Вакансии

Location: São Paulo Workplace: onsite KAST is seeking an experienced, Brazil-based IT & Security Officer to serve as our statutory officer responsible for cybersecurity governance. In this role, you will hold formal regulatory accountability before the Central Bank of Brazil (BCB), ensuring our technology, cloud, and security frameworks fully comply with local mandates (including Resolutions BCB 85/2021 and 520/2025). You will bridge high-level IT governance, risk management, and regulatory compliance while maintaining sufficient technical depth to challenge specialists, engineers, and third-party vendors. Key Responsibilities Statutory & Regulatory Ownership: Serve as the nominated statutory officer responsible for cybersecurity policy, cyber risk management, and formal reporting to the Central Bank of Brazil (BCB). Policy Governance & Compliance: Design, implement, and enforce information security and IT governance policies aligned with BCB Resolutions 85/2021, 520/2025, and relevant local data privacy frameworks (LGPD). Incident Escalation & Response: Oversee cyber-incident detection, response protocols, crisis communication, and regulatory disclosure workflows, ensuring rapid containment and post-incident remediation. Third-Party & Cloud Risk Management: Evaluate and monitor security and compliance controls for key technology partners, critical SaaS vendors, and cloud infrastructure providers. Cyber Risk & Board Reporting: Monitor internal risk indicators, conduct regular vulnerability/threat posture assessments, and deliver actionable reporting to the executive committee and board. Security Culture & Awareness: Direct company-wide security training programs and phishing simulations to embed a robust risk-awareness culture across all Brazilian operations. Audit & Regulatory Examination Support: Lead responses to internal, external, and regulatory IT audits, acting as the primary interlocutor for technology examinations. Requirements & Qualifications Security & Governance Experience: 3+ years in a dedicated information security, GRC (Governance, Risk & Compliance), or security leadership role managing frameworks and policies. Foundational Technical Background: 3-5+ years of hands-on technical experience (e.g., systems administrator, network engineer, software engineer, DevOps, or IT support analyst). Regulatory Acumen: Deep knowledge of Central Bank of Brazil (BCB) technology requirements - specifically Resolutions BCB 85/2021 and 520/2025 (and related amendments). Location & Legal Status: Based in Brazil and legally eligible to be appointed as a formal statutory officer (Diretor Estatutário) under Brazilian corporate and financial regulations. Fintech/Financial Sector Background: Demonstrated track record working in a regulated financial institution, payment institution (IP), or high-growth fintech. Technical Literacy: Strong technical fluency to critically evaluate architectures, challenge security engineers, and audit third-party vendor deliverables. Language Skills: Professional fluency in both Portuguese and English, capable of managing local regulatory filings and collaborating with international leadership.

Location: Chicago, United States Location: Chicago, IL Contract type: 1099 Work schedule: Full-time Professional Background (Preferred): Former or retired law enforcement, military, or security experience preferred. Description At Whizz, we want to change the delivery business for the better by offering high speed electric bikes to delivery drivers. Whether a driver is just starting out in the delivery industry or is looking to upgrade their current vehicle, we are here to help them achieve their goals and make their life easier. Our ultimate goal is to make transportation for delivery drivers as seamless and hassle-free as possible, so they can focus on what matters most: delivering top-quality service to their customers. We are currently looking for a Field Recovery Specialist. Responsibilities Conduct round trips to collect and retrieve electric bicycles, mopeds from debtors. Confidently communicate with debtors regarding outstanding balances and e-bike collections. Manage tasks using CRM, Google Sheets/Excel, and Notion software. Complete additional tasks as assigned by other departments. Ability to effectively communicate with law enforcement and delinquent customers. Willingness to work in various parts of Chicago, IL travel within the state and other cities for day trips. Requirements Ability to work in a fast-paced and changing work environment. 1 years of experience in security, police, army, or a related field. Strong multitasking skills, attention to detail, organization, and interpersonal abilities. Car ownership (preferably a bigger car to move bikes) and willingness to use it for the job Former or retired law enforcement experience is strongly preferred. Benefits Type of Employment : 1099 contract Pay: $20-$22 per hour. Payment per successful recovery, higher pay rate as per recovery volume. Benefits: Gas and toll compensation.

Location: Washington, United States Location: Washington DC Contract type: 1099 Work schedule: Part-Time / Full-time Professional Background (Preferred): Former or retired law enforcement, military, or security experience preferred. Description At Whizz, we want to change the delivery business for the better by offering high speed electric bikes to delivery drivers. Whether a driver is just starting out in the delivery industry or is looking to upgrade their current vehicle, we are here to help them achieve their goals and make their life easier. Our ultimate goal is to make transportation for delivery drivers as seamless and hassle-free as possible, so they can focus on what matters most: delivering top-quality service to their customers. We are currently looking for a Repossession Specialist. Responsibilities Conduct round trips to collect and retrieve electric bicycles, mopeds from debtors. Confidently communicate with debtors regarding outstanding balances and e-bike collections. Manage tasks using CRM, Google Sheets/Excel, and Notion software. Complete additional tasks as assigned by other departments. Ability to effectively communicate with law enforcement and delinquent customers. Willingness to work in various parts of Washington DC travel within the state and other cities for day trips. Requirements Ability to work in a fast-paced and changing work environment. 1 years of experience in security, police, army, or a related field. Strong multitasking skills, attention to detail, organization, and interpersonal abilities. Car ownership (preferably a bigger car to move bikes) and willingness to use it for the job Former or retired law enforcement experience is strongly preferred. Benefits Type of Employment : 1099 contract Pay: $20 per hour + payment per successful recovery, higher pay rate as per recovery volume. Benefits: Gas compensation.

Location: New York Workplace: Remote THE ROLE We are looking for a Senior Engineer, Security to join our Platform Engineering team. This is a find-and-fix role. When you find a vulnerability in our infrastructure, you write the Terraform or the application change that closes it. Where the fix belongs to another team, you drive it to completion, with the CISO supporting you. You will report into Platform Engineering and work closely with our CISO, who sets the security agenda and is your escalation route when remediation stalls elsewhere. RESPONSIBILITIES - Fix it, don't just find it: Remediate security findings across our infrastructure, writing the Terraform and application changes that close them. Where the fix belongs to another team, drive it to completion. Run vulnerability management from Snyk, Prowler, and ASV findings through to verified fixes. - Own AWS security: Cloud posture across IAM and least privilege, network boundaries, secrets management, and logging coverage. Define the technical security baselines new services are built to, covering host hardening, WAF configuration and deployment patterns, and enforce them as code. - Find problems before anyone else does: Regular penetration testing against our own environment, ahead of the formal annual assessment carried out by our external testers. Threat modelling and security review for new services early enough to change the design, including our integrations with payment and custody providers. - Respond when it matters: Serve as technical lead for security incidents, including forensic investigation. Own and improve detection coverage in Datadog, tuning alerts for signals. WHAT YOU NEED - Five or more years in hands-on security engineering, with responsibility for production systems. - You write and ship code. Terraform and Python, and enough application fluency to fix what you find rather than hand it off. - Deep AWS security experience, including IAM and least privilege at organization scale, and container workloads in ECS or EKS. - Application security, including threat modelling and hands-on offensive testing against cloud and application targets. - Security incident response, including forensic investigation. - You have run vulnerability management and driven fixes through teams you do not manage; you work the finding queue on your own initiative, without being chased. - You have worked in a regulated environment and turned ISO 27001, PCI DSS, or SOC 2 requirements into engineering work. - Detection engineering in Datadog, or a comparable SIEM. - Securing CI/CD pipelines, particularly GitHub Actions. - Cryptography and secrets management in practice, including key rotation and certificate lifecycle. - Using AI coding tools to remediate at scale, and reviewing AI-generated code with a security eye - Experience with payments, cards, or digital assets. About Us   We’re building the world’s leading cross-border fintech for emerging markets - empowering families, fuelling local economies, and changing how millions access financial services.   Since our launch in 2019, we have transformed how money moves across borders with our operations spanning 6 out of 7 continents and covering both the busiest and most underserved (remittance) corridors. We tapped into a massive shift - from banks to phones - bringing digital finance to places where traditional systems never reached. The next stage of growth will fuel a network of services and products especially designed to make money more accessible to diaspora communities including local cards, and additional savings and payments features.   We’re growing fast, backed by world-class investors, and scaling a product that blends real world impact with cutting edge fintech innovation.   Here’s a little more: - Founded by Harvard grads and 3-time founders who previously built Segovia (acquired) and GiveDirectly (>$300M revenue, fastest-growing NGO in the world) - Backed by top investors including Spark Capital, Canaan, Reid Hoffman, Breyer Capital, Unbound, Wamda, and more - Built by global top performers from Bain, Google, McKinsey, Uber, Checkout, Bolt, and beyond - we move fast, stay humble, and care deeply about our mission - Truly global team - 250+ people, 50+ nationalities, 50+ languages - Guided by our values - ownership, impact, humility, and heart - in deed, not just word   TAPTAP VALUES https://www.taptapsend.com/our-values Impact first Team next Accept reality Propose solutions Win with grit Be proactively candid, with yourself and others Love the particular Own it Create positive energy Maybe, even have fun   Taptap Send is an equal opportunity employer dedicated to building an inclusive and diverse workforce. All employment decisions are decided on the basis of qualifications, experience and business need. We strongly encourage applications who are members of underrepresented communities to apply. If you require reasonable adjustments to be made during the recruitment process, please do not hesitate to let us know. Any information you provide us in this respect will only be used to accommodate your requirements. Note: we recognize imposter syndrome is real - any candidate that does not perfectly fit every characteristic of this role is still strongly encouraged to apply.

