Вакансии

О проекте Международный проект в области AI Security, связанный с разработкой сред, которые помогают LLM-моделям проходить обучение с подкреплением для задач, связанных с кибербезопасностью. Эти среды содержат задания в различных областях кибербезопасности (пентестинг, реагирование на инциденты, эксплуатация, вредоносное ПО и т.д.), цель — создавать достаточно сложные задачи, чтобы модель допускала ошибки, но которые остаются решаемыми для профессиональных специалистов. Важно: это не классическая позиция Pentester или Red Team Engineer. Основная задача — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки именно из-за недостатков в рассуждении (reasoning), а не из-за неоднозначных инструкций или ограничений среды. Задачи: — Проектировать security-сценарии для оценки и обучения LLM-моделей — Создавать environments с использованием GitHub, Slack и других инструментов, встречающихся в реальной разработке — Разрабатывать задачи, требующие сложного многошагового reasoning — Моделировать реальные offensive security-сценарии (supply chain attacks, malicious pull requests, exploitation через GitHub Actions и другие техники) — Проверять разработанные сценарии на нескольких frontier-моделях и анализировать причины их ошибок — Формулировать ожидаемое поведение модели и описывать, почему конкретная ошибка считается reasoning failure — Автоматизировать создание и проверку задач с использованием Python и других инструментов Требования: — 5+ лет практического опыта в Offensive Security, Application Security или Web Penetration Testing — Практический опыт AI Red Teaming / LLM Security — Глубокое понимание современных техник атак и поверхности атаки веб-приложений, API, GitHub, CI/CD и связанных экосистем — Практический опыт проведения penetration testing и исследования безопасности приложений — Опыт разработки на Python и/или JavaScript — Навыки статического и динамического анализа кода (Python, JavaScript, Java) — Умение самостоятельно исследовать новые направления, проектировать сложные сценарии и объяснять результаты своей работы — Свободный английский язык (Upper-Intermediate / B2+) — Практический опыт работы с современными LLM-моделями — Понимание особенностей их работы, ограничений и типичных failure modes — Интерес к AI Security и исследованию поведения LLM — Опыт работы с Agentic AI, AI Agents или Model Evaluation Будет большим плюсом: — Опыт исследований безопасности GitHub Actions, CI/CD, Supply Chain Security — Сертификаты OSWE, eWPTXv2, OWEE, OSWA или аналогичные — Публикации, write-ups, участие в Bug Bounty, HackTheBox, TryHackMe, Pwn2Own или других исследовательских проектах — Способность придумывать новые, не похожие на существующие сценарии атак, которые сломают сильную модель, исследовательское мышление и креативность Условия: — B2B-контракт (с ИП) — Оплата в долларах США — Part-time/Full-time: почасовая оплата за выполненные задачи, 1 задача занимает около 10-12 часов — Локация — строго вне РФ/РБ

Drive the strategy for the next wave of security products. - market analysis, customer discovery, competitive landscape, and a clear recommendation on what to do first, second, and not at all.

