escape nightmare "big-bang" technology migrations.
The LaunchDarkly platform was built to guide engineers to the next frontier of DevOps by:
Improving the velocity and stability of software releases, without the fear of end customer outages
Delivering targeted experiences by easily personalizing features to customer cohorts
Maximizing the business impact of every feature through the ability to experiment and optimize
Coordinating the release and optimization of software to provide consistent experiences across mobile platforms and device types
Improving the effectiveness and productivity of engineering teams, by providing insights into engineering cadence and stability
At LaunchDarkly, we believe in the power of teams. We're building a team that is humble, open, collaborative, respectful and kind. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, or disability status. LD invites any applicant to review our written Affirmative Action Plan. To do so, contact People Ops at
hr@launchdarkly.com
.
Do you need a disability accommodation?
Fill out this
accommodations request form
and someone from our People Operations team will contact you for assistance.
Hong Kong SAR
УдалённоГеография найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Автоотклики