Location: Warsaw, Poland WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU Box is building the industry's most trusted, secure content and AI platform. Our Production Security Tools team is seeking a Security Tooling Engineer II with curiosity and a security mindset to help build and operate infrastructure security across our tooling stack, including monitoring, vulnerability scanning, data loss prevention (DLP), and hardening checks. In this role, you will implement and operate security tooling and controls under the guidance of senior engineers; collaborate with engineering, privacy, legal, and other security teams to reduce data exposure and configuration risk; and help keep Box's infrastructure secure-by-design and secure-by-default while enabling rapid, responsible product development and AI adoption. WHAT YOU'LL DO Deploy and help maintain cloud-native security tooling in our multi-cloud environment. Contribute to infrastructure and policy management using Terraform and Terragrunt, following team standards and module patterns. Contribute configuration-as-code changes for host and service configuration, paired with the infrastructure-as-code changes needed to roll them out safely — with version control, peer reviews, and automated tests. Implement cloud security configuration checks in tools that use OVAL and Rego, using regex patterns. Patch and upgrade tooling deployments on a regular cadence, following team runbooks, to maintain security, availability, and reliability. Build monitoring, metrics, and alerting for owned components to support risk reduction and operational excellence. Help automate detection and remediation of misconfigurations in CI/CD and runtime, and reduce toil across policy workflows and operational tooling. Support RTB requests by writing targeted detection rules and running ad-hoc scans as needed. Collaborate with Legal, Privacy, and Compliance to align tool implementation with regulatory needs (FedRAMP, SOC 2, PCI, HIPAA). Produce reports and evidence artifacts that demonstrate control effectiveness to auditors and internal stakeholders. Attend and engage in weekly stand-ups, team meetings, and manager 1:1s. Work collaboratively with other engineers, team members, and across teams. Play a role in developing and fostering Box culture in our Warsaw office. Represent Box Poland internally and externally. Document standards and playbooks and share knowledge and best practices with peers. Collaborate across global teams, including occasional shifted hours for cross-time-zone projects. Participate in our on-call rotation, available at all times while on-call to help respond to and triage any issues that arise. WHO YOU ARE We are an AI-first company. This means you approach your work with a growth mindset and find ways to leverage AI to help make faster, smarter decisions that will 10X your impact at Box. You have a BA/BS in Computer Science or related field. 2+ years of experience with cloud-native security tooling and infrastructure-as-code (Terraform preferred; exposure to Terragrunt a plus) in a cloud environment. Working knowledge of configuration-as-code practices for host and service configuration, and comfort pairing config changes with the infrastructure-as-code changes needed to deploy them safely. Familiar with security policy engines (e.g., OVAL, Rego) for configuration compliance checks. Working knowledge of policy-as-code practices (version control, CI/CD, reviews, unit/integration tests). Familiar with REST APIs and at least one major language (Python, Java, Go, or Node.js); solid debugging and testing skills, and able to write modular, testable, and maintainable code with guidance. Comfortable debugging across multiple system layers. Interest in automation; contributes to templates and libraries that scale repetitive work. Security and privacy minded; awareness of FedRAMP, SOC 2, PCI, and HIPAA, with willingness to build depth. Collaborative communicator who shares findings with peers and stakeholders and raises roadblocks early. Team-oriented — actively contributes to discussions and projects, and keeps stakeholders informed. Growth mindset — open to feedback, curious about industry trends and tools, and motivated to expand your professional expertise. Interest in DLP policy authoring (JSON/YAML, RE2 regex, dictionaries, context rules). Flexible and reliable with on-call responsibilities and occasional shifted hours in a hybrid work environment. Strong communication skills in English Preferred Skills Interest in DLP policy authoring (JSON/YAML, RE2 regex, dictionaries, context rules). Experience contributing to classification, tagging, and policy enforcement to prevent sensitive data exfiltration. Experience with compliance frameworks such as FedRAMP, SOC 2, PCI, or HIPAA. BENEFITS Check out the overview of Life at Box which include general perks and benefits. Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week. Your Recruiter will share more about how we work and company culture during the hiring process. At Box, we believe unique and diverse experiences benefit our culture, our products, our customers, our company, and our world. We aim to recruit a passionate, high-performing workforce that reflects the world we live in. If you are head-over-heels about this role but unsure if you meet all the requirements, we encourage you to apply! EQUAL OPPORTUNITY We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. For details on how we protect your information when you apply, please see our Personnel Privacy Notice . For more details on how Box Poland protects your information, please see our Supplemental Personnel and Candidate Privacy Notice . NOTICE OF USE OF AI At Box, we believe in the power of AI to improve the recruiting process while keeping people at the heart of every decision. For more information on the use of AI in our hiring process, please visit our webpage here . #LI-Hybrid #LI-KS2