Location: San Francisco Bay Area, USA Workplace: Hybrid Why work at Higgsfield AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. About the role: Higgsfield AI is looking for a hands-on Member of Technical Staff, Product Security to identify and eliminate security vulnerabilities across our rapidly evolving AI products and platforms. As we build agentic systems, code-generating agents, generative AI models, and enterprise applications, you'll play a critical role in securing new features before they reach production. Working closely with Product and Engineering, you'll conduct offensive security testing, identify architectural weaknesses, and drive fixes to their root cause. You'll also turn recurring vulnerabilities into scalable security standards and automated controls. We're looking for someone with a proven track record of finding real vulnerabilities in production systems, strong technical judgment, and the ability to work directly with engineers to build more secure products. WHAT YOU'LL DO OFFENSIVE SECURITY & VULNERABILITY RESEARCH - Conduct hands-on penetration testing of new products and features, including web applications, APIs, and administrative interfaces. - Identify security risks across agentic systems, MCP servers, code-generating agents, and AI-powered applications. - Independently map attack surfaces and uncover authorization, authentication, and multi-tenant isolation vulnerabilities. - Develop proof-of-concept exploits, validate findings, and retest remediation efforts. SECURE DESIGN & APPLICATION SECURITY - Partner with Engineering early in product development to identify and prevent security flaws before release. - Conduct threat modeling, architecture reviews, and security-focused code reviews. - Analyze complex codebases to trace vulnerabilities to their root cause and recommend effective fixes. - Assess security risks across generative AI products, user-deployed applications, and enterprise features such as SSO and role-based access controls. SECURITY ENGINEERING & AUTOMATION - Translate recurring vulnerabilities into secure development standards, reusable controls, and automated security checks. - Build security tooling and integrate preventive controls into development and CI/CD workflows. - Identify systemic weaknesses and implement solutions that prevent entire classes of vulnerabilities. - Apply cloud, container, and infrastructure security knowledge to investigate vulnerabilities across the application stack. TECHNICAL OWNERSHIP & COLLABORATION - Own security findings from discovery through remediation, working directly with engineers to implement lasting fixes. - Prioritize vulnerabilities based on exploitability, business impact, and real-world risk. - Establish practical security standards that enable rapid product development without compromising security. - Help define security practices for emerging AI technologies and new product architectures. WHAT WE'RE LOOKING FOR - 5+ years of hands-on experience in product security, application security, penetration testing, or vulnerability research. - Proven track record of independently discovering and exploiting real vulnerabilities through application security work, bug bounty programs, or security research. - Deep understanding of web application and API security, including authentication, authorization, and multi-tenant isolation. - Strong ability to read and analyze modern codebases, identify root causes, and collaborate with engineers on remediation. - Experience conducting threat modeling, secure design reviews, and hands-on penetration testing. - Proficiency in scripting or programming languages such as Python, JavaScript, TypeScript, or Go. - Familiarity with cloud infrastructure, containers, and modern application architectures. - Ability to translate security findings into scalable engineering controls and automated checks. - Strong technical judgment, independent problem-solving skills, and a proactive approach to identifying security risks. Compensation & Benefits - We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth. - Base Salary: The anticipated salary range for this role is $200,000 - $300,000, depending on experience, skills, scope, and location. • Bonus: This role is Bonus eligible and may participate in the Company's discretionary annual bonus program. - Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth. - Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally, including medical, dental, and vision insurance, a competitive 401(k) retirement plan with company matching, and additional benefits and perks. - The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team. - Significant ownership, direct impact, and opportunities for professional growth as the company scales. This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams. Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.