Location: Utah | Hybrid Please Note: This is a Utah-based hybrid position which will require some regular in-office days each week. Additionally, employment with BambooHR is contingent on passing both a background and credit check. AI at BambooHR At BambooHR, we believe in leveraging cutting-edge technology to empower people and transform HR. We’re actively integrating AI into our solutions and workflows to enhance efficiency and drive innovation. To that end, we’re looking to our existing team members and future hires to share this forward-thinking mindset: individuals who are curious about AI’s potential, eager to learn and adapt, and ready to explore how intelligent tools can elevate their work along with BambooHR’s impact on setting people free to do great work. Join us in reimagining the future of HR! Essential Job Duties BambooHR is rebuilding its Security Operations function around AI. We are not adding AI tooling to an existing SOC - we are redesigning how the work happens, so that automation and AI agents carry the volume and our people carry the judgment. We are looking for a manager to lead that team and own that transformation. You will lead a team spanning detection engineering, threat intelligence and hunting, and incident response. Day to day, you will run a live operation: incidents, detections, hunts, on-call coverage, service-provider relationships, and the operational metrics that leadership works from. Running alongside that operation is the change itself — automating triage and enrichment so analysts stop working queues, building detection content we write, tune and own, and standing up threat intelligence as a program that produces detections and hunt hypotheses rather than reports that have no clear actionable insights. The reason this role exists now is that the surface a security team defends is changing shape. As HR technology becomes more AI-driven and more agentic, autonomous software acts with real authority, machine identities multiply, and attacks accelerate. That surface grows faster than any security team can hire against, which is why we staff for judgment and build automation for volume. This role sits at the center of that decision - and the person in it will spend a meaningful part of their time deciding, in writing, how much authority automated systems are allowed to hold. You will: Supervisory Responsibilities Leads and grows a team of security analysts, detection engineers, and threat intelligence practitioners. Recruits, interviews, hires, onboards and retains technical security talent in a competitive market. Oversees the daily workflow of the team: shift coverage, on-call rotation, incident assignment, and detection backlog priority. Provides constructive and timely performance evaluations, and builds development plans against the skills an AI-native SOC actually requires: detection-as-code, agent supervision, and intelligence tradecraft. Supports career growth and internal mobility across the broader security organization, treating it as a retention strategy rather than a loss. Handles discipline and termination of employees in accordance with company policy. Run the operation Own daily security operations end to end - alert handling, shift coverage, on-call rotation, escalation quality, and detection backlog priority and rule retirement. Serve as incident commander for the majority of security incidents, and partner with the VP of Information Security on the most severe incidents and on executive communication. Manage security service-provider relationships, including service reviews, escalation quality, and tuning direction. Publish a regular operational metrics pack that the team and executive leadership both work from. Automate the volume, not the analyst Build and enforce an automated incident runbook program covering the incident types behind the majority of alert volume. Drive the automation of Tier-1 triage and a growing share of Tier-2 workflows, so routine work resolves without a human touching it and escalations arrive as an assembled case with clear timeline, scope, and blast radius, rather than a raw alert. Redirect reclaimed capacity upward rather than out of the team - into deeper investigation, detection engineering, and threat intelligence. Own the detections Run detection engineering as a product: a prioritized backlog including rules in version control with CI validation, and a full lifecycle of write, test, deploy, measure and retire. Build in-house detection capability against our own security telemetry, so detection content is something we write, tune and can explain to an engineer, an auditor or a customer. Build threat intelligence and hunting into programs Stand up a formal threat intelligence program: approved intelligence requirements, a collection plan mapped to real sources, and a threat model grounded in the risks that actually apply to employee and payroll data. Ensure every finished intelligence product ends in a detection, a hunt hypothesis, or a control change. Run a hypothesis-driven hunting program on a regular cadence, and make intelligence genuinely useful to teams outside the SOC. Build the AI-native SOC Lead the team through the shift from AI-assisted work (where agents draft and humans approve) to delegated work (where agents act inside explicit, written authority boundaries). Protect what stays human - adversary reasoning, incident command when consequences are real, disclosure decisions, and the calls that should not be delegated to a machine. Build detection and response coverage for AI-era threats: prompt injection and tool abuse, autonomous software operating with real authority, and machine identity at scale. Partner across security engineering, product security, identity and access management, and governance and risk on shared platforms, shared threats, and shared audit obligations. What You Need to Get the Job Done 5+ years in security operations, incident response, or detection engineering, including 2+ years directly managing a team of security analysts or detection engineers. Experience running a SOC or detection function at a SaaS or cloud-native company, ideally one with a multi-tenant product and a live compliance calendar (SOC 2 and/or ISO 27001). Hands-on detection engineering credibility. You have personally written, tested, tuned and retired detections, and you are comfortable treating detection content as code in version control with CI validation. Experience owning a managed detection relationship (MDR or MSSP). Direct experience automating SOC workflows through SOAR, runbook automation, or LLM- and agent-based triage and enrichment. You can speak concretely about what was automated, what the false-negative rate was, and how you measured it. Working fluency with modern security data platforms — data lake or lakehouse architectures — and comfort querying telemetry directly rather than only through a vendor console. Incident command experience under real pressure, including executive and cross-functional communication during an active incident. Strong people leadership: hiring, coaching, performance management, and the judgment to lead a technical team through significant change honestly rather than through reassurance. Excellent written communication. This role publishes runbooks, authority boundaries, intelligence requirements, and metrics that executives read. Excellent prioritization, and the ability to say no with a reason. The defended surface grows faster than any team does, and protecting your team from over-commitment is part of the job. Comfort working in an AI-forward environment where agents write and test code, participate in design review, and run triage. Ability to function well in a high-paced and at times stressful environment, including on-call escalation. Bachelor's degree in Computer Science, Information Security, or a related field - or equivalent practical experience. Practical experience is weighted more heavily than the degree. At least five years of related security operations experience required. Physical requirements can include prolonged periods of sitting at a desk and working on a computer. Must be available for on-call escalation and to lead incident response outside standard business hours when incident severity requires it. What Will Make Us REALLY Love You Experience securing AI or agentic systems - prompt injection, tool abuse, and third-party or autonomous code holding execution authority. Prior experience standing up a threat intelligence program from zero: intelligence requirements, collection planning, intel-to-detection pipeline, and adversary emulation. Experience transitioning detection capability in-house from a managed provider. Experience with non-human identity at scale - service accounts, workload identity, machine credentials - and its detection implications. Background in HR, payroll, or fintech SaaS, or other environments where employee data and payment fraud are primary adversary objectives. Experience with cyber resilience practice: backup immutability verification, recovery drills, and recovery-time objectives measured against contractual commitments. Experience building or supervising LLM agents in production, including evaluation, guardrail design, and human-in-the-loop review patterns. Public contribution to the detection engineering or threat intelligence community - detection rules, open-source tooling, conference talks, or published research. Security certifications (GCIA, GCIH, GCFA, GDAT, GCTI, OSCP, CISSP) preferred, not required. What You'll Love About Us A Great Company Culture that has been recognized by multiple organizations like Inc , and Salt Lake Tribune Comprehensive health, life, and disability insurance Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off so you can enjoy quality of life 401k plans with up to 6% company match $2000 Paid-Paid Vacation bonus EAP through Headspace Check out all our benefits that benefit you About Us At BambooHR, we're building something different: we're building a people intelligence platform that transforms HR and sets people free to do great work! We're a proven market leader driving innovation while building lasting success through thoughtful, sustainable growth. Here, you'll find a place that champions growth: both professional and personal, both individual and collective. We invest in potential, giving you the space to stretch your capabilities and turn good ideas into reality while providing the safety net of a supportive, values-driven culture. Our approach combines meaningful work with meaningful lives, offering competitive benefits, professional development, and the flexibility to thrive both in and outside the office. What sets us apart isn't just what we do, but how we do it: with openness, integrity, and a shared commitment to doing the right thing. Join us in creating HR software that makes work better for everyone, while we make work better for you. BambooHR is committed to the full inclusion of all qualified individuals and will ensure that persons with disabilities are provided reasonable accommodations throughout the hiring process.  If you would like to request accommodations, please let your recruiter know. BambooHR is An Equal Opportunity Employer--M/F/D/V Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired. For information on California Privacy Policy, click here . Our process utilizes AI as an assistant to efficiently process and analyze candidate data. Recruiters and hiring managers maintain full oversight and accountability, ensuring that all final selection and rejection decisions are human-made and based solely on objective job qualifications. Please see our General Privacy Notice and California Privacy Notice for more details. See our AI Guidelines for Candidates for details on how BambooHR uses AI in recruiting, how we expect candidates to use AI, and what is not allowed.

Location: Washington, United States Location: Washington, DC Contract type: 1099 Professional Background (Preferred): Former or retired law enforcement, military, or security experience preferred Description At Whizz, we want to change the delivery business for the better by offering high speed electric bikes to delivery drivers. Whether a driver is just starting out in the delivery industry or is looking to upgrade their current vehicle, we are here to help them achieve their goals and make their life easier. Our ultimate goal is to make transportation for delivery drivers as seamless and hassle-free as possible, so they can focus on what matters most: delivering top-quality service to their customers. We are currently looking for a Field Recovery Agent. Responsibilities Conduct round trips to collect and retrieve electric bicycles, mopeds from debtors. Confidently communicate with debtors regarding outstanding balances and e-bike collections. Manage tasks using CRM, Google Sheets/Excel, and Notion software. Complete additional tasks as assigned by other departments. Ability to effectively communicate with law enforcement and delinquent customers. Willingness to work in various parts of Washington, DC, travel within the state and other cities for day trips. Requirements Ability to work in a fast-paced and changing work environment. 1 years of experience in security, police, army, or a related field (preferred). Strong multitasking skills, attention to detail, organization, and interpersonal abilities. Car ownership (preferably a bigger car to move bikes) and willingness to use it for the job Former or retired law enforcement experience is strongly preferred. Benefits Type of Employment : 1099 contract Pay: $20-$22 per hour. Payment per successful recovery, higher pay rate as per recovery volume. Benefits: Gas and toll compensation.

Location: London, Paris, New York 2027 Internship – Security Engineer Programmes offered: Final-year internship, penultimate-year internship Location: London, Paris, New York Programme duration: 6-month internship or 12-month industrial placement, starting in 2027 Who qualifies: Penultimate or final-year students completing a bachelor’s or master’s degree Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager operating across liquid asset classes and markets worldwide. Our approach to investing is scientific: we bring together data, research, technology and trading expertise to develop and run systematic strategies. Technology is central to how QRT works. Over the years, we have built a global research and execution platform spanning geographies, asset classes and trading horizons, from ultra-low-latency systems to large-scale research, analytics and risk infrastructure. We invest heavily in engineering, automation and scalable systems because better technology allows us to test ideas faster, operate more reliably and tackle harder problems. Our internships are designed to give students meaningful experience of that work. You’ll join a team, contribute to real projects and learn from engineers working on production systems. The environment is technical and collaborative, with plenty of scope to ask questions, investigate unfamiliar problems and take ownership. Strong performance during the internship may lead to consideration for a full-time graduate role. Your future role at QRT Throughout the recruitment process, we’ll consider your skills and interests alongside the problems our teams are working on, with the aim of finding the strongest fit. As part of QRT’s Security team, you’ll help protect the systems, data and infrastructure behind our global research and trading activities. You’ll work closely with our Cloud, Infrastructure and Network Operations teams to design and implement security controls across a complex, high-performance technology environment. The team works across security engineering, detection and response, vulnerability management and security assurance. Rather than treating security as a separate layer, we work directly with engineering teams to understand how systems behave, identify weaknesses and build practical ways to prevent, detect and respond to threats. As an intern, you’ll contribute to real security problems and have opportunities to build tooling, investigate emerging attack techniques and improve how we automate security work at scale. Your current skillset Eligibility – Penultimate or final-year students pursuing a Bachelor’s, Master’s in a STEM discipline, such as Cyber Security, Informatics, Computing or a related subject, on track for a 2:1 or above. Interest in technology – We’re interested in what you’ve explored and built, whether through hobbies, personal projects, academic work or open-source contributions. Technical skills – You don’t need experience with everything below. Examples of relevant knowledge and experience include: An understanding of security principles and technologies such as firewalls, IDS/IPS, vulnerability scanning, password management, encryption and secure coding practices. Programming or scripting experience, particularly with Python or Bash. Confidence working from the Linux command line, including familiarity with Linux/Unix system administration fundamentals. An understanding of networking concepts, including TCP/IP and Ethernet. Experience with monitoring and observability tools such as Grafana, Prometheus and PromQL. Examples of the projects you may work on include: Triage agent development – Use MCP servers to build and improve a triage agent that supports cyber-security investigations. Detection engineering – Reproduce emerging attack techniques in segregated lab environments and test how effectively our detection systems identify them. Security assurance – Contribute to vulnerability research, security reviews and remediation testing, working with security and engineering teams to understand and address weaknesses. Security automation – Build tools and automation that make security assurance more scalable, consistent and effective. Mindset – Curious, proactive and comfortable asking questions. You’re willing to investigate unfamiliar systems, follow evidence and challenge assumptions when something doesn’t look right. Approach – Self-motivated, thoughtful and comfortable taking ownership of a problem. Interviewing Apply Online – Submit your application online. We review applications on a rolling basis, so applying early is recommended. Technical Assessment – Selected candidates will complete a technical interview with the relevant team . Assessment Centre / Online Interviews – Shortlisted candidates will take part in interviews, either on-site or via Microsoft Teams. We’ll explore your technical thinking, how you approach unfamiliar problems and how you work with others. QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.

Location: Hong Kong Programmes offered: Final-year internship, penultimate-year internship, some permanent opportunities Location: Hong Kong Programme duration: 3–6-month internship, starting in 2027 Who qualifies: Penultimate or final-year students completing a bachelor’s or master’s degree Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager operating across liquid asset classes and markets worldwide. Our approach to investing is scientific: we bring together data, research, technology and trading expertise to develop and run systematic strategies. Technology is central to how QRT works. Over the years, we have built a global research and execution platform spanning geographies, asset classes and trading horizons, from ultra-low-latency systems to large-scale research, analytics and risk infrastructure. We invest heavily in engineering, automation and scalable systems because better technology allows us to test ideas faster, operate more reliably and tackle harder problems. Our internships are designed to give students meaningful experience of that work. You’ll join a team, contribute to real projects and learn from engineers working on production systems. The environment is technical and collaborative, with plenty of scope to ask questions, investigate unfamiliar problems and take ownership. Strong performance during the internship may lead to consideration for a full-time graduate role. Your future role at QRT Throughout the recruitment process, we’ll consider your skills and interests alongside the problems our teams are working on, with the aim of finding the strongest fit. As part of QRT’s Security team, you’ll help protect the systems, data and infrastructure behind our global research and trading activities. You’ll work closely with our Cloud, Infrastructure and Network Operations teams to design and implement security controls across a complex, high-performance technology environment. The team works across security engineering, detection and response, vulnerability management and security assurance. Rather than treating security as a separate layer, we work directly with engineering teams to understand how systems behave, identify weaknesses and build practical ways to prevent, detect and respond to threats. As an intern, you’ll contribute to real security problems and have opportunities to build tooling, investigate emerging attack techniques and improve how we automate security work at scale. Your current skillset Eligibility – Penultimate or final-year students pursuing a Bachelor’s, Master’s in a STEM discipline, such as Cyber Security, Informatics, Computing or a related subject Interest in technology – We’re interested in what you’ve explored and built, whether through hobbies, personal projects, academic work or open-source contributions. Technical skills – You don’t need experience with everything below. Examples of relevant knowledge and experience include: An understanding of security principles and technologies such as firewalls, IDS/IPS, vulnerability scanning, password management, encryption and secure coding practices. Programming or scripting experience, particularly with Python or Bash. Confidence working from the Linux command line, including familiarity with Linux/Unix system administration fundamentals. An understanding of networking concepts, including TCP/IP and Ethernet. Experience with monitoring and observability tools such as Grafana, Prometheus and PromQL. Examples of the projects you may work on include: Triage agent development – Use MCP servers to build and improve a triage agent that supports cyber-security investigations. Detection engineering – Reproduce emerging attack techniques in segregated lab environments and test how effectively our detection systems identify them. Security assurance – Contribute to vulnerability research, security reviews and remediation testing, working with security and engineering teams to understand and address weaknesses. Security automation – Build tools and automation that make security assurance more scalable, consistent and effective. Mindset – Curious, proactive and comfortable asking questions. You’re willing to investigate unfamiliar systems, follow evidence and challenge assumptions when something doesn’t look right. Approach – Self-motivated, thoughtful and comfortable taking ownership of a problem. Interviewing Apply Online – Submit your application online. We review applications on a rolling basis, so applying early is recommended. Technical Assessment – Selected candi dat es will complete a technical interview with the relevant team . Assessment Centre / Online Interviews – Shortlisted candidates will take part in interviews, either on-site or via Microsoft Teams. We’ll explore your technical thinking, how you approach unfamiliar problems and how you work with others. QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.