Location: San Francisco Bay Area, USA Workplace: Hybrid Why work at Higgsfield AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. Role Overview Higgsfield AI is looking for a hands-on Member of Technical Staff, Enterprise Security to own security across our corporate systems, employee devices, identities, and SaaS applications. As we scale globally, you'll secure the systems our workforce relies on, from endpoint management and identity governance to threat detection and response. Working closely with IT, Infrastructure Security, and Engineering, you'll implement technical controls, automate security operations, and strengthen access governance. This is a hands-on engineering role requiring someone who personally builds, configures, and operates security systems. We're looking for someone with broad corporate security expertise, strong technical judgment, and the ability to prioritize meaningful risks in a fast-moving environment. WHAT YOU'LL DO ENDPOINT & DEVICE SECURITY - Own endpoint security across corporate devices using Microsoft Intune/MDM, including enrollment, compliance, and device lifecycle management. - Implement and operate EDR/XDR capabilities, including threat detection, investigation, and remediation. - Establish endpoint hardening standards and security baselines in partnership with IT and Engineering. IDENTITY & ACCESS SECURITY - Own corporate identity infrastructure across Microsoft Entra ID, including SSO/SAML, SCIM, MFA, Conditional Access, and RBAC. - Manage joiner, mover, and leaver (JML) workflows, ensuring secure provisioning and timely offboarding across SaaS applications. - Administer password management, privileged access, and credential security controls. - Conduct access reviews and implement least-privilege and Zero Trust principles. SAAS & CORPORATE APPLICATION SECURITY - Evaluate new SaaS applications, maintain approved application standards, and identify shadow IT. - Secure corporate collaboration tools, including email, Slack, and file-sharing platforms. - Review application configurations, permissions, and authentication controls. - Lead security awareness initiatives, including phishing simulations and employee training. DETECTION, RESPONSE & AUTOMATION - Monitor and investigate security alerts across identity, endpoints, and corporate applications. - Build detection capabilities for compromised accounts, suspicious activity, and endpoint threats. - Automate provisioning, access reviews, compliance checks, and security workflows using scripts and APIs. - Partner with Infrastructure Security to integrate endpoint and identity signals into centralized monitoring. - Lead incident investigation, containment, and remediation. TECHNICAL OWNERSHIP & LEADERSHIP - Identify and prioritize enterprise security risks based on business impact. - Lead security initiatives from technical design through implementation and ongoing operations. - Establish scalable security standards and practical engineering controls. - Partner cross-functionally to strengthen security without slowing business operations. WHAT WE'RE LOOKING FOR - 4+ years of hands-on experience in enterprise security, corporate IT security, or security engineering, ideally in a high-growth technology environment. - Proven experience personally implementing, configuring, and operating corporate security systems. - Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management. - Hands-on experience with Microsoft Intune/MDM, endpoint compliance, and EDR/XDR. - Experience securing SaaS applications, corporate collaboration tools, and privileged access. - Proficiency in scripting and automation using Python, PowerShell, Bash, or similar languages. - Experience with security monitoring, incident investigation, and remediation. - Strong understanding of Zero Trust, least-privilege access, and corporate security practices. - Sound technical judgment, independent problem-solving skills, and broad expertise across corporate security domains. Compensation & Benefits - We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth. - Base Salary: The anticipated salary range for this role is $200,000 - $300,000 depending on experience, skills, scope, and location. • Bonus: This role is Bonus eligible and may participate in the Company's discretionary annual bonus program. - Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth. - Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally, including medical, dental, and vision insurance, a competitive 401(k) retirement plan with company matching, and additional benefits and perks. - The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team. - Significant ownership, direct impact, and opportunities for professional growth as the company scales. This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams. Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.