Location: Japan Senior Manager, Japan Security and Compliance GTM WHAT IS BOX? [Recruiting owns] Box is the market leader for Cloud Content Management. Our mission is to power how the world works together. Box is partnering with enterprise organizations to accelerate their digital transformation by creating a single platform for secure content management, collaboration and workflow. We have an amazing opportunity to further establish ourselves as leaders in the space, and we need strong advocates to help us achieve that goal. By joining Box, you will have the unique opportunity to help capture a majority of this developing market and define what content management looks like for the digital enterprise. Today, Box powers over 97,000 businesses, including 70% of the Fortune 500 who trust Box to manage their content in the cloud. WHY BOX NEEDS YOU Box's security, compliance, and privacy posture is a business enabler for customers and a competitive differentiator in the market. We are looking for a Senior Manager, Japan Security and Compliance GTM, to lead Box’s customer trust efforts in Japan. This will include oversight and responsibility for gathering, vetting and scaling security, compliance, privacy and other trust-related information to customers and partners. The right person should be excellent at communicating vertically and horizontally across the company and will be comfortable explaining Box's security, compliance, and privacy posture. WHAT YOU'LL DO Lead Japan’s customer trust efforts, including responding to customer security due-diligence questionnaires and, as needed, leading customer audits. Work with US-based GRC, Security, Legal, Product and other SMEs to find answers to customer questions specific to the Japan market. Assess the need for new customer-facing content; drive the development of new content; and then scale it to account teams, customers and partners, as appropriate. Work closely with both Box Japan’s leadership team and Box GRC’s leadership team to drive common understanding and joint business outcomes. WHO YOU ARE 8+ years experience in an equivalent Governance, Risk and Compliance (GRC) role, with a strong understanding of security controls. BS degree in Business or Management Information Systems or related field OR equivalent work experience Excellent written, verbal communication, and presentation skills in Japanese and English Strong desire to learn more and to get stuff done. Like to have fun. Strong integrity. Make Mom proud! EQUAL OPPORTUNITY [Recruiting owns] We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. For details on how we protect your information when you apply, please see our Personnel Privacy Notice. NOTICE OF USE OF AI At Box, we believe in the power of AI to improve the recruiting process while keeping people at the heart of every decision. For more information on the use of AI in our hiring process, please visit our webpage here .

Location: Fort Lauderdale, United States We are partnering with a privately held services business to find a Director of Security Operations. The company serves a diverse commercial and institutional client base and is in an active growth phase. This is an opportunity to step into full divisional ownership of a large frontline operations division and shape the next chapter of its growth. Overview Reporting directly to the COO, the Director of Security Operations will take full ownership of a security function operating a large distributed hourly workforce across complex, round-the-clock client operations. This is not a maintenance role. Ownership has made a deliberate decision to elevate the leadership of this division and is fully committed to its growth, giving the incoming Director a clear mandate to raise performance standards, strengthen accountability, and help scale the business. You will inherit a team with real operational foundations and long-standing client relationships. The opportunity is to bring the executive leadership, structure, and strategic thinking that takes it to the next level. If you thrive in an entrepreneurial, high-ownership environment where you have genuine influence over outcomes, this is worth a conversation. Key Responsibilities Full P&L ownership including budget compliance, billing, and contract profitability Drive client retention and serve as an executive-level relationship owner for key accounts Lead, develop, and hold accountable a team of direct reports across multiple sites, including performance reviews, coaching, and progressive corrective action where required Oversee staffing, scheduling, shift coverage, and overtime management across round-the-clock operations Implement and enforce SOPs, quality control processes, and performance standards Manage client transition planning and operational mobilization for new and ending accounts Support business development by contributing to bid presentations and new account proposals as required by senior leadership Foster a culture of safety, recognition, and high performance across all levels of the division Coordinate cross-functionally with HR and Finance to ensure operational success Report on operational performance and provide strategic recommendations to senior leadership Requirements Required Qualifications Proven track record leading a large, multi-site security operation with direct P&L responsibility Strong client relationship management experience with demonstrated retention outcomes Executive-level leadership with a clear history of building accountable, high-performing teams and the ability to drive change independently Experience maintaining consistent operational standards across multiple locations, ideally across more than one state or region Strong financial and analytical skills including oversight of budgets, billing, labor productivity, and overtime management Strong strategic thinking and problem-solving skills with the ability to translate strategy into operational execution Working knowledge of security industry regulations, compliance requirements, and operational best practices Excellent verbal and written communication skills Background with a regional or national security services provider Preferred Qualifications Bachelor's degree in Business Management, Law Enforcement, or a related field Minimum three years managing teams of 50 or more Experience leading a division through a period of significant growth, expansion, or organizational change Benefits Base salary: $100,000 - $120,000 depending on experience Performance bonus: 15% based on individual and company performance 401(k) Healthcare coverage Partially paid parental leave PTO: 104 hours (years 0-2), scaling to 184 hours at 10+ years Relocation assistance available for the right candidate Keller is a recruitment agency that provides services to clients ranging from startups and non profits to multinational corporations. Keller emphasizes ethical search processes, attentive candidate care, and leadership placements that support long-term client outcomes. To learn more about the firm and about our candidate services - please visit Florida Executive Search, Recruiters, and Headhunters Equal Employment Opportunity and Non-Discrimination Policy Equal Employment Opportunity Statement: Both Keller Executive Search and our clients are Equal Opportunity Employers. For all positions, whether with Keller Executive Search or our clients, qualified applicants will receive consideration for employment without regard to race, skin color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, protected veteran status, disability, genetic information, or any other legally protected status. Commitment to Diversity : Keller Executive Search and its clients are committed to fostering a diverse and inclusive work environment where all individuals are valued and respected. Reasonable Accommodations : Both Keller Executive Search and our clients are committed to providing reasonable accommodations to individuals with disabilities and pregnant individuals. We engage in an interactive process to determine effective, reasonable accommodations. Compensation Information: For client positions, compensation information is available in the job post. If not provided, it will be shared during the interview process in accordance with applicable laws. When required by law, salary ranges will be included in job postings. Actual salary may depend on skills, experience, and comparison to current employees in similar roles. Salary ranges may vary based on role and location. Compliance with Laws : Both Keller Executive Search and our clients comply with federal, state, and local laws governing nondiscrimination in employment. This policy applies to all employment terms and conditions, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Workplace Harassment : Both Keller Executive Search and our clients expressly prohibit any form of workplace harassment based on race, skin color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. E-Verify Participation : Keller Executive Search and/or our clients may participate in E-Verify. Information about E-Verify participation will be provided during the application process where applicable. Privacy and Pay Equity: California Residents : For more information about the categories of personal information we collect for recruiting and employment purposes, please review our Privacy Policy at www.kellerexecutivesearch.com. Colorado, Nevada, New York City, California, and Washington Residents: Compensation information is available in the job post or will be provided during the interview process if not initially available. Both Keller Executive Search and our clients are committed to pay equity and conduct periodic pay equity analyses in accordance with applicable laws. State-Specific Information: Rhode Island: We do not request or require salary history from applicants. Connecticut : We provide wage range information upon request or before discussing compensation. New Jersey: We do not inquire about salary history unless voluntarily disclosed. Veteran Status : Both Keller Executive Search and our clients provide equal employment opportunities to veterans and comply with applicable state laws regarding veteran preference in employment. If you are a veteran, please inform us during the application process. Genetic Information : In accordance with federal and state laws, both Keller Executive Search and our clients do not discriminate based on genetic information. We do not request or require genetic information from applicants or employees, except as permitted by law. Local Laws : Both Keller Executive Search and our clients comply with all applicable local laws and ordinances regarding employment practices in the areas where we operate. Use of Artificial Intelligence in Recruitment Keller Executive Search and our clients may use artificial intelligence (AI) tools to assist in the recruitment and candidate evaluation process. These tools are used exclusively to support human decision-making by helping to review and assess candidate qualifications and materials. AI is never used to automatically reject, disqualify, or make final hiring decisions about candidates. All AI-assisted evaluations are reviewed by experienced recruitment professionals, and all hiring decisions are made by qualified human recruiters. Our use of AI is designed to enhance fairness, consistency, and efficiency while maintaining our commitment to equal employment opportunity and non-discrimination principles. Note : This job posting may be for a position with Keller Executive Search or one of our clients. The specific employer will be identified during the application and interview process. Employment laws and requirements may vary depending on the employer and location.

Location: Remote Workplace: remote At Included Health, security is central to the trust our members, customers, partners, and care teams place in us. We protect sensitive health information and the systems that support our products by building security into architecture, engineering practices, and day-to-day operations.   Our Security Engineering team works closely with platform engineering and product teams to build practical, scalable security controls, especially focused on our infrastructure-as-code. We focus on reducing risk through automation, secure-by-default patterns, strong technical partnerships, and controls that teams can operate in real production environments.   As a Cloud Engineer on the Security team, you’ll help mature Included Health’s cloud security posture across primarily AWS environments, with consideration for GCP. You’ll design, implement, and automate controls that protect product infrastructure and help prevent unauthorized Protected Health Information (PHI) exfiltration. This is a full-time, remote role reporting to the Senior Manager, Security Engineering. We are open to considering candidates at both the Senior and Staff levels. The role requires hands-on technical execution as well as the ability to influence infrastructure, DevOps, engineering, and product teams. What You'll Do Design and automate cloud security controls across Identity & Access Management (IAM), authorization, Just-in-Time access, data access, and platform access. Improve AWS and GCP security posture through Terraform guardrails, risk roadmaps, legacy remediation, and secure infrastructure patterns. Build security tooling in Python, Go, and Lambda for vulnerability management, alerting, PHI logging, and cloud security workflows. Secure containers, workloads, and CI/CD pipelines through practical controls teams can operate in production. Partner with infrastructure, DevOps, engineering, and product teams on sensitive-data handling, incident response, and secure platform initiatives. Document controls, standards, automation, and playbooks that help teams adopt secure workflows. Who You Are You are a practical, hands-on cloud security engineer who can bring structure to ambiguous risks or control gaps without waiting for perfect clarity. You clarify the desired outcome, trust boundaries, stakeholders, constraints, and available facts, then make a reasonable first move and adapt as you learn. You are comfortable going deep in code, cloud APIs, logs, identity policies, network traffic, CI/CD pipelines, and infrastructure configuration. You use evidence to test hypotheses and turn findings into durable fixes, reusable automation, clear documentation, or repeatable processes. You build trust through preparation, responsiveness, direct communication, technical credibility, and follow-through. You listen to operational realities, explaining risks and tradeoffs clearly, and work with teams toward practical controls they can operate in production. You take ownership through the full loop: coordination, escalation, validation, closure, and knowledge sharing. You know when to investigate independently, when to involve the right expertise, and when broader organizational alignment is needed. What You Bring 5+ years of hands-on cloud security experience, with deep AWS expertise and familiarity with GCP. Strong technical depth across cloud infrastructure, identity, authorization, networking, containers, CI/CD, logging, monitoring, and security operations. Experience building security automation and infrastructure tooling in Python, Go, Terraform, and cloud-native services. Experience designing and operating access controls, including RBAC, ABAC, policy-as-code, granular engineering access, and Just-in-Time access. Familiarity applying cloud security frameworks, HIPAA requirements, and related standards to production environments. Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. Pay:   We are open to considering candidates at both the Senior and Staff levels. The United States new hire base salary target ranges for this full-time position are:   Zone A: $130,050–$249,930 + equity + benefits Zone B: $143,055–$274,923 + equity + benefits Zone C: $156,060–$299,616 + equity + benefits Zone D: $169,065–$324,909 + equity + benefits   This range reflects the minimum and maximum target for new hire salaries for candidates based on their respective Zone. Below is additional information on Included Health's commitment to maintaining transparent and equitable compensation practices across our distinct geographic zones.   Starting base salary for you will depend on several job-related factors, unique to each candidate, which may include education; training; skills; years and depth of experience; certifications and licensure; our needs; internal peer equity; organizational considerations; and understanding of geographic and market data. Compensation structures and ranges are tailored to each zone's unique market conditions to ensure that all employees receive fair and great compensation package based on their roles and locations. Your Recruiter can share your geographic zone upon inquiry.   Benefits & Perks:   In addition to receiving a great compensation package, the compensation package may include, depending on the role, the following and more: Remote-first culture 401(k) savings plan through Fidelity Comprehensive medical, vision, and dental coverage through multiple medical plan options (including disability insurance) Paid Time Off ("PTO") and Discretionary Time Off ("DTO") 12 weeks of 100% Paid Parental leave Family Building & Compassionate Leave: Fertility coverage, $25,000 for surrogacy/adoption, and paid leave for failed treatments, adoption or pregnancies. Work-From-Home reimbursement to support team collaboration home office work   Your recruiter will share more about the salary range and benefits package for your role during the hiring process. About Included Health Included Health is a new kind of healthcare company, delivering integrated virtual care and navigation. We’re on a mission to raise the standard of healthcare for everyone. We break down barriers to provide high-quality care for every person in every community — no matter where they are in their health journey or what type of care they need, from acute to chronic, behavioral to physical. We offer our members care guidance, advocacy, and access to personalized virtual and in-person care for everyday and urgent care, primary care, behavioral health, and specialty care. It’s all included. Learn more at includedhealth.com. ----- Included Health is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics or any other basis forbidden under federal, state, or local law. Included Health considers all qualified applicants with arrest or conviction records in accordance with the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance, and California law.