Задачи: — Проверять входящие отчёты об уязвимостях в bug bounty-программах клиентов; — Оценивать достоверность и критичность находок, общаться с клиентами и исследователями; — Эскалировать критические инциденты и улучшать инструменты триажа. Требования: — Степень бакалавра или опыт консалтинга по безопасности; — Знание OWASP Top 10 и языка программирования или скриптинга; — Уверенная работа с Burp Suite и практический опыт с nmap, sqlmap или Kali Linux; — Работа удалённо из Индии по контракту на пять месяцев.

В объединённой компании Wildberries и Russ нужно развивать безопасность Kubernetes: внедрять политики и runtime-защиту, настраивать NetworkPolicies, управлять секретами. В задачи также входят анализ событий, архитектурные ревью и моделирование угроз, автоматизация через GitOps/CI.

Anthropic is looking for an Applied AI Architect Security Specialist to advise enterprise customers and deploy Claude-powered security workloads.

MetaMask is looking for a Senior Manager Application Security to lead application security strategy, secure development, vulnerability management, and a senior security team.

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. Threat Operations is part of 1Password’s Security organization, bringing together Cyber Threat Intelligence, Detection Engineering, and Security Incident Response. Together we study how threat actors operate, turn that into high-quality detections, and respond quickly when something goes wrong. Interns work across all three teams, with time and focus shaped by your interests and our needs, so you see how intelligence becomes real defense. We care about turning intelligence into action, and we value blameless learning and psychological safety. This is a remote opportunity within Canada/US. This position will be for 4 months - January to April 2027. What You Can Expect: - Analyze incoming threat intelligence, assess its credibility and relevance to 1Password, and run IOC sweeps across our environment. - Own pieces of work across the threat management lifecycle, turning intel into recommendations for detection, incident response, and vulnerability management. - Join the alert triage rotation and learn how signal quality, enrichment, and response fit together. - Develop and test detection rules and response agents, and contribute to our detection-as-code and response-as-code platforms. - Build orchestration workflows to automate triage, enrichment, and response, using AI tools to help design and build them. What we're looking for: - Confidence: A willingness to take on new challenges, and see them through to completion. - Humility: You're not afraid to ask "stupid" questions and make mistakes (as long as you learn from them). - Curiosity: You look for better ways of doing things, even if everyone seems happy with how they are. - Teamwork: We work together, and succeed as a team! Bonus points for: - Familiarity with Git and managing infrastructure or detections as code, including Terraform. - Scripting or programming experience, such as Python or Go, and comfort working with APIs. - Exposure to SIEM and SOAR tools, logs, or writing detection rules and queries, through coursework, labs, or projects. - Experience using AI tools to build or automate workflows, with a healthy skepticism about their output. - Familiarity with frameworks like MITRE ATT&CK, plus security coursework, CTFs, home labs, or a security club. Our culture  At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.  You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.  We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged at 1Password—it's an essential part of how we will be successful at 1Password. Our approach to remote work  We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of most roles. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.  How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:  🏝 Generous PTO policy - 2.08 days per month (1.5 work weeks per 4 month term) 💖 Company-wide wellness days (1 per quarter)  🌎 Employee-led inclusion and belonging programs and ERGs 🏠 Remote-first environment 🏆 Peer-to-peer recognition through Bonusly 💡 1Password University access and learning sessions 🥳 Monthly internship events and socials 1Password is part of  Team True North https://www.communitech.ca/how-we-help/team-true-north/ , a comprehensive group of Canadian tech firms with performance and growth rates that match the top 1% of companies worldwide – companies with the highest probability of reaching $1 billion in annual revenue. We believe in tech for good, and establishing Canada as a preferred destination for growing careers wherever we can! You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. As part of the Data Security Team, you will be partially responsible for the underlying cryptography across our products. You’ll help build cryptographic libraries and implement the latest algorithms directly into our client applications with security, performance and usability in mind. You’ll develop proof-of-concepts and implement new industry specifications into code. You’ll also conduct code and design reviews to ensure good cryptographic hygiene and standards across our codebase. This is a remote opportunity within Canada/US. This position will be for 4 months - January to April 2027. What you can expect: - You have a passion for using modern cryptographic algorithms and want to learn how to apply them in real world situations. - You work well in a team environment with positive communications amongst a variety of technical and non-technical stakeholders - Comfortable to work within a small team of security developers who are specialists in Rust and Golang Security - Develop cryptographic or other security libraries to share common security-critical code across our applications What we're looking for: - Confidence: A willingness to take on new challenges, and see them through to completion. - Humility: You're not afraid to ask "stupid" questions and make mistakes (as long as you learn from them). - Curiosity: You look for better ways of doing things, even if everyone seems happy with how they are. - Teamwork: We work together, and succeed as a team! Bonus points for: - Experience working with standards bodies (e.g. FIDO, W3C, ISO, NIST, OIDF) - Experience with emerging industry standards and technologies (e.g. Passkeys and/or Post Quantum Algorithms) - Experience with Rust and/or Golang, or a demonstrated ability to pick up new languages quickly. Our culture  At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. The way we bring those values to life every day is guided by our 1Password Behaviors for Success https://1password.com/blog/how-to-interview-with-confidence-at-1password.   You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. Our approach to remote work  We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of most roles. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.  How we’re using AI today We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password.   This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:  🏝 Generous PTO policy - 2.08 days per month (1.5 work weeks per 4 month term) 💖 Company-wide wellness days (1 per quarter)  🌎 Employee-led inclusion and belonging programs and ERGs 🏠 Remote-first environment 🏆 Peer-to-peer recognition through Bonusly 💡 1Password University access and learning sessions 🥳 Monthly internship events and socials 1Password is part of  Team True North https://www.communitech.ca/how-we-help/team-true-north/ , a comprehensive group of Canadian tech firms with performance and growth rates that match the top 1% of companies worldwide – companies with the highest probability of reaching $1 billion in annual revenue. We believe in tech for good, and establishing Canada as a preferred destination for growing careers wherever we can! You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Задачи: — Технически руководить Blue Team и развивать защиту данных, поиск угроз и реагирование на инциденты; — Управлять программами оценки уязвимостей и безопасности облачной инфраструктуры; — Автоматизировать защитные процессы и помогать продуктовым командам снижать риски; — Удалённая работа только из Северной Ирландии, участие в круглосуточной on-call ротации. Требования: — От 5 лет в Security Engineering, Security Operations или Security Architecture; — Опыт технического лидерства распределённых команд и соблюдения PCI-DSS; — Опыт расследования инцидентов, реагирования на атаки и устранения их последствий; — Знание ОС, сетей и приложений, укрепления Windows, macOS, Linux, контейнеров и Kubernetes.

Задачи: — исследование устройств различного назначения, бинарного кода (без исходного кода), программного обеспечения и внутреннего программного обеспечения (ВПО); — исследование внутреннего ПО устройств на наличие уязвимостей и недокументированных возможностей; — анализ защищенности программного обеспечения устройств; — разработка PoC по результатам проведенного анализа; — модификация внутреннего ПО для устранения ошибок. Требования: — опыт работы в качестве Team lead/Ведущий Reverse engineer от 2 лет; — навыки управления командой, умение грамотно распределять задачи и нагрузку; — понимание принципов обратного проектирования (исследования) программного обеспечения; — владение инструментами обратной разработки (IDA Pro, Radare2 или др.); — языки программирования: Python, C/С++, Assembler; — понимание архитектуры ОС; — опыт использования ОС Linux; — знание английского языка на уровне чтения технической документации. Плюсом будет: — знакомство с аппаратной архитектурой и схемотехникой различных устройств; — опыт исследования программного обеспечения на безопасность, поиска уязвимостей; — опыт разработки низкоуровневого кода для x86, MIPS, ARM, RISC-V; — опыт автоматизации исследования при помощи мультиагентной среды (MML). Условия: — официальное трудоустройство в аккредитованной IT-компании и возможность пользоваться соответствующими льготами; — гибкое начало рабочего дня, гибридный график (офис + удаленка), полностью удаленный формат невозможен; — офис в пешей доступности от метро Электрозаводская, Семеновская; — полис ДМС с расширением ВЗР (страхование выезжающих за рубеж); — премирование за высокие производственные показатели и результаты труда по итогам успешной работы Общества за год; — предложение по заработной плате и условиям труда формируется по результатам собеседования, в зависимости от опыта и знаний.

Sardine is looking for a Senior Application Security Engineer to automate vulnerability management, eliminate security bug classes, and secure applications and APIs.

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. Product Marketing and Enablement connects 1Password’s product strategy to the customer conversations that drive growth. In this Senior Staff individual contributor role, you’ll own the product-to-field motion for Enterprise Password Manager (EPM), Agentic Access—including Developer Tools—and Privileged Access, helping Account Executives (AEs), Sales Engineers (SEs), and Customer Success Managers (CSMs) connect the needs of Information Technology (IT), security, and engineering teams to the right solutions. Through clear technical storytelling, credible sales guidance, and close partnership with Product and Sales, you’ll help 1Password advance its mission to unleash employee productivity without compromising security. Reporting to the Director, Product Marketing and Enablement, this role is remote across the United States and Canada. How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: • Experience bringing complex technical Business-to-Business (B2B) products, new use cases, or emerging categories to market. • Experience working in a sales-led organization with enterprise sellers, Sales Engineers, technical buyers, and complex buying cycles. • Experience building a product motion across discovery, evaluation, technical validation, purchase, and expansion. • Experience partnering across Product, Engineering, Product Marketing, Sales, and GTM Enablement, with the ability to build credibility with technical and executive audiences. • Deep fluency in identity security, Privileged Access Management (PAM), secrets management, or agentic access, along with working knowledge of developer tools and the ability to translate technical product behavior into clear customer-facing guidance. • Strong written and verbal communication skills, strategic judgment, and the ability to influence senior stakeholders while making thoughtful decisions in ambiguous environments. • Experience launching a new product, category, or sales motion in identity security, access management, developer tools, or a related technical market; using field insights, win-loss feedback, or seller research to prioritize work; or holding security certifications or equivalent technical training. What you can expect: • Own the product enablement plan for Enterprise Password Manager, Agentic Access—including Developer Tools—and Privileged Access, prioritizing readiness work based on business impact, customer needs, launches, and field evidence. • Translate Product Marketing strategy into sales motions that help IT, security, and engineering buyers secure access for developers, artificial intelligence (AI) agents, and privileged users. • Create the pitch decks, talk tracks, qualification questions, discovery guides, product training, and other field assets needed to support customer conversations from discovery through expansion. • Define how the portfolio fits into annual sales plays, including the personas to engage at each stage of the buying journey and the role of strategic technology and AI partnerships. • Act as an escalation point for strategic opportunities, join live customer conversations, support discovery and demos, and coach sellers through complex technical questions and objections. • Partner with Technical Marketing and Demo Engineering to map demos to sales plays and provide the customer, use-case, and product context needed to build credible launch and sales demonstrations. • Measure field readiness, lead win-loss analysis, identify recurring objections and adoption barriers, and bring clear recommendations to Product, Product Marketing, Sales Enablement, and senior leadership. USA-based roles only: The annual base salary for this role is between $180,000 USD and $261,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $152,000 CAD and $220,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Crusoe is looking for a Staff Kernel Security Engineer to harden Linux kernel and operating-system components.