Location: United Kingdom; Dublin; London Workplace: Remote ABOUT ELEVENLABS ElevenLabs is an AI research and product company transforming how we interact with technology. We launched in January 2023 with the first human-like AI voice model. Today, we serve millions of users and thousands of businesses - from fast-growing startups to large enterprises like Deutsche Telekom and Meta. Our investors are some of the world's most prominent, including Andreessen Horowitz, ICONIQ Growth and Sequoia. We've raised $781M in funding and our last valuation was $22B - multiples of 11, always. We have expanded from voice into three main platforms: - ElevenAgents enables businesses to deliver seamless and intelligent customer experiences, with the integrations, testing, monitoring, and reliability necessary to deploy voice and chat agents at scale. - ElevenCreative empowers creators and marketers to generate and edit speech, music, image, and video across 70+ languages. - ElevenAPI gives developers access to our leading AI audio foundational models. Everything we do is the result of the creativity and commitment of our team - builders doing the best work of their lives. We are researchers, engineers, and operators. IOI medalists and ex-founders. If you want to work hard and create lasting positive impact, we want to hear from you. HOW WE WORK - High-velocity: Rapid experimentation, lean autonomous teams, and minimal bureaucracy. - Impact not job titles: We don’t have job titles. Instead, it’s about the impact you have. No task is above or beneath you. - AI first: We use AI to move faster with higher-quality results. We do this across the whole company—from engineering to growth to operations. - Excellence everywhere: Everything we do should match the quality of our AI models. - Global team: We prioritize your talent, not your location. WHAT WE OFFER - Innovative culture: You’ll be part of a generational opportunity to define the trajectory of AI, surrounded by a team pushing the boundaries of what’s possible. - Growth paths: Joining ElevenLabs means joining a dynamic team with countless opportunities to drive impact - beyond your immediate role and responsibilities. - Learning & development: ElevenLabs proactively supports professional development through an annual discretionary stipend. - Social travel: We also provide an annual discretionary stipend to meet up with colleagues each year, however you choose. - Annual team offsite: Each year, we bring your entire team together in a new location - past offsites have included Croatia, Italy and Cancún - Co-working: If you’re not located near one of our main hubs, we offer a monthly co-working stipend. ABOUT THE ROLE ElevenAgents is our platform for building and running conversational AI agents at scale. As our first Application Security Engineer embedded in the Agents team, you’ll make the secure way the easy way. You’ll build the security tooling and reusable primitives that let engineers ship securely by default. This is a builder role. Expect to spend about 70% of your time building tools and internal systems, and the rest working with engineers, staying in sync with Core Security, and doing security research. More than half of the work is greenfield and most of it starts with you, you’ll spot the problems worth solving and own each solution from idea to production. You will: - Build security primitives that are easy for engineers to adopt, starting from what you find when you audit the Agents codebase - Review new product work for security and feed what you learn back into shared tooling - Lead the major security improvements to the Agents platform, working closely with Core Security - Make sure Agents platform uses authn and authz controls correctly and building the guardrails that keep the platform from compromising on security best practices - Set the security bar for the Agents platform and make meeting it the easy path for product engineers - Work with engineers daily to help them ship fast and safely REQUIREMENTS - 5+ years in application security engineering at scale, covering secure design, vulnerability management and security tooling - Strong software engineering skills: you have built and shipped products end to end, in production-quality code - Fluency in Python, our main language. Golang or another language is fine if you can pick up Python quickly - Hands-on experience with authentication and authorization. Experience securing cross-service communication is a bonus - Experience with large-scale, customer-facing backend systems and enterprise-grade security - Clear communication and a real enjoyment of working with developers - A track record of owning delivery end to end Bonus: - Security for AI and LLM applications - Cloud-native experience (AWS or GCP, Kubernetes, Terraform, IAM, networking, Linux internals) - Experience in regulated environments (SOC 2, ISO 27001, PCI, HIPAA) - Not required: Compliance certifications, incident response experience, a traditional security background, or prior domain knowledge. We care about what you have built and shipped, and open source work or conference talks are welcome evidence of that. LOCATION This role is remote and can be executed globally. However, to facilitate working with the Security Team, we prefer candidates based in GMT to GMT+3 or UK. If you prefer, you can work from our offices in Dublin, London or Warsaw We are an equal opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses.

Location: Portugal Workplace: remote *ALL CANDIDATES MUST BE LOCATED IN PORTUGAL* About Intermedia Are you looking for a company where YOUR VOICE is heard? Where you can MAKE A DIFFERENCE? Do you THRIVE in a FAST-PACED work environment? Do you wake every morning EXCITED to work with GREAT PEOPLE and create SUCCESS TOGETHER? Then Intermedia is the place for you. Intermedia has established itself as a leading provider of cloud communications and collaboration tech that allows companies to connect better. We have a strong track record of growth, profitability, and creating an environment where everyone matters. Everyone. While we are fast-paced and admittedly a bit intense, we promise that you won’t be bored. You will find Intermedia is a place where you can indulge your passion for creating and supporting great cloud technology. What’s more, we always look to promote from within and have many employees who have been with us 10, 15, and 20+ years! Culture at Intermedia is built on teamwork and transparency.  We hold each other accountable and always have each other’s back! Are you ready to make your mark? About the Role Intermedia has a wide portfolio of internally developed application software, ranging from web and desktop apps to lower level PBX solutions. Due to the growing demand for integrating security activities into diverse development processes, Intermedia is looking for an experienced and self-motivated Application Security Engineer to help us deliver built-in security to our products. As part of the Global Security team, you will support our company wide application security program, helping the company build secure products. You will be the voice of security for all things related to application security to our spectrum of engineering teams, guiding the architecture and execution of our SDLC throughout the enterprise. This position is an individual contributor role, reporting directly to the Manager, Application Security. What you will be doing: Perform design and architecture review of new features, suggest security requirements Collaborate with DevOps and engineering teams, advising on security features and best practices in SDLC Utilize static security scanning tools, review findings and coordinate remediation actions Perform ongoing manual security assessments Review the results of external penetration tests and communicate suggested fixes to development teams Provide on-demand support on application security topics Drive process improvement ideas Assist with vetting and intake of defects from 3rd party security researchers via our Bug Bounty program What you will bring to the role: 3 - 5 years of experience in the application security field Bachelors or Master Degree in related field of expertise Knowledge of secure coding best practices and industry standards (such as OWASP) and the ability to apply them to different programming languages Familiarity with SDLC and DevSecOps concepts and hands-on experience in implementing them Knowledge and/or hands on experience with identifying A.I. threats in a security landscape Experience in using static and dynamic security scanning tools (such as BurpSuite, ZAP, and Snyk, or other related technologies) Experience with programming languages such as Python is preferred Ability to explain application security threats and mitigation options to both developers and project managers Good communication skills in written and verbal English Experience and/or knowledge in securing applications within cloud platforms (AWS, Azure) and containerized environments (Docker, Kubernetes) Participation in CTF challenges and bug-bounty programs Diversity, Inclusion, and Equal Opportunity We hire, promote, and compensate employees based on their ability to perform their job responsibilities, without regard to race, color, creed, religion, sex, gender, marital status, national origin, ancestry, age, citizenship, physical or mental disability, sexual orientation, or any other basis protected by applicable law (collectively referred to in our Code of Conduct as “Protected Classes”). We do not tolerate employment discrimination in the workplace, and we are committed to making reasonable accommodations for identified disabilities or other limitations as required by all applicable laws. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Location: United Kingdom Workplace: remote About Intermedia Are you looking for a company where YOUR VOICE is heard? Where you can MAKE A DIFFERENCE? Do you THRIVE in a FAST-PACED work environment? Do you wake every morning EXCITED to work with GREAT PEOPLE and create SUCCESS TOGETHER? Then Intermedia is the place for you. Intermedia has established itself as a leading provider of cloud communications and collaboration tech that allows companies to connect better. We have a strong track record of growth, profitability, and creating an environment where everyone matters. Everyone. While we are fast-paced and admittedly a bit intense, we promise that you won’t be bored. You will find Intermedia is a place where you can indulge your passion for creating and supporting great cloud technology. What’s more, we always look to promote from within and have many employees who have been with us 10, 15, and 20+ years! Culture at Intermedia is built on teamwork and transparency.  We hold each other accountable and always have each other’s back! Are you ready to make your mark? About the Role Intermedia has a wide portfolio of internally developed application software, ranging from web and desktop apps to lower level PBX solutions. Due to the growing demand for integrating security activities into diverse development processes, Intermedia is looking for an experienced and self-motivated Application Security Engineer to help us deliver built-in security to our products. As part of the Global Security team, you will support our company wide application security program, helping the company build secure products. You will be the voice of security for all things related to application security to our spectrum of engineering teams, guiding the architecture and execution of our SDLC throughout the enterprise. This position is an individual contributor role, reporting directly to the Manager, Application Security. What you will be doing: Perform design and architecture review of new features, suggest security requirements Collaborate with DevOps and engineering teams, advising on security features and best practices in SDLC Utilize static security scanning tools, review findings and coordinate remediation actions Perform ongoing manual security assessments Review the results of external penetration tests and communicate suggested fixes to development teams Provide on-demand support on application security topics Drive process improvement ideas Assist with vetting and intake of defects from 3rd party security researchers via our Bug Bounty program What you will bring to the role: 3 - 5 years of experience in the application security field Bachelors or Master Degree in related field of expertise Knowledge of secure coding best practices and industry standards (such as OWASP) and the ability to apply them to different programming languages Familiarity with SDLC and DevSecOps concepts and hands-on experience in implementing them Knowledge and/or hands on experience with identifying A.I. threats in a security landscape Experience in using static and dynamic security scanning tools (such as BurpSuite, ZAP, and Snyk, or other related technologies) Experience with programming languages such as Python is preferred Ability to explain application security threats and mitigation options to both developers and project managers Good communication skills in written and verbal English Experience and/or knowledge in securing applications within cloud platforms (AWS, Azure) and containerized environments (Docker, Kubernetes) Participation in CTF challenges and bug-bounty programs Diversity, Inclusion, and Equal Opportunity We hire, promote, and compensate employees based on their ability to perform their job responsibilities, without regard to race, color, creed, religion, sex, gender, marital status, national origin, ancestry, age, citizenship, physical or mental disability, sexual orientation, or any other basis protected by applicable law (collectively referred to in our Code of Conduct as “Protected Classes”). We do not tolerate employment discrimination in the workplace, and we are committed to making reasonable accommodations for identified disabilities or other limitations as required by all applicable laws. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Location: Москва Workplace: Гибрид, Удаленно, Офис RWB — международная технологическая группа компаний, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. Мы развиваем одну из крупнейших цифровых экосистем, объединяя электронную коммерцию, финтех, логистику, рекламу, путешествия, здоровье и другие направления. Наши технологии помогают людям решать повседневные задачи, а предпринимателям — находить новые возможности для роста. Вместе с масштабным развитием IT направления Wildberries и Russ развивает информационную безопасность. Мы решаем сложные и разнообразные задачи: от повышения защищенности каждого сервиса до развития безопасности в рамках всей нашей инфраструктуры. Мы ищем сильного лидера с инженерным бэкграундом, который возглавит направление информационной безопасности в бизнес-линии RWB. В этой роли вы будете выступать в качестве mini CISO бизнес-линии: отвечать за стратегию развития ИБ, управление рисками и реализацию ключевых инициатив по повышению защищенности продуктов и инфраструктуры. Вам предстоит стать ключевым партнером для CTO, технических лидеров и бизнеса, выстраивая эффективное взаимодействие с профильными командами ИБ и находя баланс между требованиями безопасности и бизнес-целями. Нам важен кандидат, который сочетает сильную техническую экспертизу в Infrastructure Security и/или Application Security со стратегическим мышлением, лидерскими и управленческими навыками. Способный выстраивать процессы, принимать решения и брать ответственность за результат. Обязанности Развивать безопасность бизнес-линии: формировать стратегию, дорожную карту и приоритеты ИБ с учетом бизнес-целей, технологического ландшафта и актуальных угроз Управлять рисками ИБ: выявлять и оценивать риски, определять приоритеты и обеспечивать их снижение до приемлемого уровня Внедрять Security by Design: участвовать в проектировании архитектуры продуктов и систем, формировать требования безопасности и контролировать их реализацию Лидировать инициативы ИБ: координировать работу команд безопасности, разработки и инфраструктуры, развивать процессы и обеспечивать внедрение защитных решений Выстраивать партнерство с CTO и бизнесом: переводить технические риски на язык бизнес-последствий, согласовывать приоритеты и обосновывать инвестиции в безопасность Развивать метрики ИБ: оценивать уровень защищенности, формировать KPI и обеспечивать прозрачность рисков и результатов для руководства Обеспечивать соответствие требованиям ИБ: адаптировать корпоративные стандарты и регуляторные требования к специфике бизнес-линии, контролировать их выполнение Повышать устойчивость к киберугрозам: участвовать в анализе инцидентов, выявлять корневые причины и обеспечивать реализацию системных улучшений Требования Опыт работы в ИБ от 5 лет, включая практический опыт в Infrastructure Security и/или Application Security и управление комплексными инициативами Понимание современных ИТ-технологий: архитектуры распределенных систем, инфраструктурных и облачных решений, процессов разработки и эксплуатации ПО Знание технологий и средств защиты: FW/NGFW, WAF, IDS/IPS, NDR, Anti-DDoS, SIEM, EDR/XDR, IAM/PAM, DLP, Vulnerability Management и др. Опыт обеспечения безопасности продуктов и инфраструктуры: архитектурное ревью, моделирование угроз, формирование требований ИБ и контроль внедрения защитных мер Знание современных подходов к ИБ: Security by Design, Zero Trust, DevSecOps, SSDLC, Shift Left и опыт их практического применения Опыт управления рисками ИБ: оценка и приоритизация рисков, разработка мер по их снижению и контроль реализации Опыт построения процессов ИБ: управление кросс-функциональными инициативами, координация команд и контроль достижения результатов Развитые лидерские и коммуникационные навыки: умение выстраивать партнерские отношения с руководителями ИТ и бизнеса, аргументировать решения и согласовывать приоритеты Стратегическое и аналитическое мышление: опыт разработки метрик ИБ, формирования планов развития и презентации результатов руководству Знание отраслевых стандартов и регуляторных требований в области информационной безопасности и практики их применения Будет преимуществом: опыт работы в крупных продуктовых компаниях с распределенной архитектурой, а также опыт обеспечения безопасности мобильных приложений и интеграций с внешними партнерами Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

• Руководство функцией информационной безопасности компании: организация работы подразделения, координация деятельности и контроль эффективности процессов обеспечения ИБ. • Высшее образование в области информационной безопасности, информационных технологий или смежных технических направлений.

Location: Tallinn Workplace: OnSite Restream is looking for a talented Security Engineer to join us to solve complex challenges and build world-class products. In this role, you will conduct architecture security reviews, application testing, penetration testing, and work with the engineering team, security researchers, and third-party vendors to ensure the security of our systems as we rapidly scale our product and organization. You understand the importance of simplicity and reliability, and you calculate the impact of every decision on each. We believe in small teams where each member contributes significant value. What You'll Do - Perform application and penetration testing. - Work with engineers to analyze systems, threat model new features, and create responsive controls to ensure end-to-end customer protection. - Work with third-party vendors to perform annual application and penetration testing reports. - Maintain, and grow our private bug bounty program; lead the transition to a public bug bounty program. - Give and receive code review feedback from the team. - Maintain a pulse on emerging technologies and discover hidden opportunities in our environment. - Ensure security and resilience of Restream production infrastructure. What We Look For - A scrappy, entrepreneurial attitude that gets high-quality projects done quickly. - Solid knowledge of web applications vulnerabilities and attack vectors. - Experience manually testing web applications, performing penetration testing, and using automated tools for reconnaissance and discovery. - Experience with scripting languages and at least one general-purpose programming language. Node.JS http://Node.JS (TypeScript) or Rust would be a plus but are not a requirement. - Strong written and verbal communication skills. - Self-directed, analytical, and work well in a team environment. - Passionate about keeping Restream customers and employees safe online. Back in 2015, Restream was founded in Ukraine. We had a burning passion for helping creators to be seen and heard. As the #1 multistreaming solution, Restream inspires over 10 million people worldwide to share their stories through live video and follow their dreams. We believe that a small but highly driven and focused team can make a lasting impact on people’s lives. What We Offer - A startup environment and a flat company structure - Work closely with founders and team to build and grow the product - Opportunity to make an impact on the evolution of the product - Ability to create something that influences people's lives - Equity packages for you to truly be a part of the Restream journey - The tech you need to get your job done