Команда безопасности ИИ ищет специалиста для whitebox-анализа LLM-приложений, AI-агентов, RAG и векторных БД. Нужно выявлять prompt injection и другие AI-угрозы, проверять защитные фильтры и контроль вызовов инструментов.

-Product Security Ownership: Partner with engineering teams to identify and address security risks across Phantom’s mobile applications, web products, APIs, and backend services. -5+ years of experience in product security, application security, security engineering, or software engineering, including experience operating at a senior or staff level.

Location: Global We are the creators of a new fintech era! Our mission is to change this world by making blockchain accessible to everyone in everyday life. WhiteBIT is a global team of over 1,200 professionals united by one mission — to shape the new world order in the Web3 era. Each of our employees is fully engaged in this transformative journey. We work on our blockchain platform, providing maximum transparency and security for more than 8 million users worldwide. Our breakthrough solutions, incredible speed of adaptation to market challenges, and technological superiority are the strengths that take us beyond ordinary companies. Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT and VISA. The future of Web3 starts with you: join us as an Application Security Engineer! Requirements 2+ years of experience in Application Security, Product Security, or a related security role. Strong knowledge of web application security, OWASP Top 10, common attack techniques, and secure coding practices. Hands-on experience with threat modeling, security architecture reviews, vulnerability assessment, and penetration testing. Ability to review source code and identify security vulnerabilities. Experience with SAST, DAST, SCA, secrets scanning, and vulnerability-management tools. Understanding of CI/CD pipelines and experience integrating security checks into the SDLC. Knowledge of API security, authentication, authorization, and common security protocols. Familiarity with cloud, container, or Kubernetes security. Basic knowledge of Web3 and smart contract security. Basic scripting or programming skills, preferably in Python or another relevant language. Ability to clearly communicate security risks and remediation guidance to technical and non-technical stakeholders. Responsibilities Perform application security assessments, source-code reviews, and penetration testing. Participate in threat modeling and security architecture reviews for new and existing products. Triage Bug Bounty submissions: validate and reproduce vulnerabilities, assess their severity and business impact, identify duplicates and false positives, communicate with researchers, and coordinate remediation with engineering teams. Identify, prioritize, and track vulnerabilities throughout the remediation process. Provide developers with clear remediation guidance and secure coding recommendations. Support the integration and operation of SAST, DAST, SCA, secrets scanning, and other security tools within CI/CD pipelines. Participate in defining and reviewing security requirements throughout the software development lifecycle. Validate security-tool findings and help reduce false positives. Support investigations and remediation of application-related security incidents. Contribute to application security standards, guidelines, and reusable security controls. Help deliver security training and promote secure development practices across engineering teams. Collaborate with developers, DevOps, QA, product teams, and other security specialists. Monitor emerging application security threats and contribute to improving AppSec processes. Ukrainian (Native) English (B1) Working terms Immerse yourself in Crypto & Web3: Master cutting-edge technologies and become an expert in the most innovative industry. Work with the Fintech of the Future: Develop your skills in digital finance and shape the global market. Take Your Professionalism to the Next Level: Gain unique experience and be part of global transformations. Drive Innovations: Influence the industry and contribute to groundbreaking solutions. Join a Strong Team: Collaborate with top experts worldwide and grow alongside the best. Work-Life Balance & Well-being: Modern equipment. Comfortable working conditions, and an inspiring environment to help you thrive. 24 calendar days of paid leave. Additional days off for national holidays. With us, you’ll dive into the world of unique blockchain technologies, reshape the crypto landscape, and become an innovator in your field. If you’re ready to take on challenges and join our dynamic team, apply now and start a new chapter in your career! Let’s Build the Future Together! WhiteBIT offers all candidates an equal opportunity to join the team. All hiring decisions are made without regard to race, national origin, gender identity or sexual orientation, age, religion, disability, medical condition, marital status, familial status, veteran status, or any other legally protected characteristic of an individual.