Вакансии

Location: Poland; Bulgaria On behalf of SafetyTech Client #1 , SD Solutions is looking for a highly motivated and technically proficient Vulnerability Researcher to join our security research division . SD Solutions is a staffing company operating globally. Contact us to get more details about the benefits we offer. We are seeking a highly motivated and technically proficient Vulnerability Researcher to join our security research division. This role is dedicated to determining the true intent behind cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious, with a focus on vulnerability research, exploit development, and reverse engineering. You need to be independent, attentive to details, organized, eager to learn new things, and eager to research and solve complex problems. Responsibilities: Review cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious Determine the underlying intent and goal behind each prompt, and assess whether the user is pursuing a legitimate purpose or an intent to cause harm Apply deep domain expertise to judge the technical context, specificity, and real-world uplift a response would give an attacker Annotate each prompt with an intent label and a clear written rationale, following the project guidelines Independently annotate the same prompts as a second researcher; cases where researchers disagree are escalated to a reviewer Flag ambiguous cases, emerging attack techniques, and gaps in the guidelines, and help improve them Requirements: Minimum of 5 years of proven, hands-on experience in vulnerability research and reverse engineering Proven ability to discover vulnerabilities through fuzzing, static and dynamic analysis, and patch diffing Exploit development experience, including memory corruption, heap exploitation, ROP, and mitigation bypasses (ASLR, DEP, CFI) Fluent use of IDA, Ghidra, Binary Ninja, and debuggers (WinDbg, GDB, LLDB) on x86/x64 and ARM binaries Understanding of the CVE lifecycle, n-day versus 0-day work, and how public PoCs are weaponized Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation Clear written communication in English, with the ability to document your reasoning concisely Nice to have: OSED, OSEE, GIAC GXPN Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research About the company: A company building specialized evaluation infrastructure for AI safety and robustness testing. Their platform simulates adversarial conditions used by AI development teams to validate agent behavior before deployment. Currently expanding a freelance contributor pool for scenario and environment development. By applying for this position, you agree to the terms outlined in our Privacy Policy. Please take a moment to review our Privacy Policy https://sd-solutions.breezy.hr/privacy-notice , and make sure you understand its contents. If you have any questions or concerns regarding our Privacy Policy, please feel free to contact us.

Location: Warsaw, Poland; Prague, Czechia; Sofia, Bulgaria; Bucharest, Romania; Madrid, Spain; Tbilisi, Georgia CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: cloudlinux.com Imunify360 Security Suite is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use solution with the six-layer approach to security delivers comprehensive and complete attack prevention. We are looking for a Lead Security Engineer - Vulnerability Response to join our Web Protection Team. The challenge ahead When a critical vulnerability in a popular web application or WordPress plugin goes public, attackers start exploiting it within hours. Most site owners can't patch that fast. We want our customers protected before the first attack reaches them, and we want them to know it. That's the challenge we're hiring for: AI-driven vulnerability response. Build and run a pipeline that detects new high and critical vulnerabilities, generates WAF rules with AI assistance, validates them, and ships them to production in a short window. Protection plus public announcement, both automated. The same pipeline that ships the rule also produces the public advisory. Every critical vulnerability we cover is announced soon after the rule ships, so customers and the market see that Imunify closed it first. Build on what works. An AI-assisted pipeline already runs for our WordPress protection plugin. The first big project is to extend this approach to ModSecurity/Coraza WAF rules. Speed without breaking sites. On shared hosting, a rule that blocks legitimate traffic is a customer incident. Fast and precise both matter. Make it measurable. Time-to-protection, coverage of critical vulnerabilities, and false-positive rate are the numbers this role owns. About the role You will own the vulnerability response pipeline end to end and be its main builder. You combine deep web application security expertise with strong automation skills, and you think about the product: what customers need, what to measure, what to build next. You'll lead a small team of security analysts and work closely with automation, QA, and marketing. What you'll do Design and build the AI-driven pipeline from disclosure to announcement: vulnerability intake, triage, rule drafting, testing, release, and the public advisory. Lead the extension of our existing WordPress-plugin pipeline to ModSecurity/Coraza rules. Write and review WAF rules (ModSecurity/SecLang) for real-world web vulnerabilities. Build test harnesses that check rules against exploits and real traffic before release. Lead and mentor security analysts: set priorities, review their work, remove blockers. Define and track time-to-protection, coverage, and false-positive rate, and improve them. Automate advisory generation as part of the pipeline, and agree the format and review flow with marketing. Requirements What we're looking for: 5+ years in web/application security: vulnerability research, detection engineering, WAF engineering, or similar. Deep understanding of web attack classes (SQLi, XSS, RCE, auth bypass, path traversal, file upload, deserialization) and how to detect them in HTTP traffic. Hands-on experience writing WAF rules (ModSecurity/SecLang, OWASP CRS, or similar) and regular expressions. Able to read PHP code and understand a vulnerability from an advisory or a patch diff. Strong Python: you've built automation pipelines that run in production. CI/CD and automated testing. Hands-on daily use of AI/LLM tools; you know where to trust them and how to verify their output. Proven track record of leading a technical project end to end. Product mindset: you reason about customer impact, not only technical correctness. Upper-intermediate English or better. Nice to have: WordPress ecosystem security: plugin vulnerabilities, vulnerability feeds (Wordfence, Patchstack, WPScan), CVE credits or bug bounty. Coraza or other WAF engines. Exploit analysis or threat intelligence background. Linux server administration, hosting industry. Personal skills: Strong ownership: you take a goal, not a task list. See the whole process and find the bottleneck, not only fix individual issues. Communicate clearly and raise risks early. Calm under pressure: critical vulnerabilities don't wait for working hours. Comfortable making decisions with incomplete information. Benefits What's in it for you? A focus on professional development. Interesting and challenging projects. Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide. Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. Compensation for private medical insurance. Co-working and gym/sports reimbursement. Budget for education. The opportunity to receive a reward for the most innovative idea that the company can patent. By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.

Location: Remote - Colombia ; Remote - Costa Rica ; Remote - Mexico About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $136M ARR and is the leading specialized storage cloud, managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We’re seeking a Vulnerability Management Engineer to join our team! About the Role The Vulnerability Management Engineer drives risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies. The role combines vulnerability data, asset and configuration intelligence, application-security testing, threat intelligence, and AI-assisted analysis to determine whether vulnerabilities are reachable, exploitable, and likely to represent an imminent organizational threat. Key Responsibilities Correlate threat intelligence and vulnerability findings with asset inventory, software configuration, system configuration, application testing, network exposure, ownership, and business criticality. Assess exploitability and reachability rather than relying on vulnerability severity alone. Incorporate exploit prediction, known exploitation, open-source threat intelligence, adversary activity, and environmental context into prioritization. Determine whether exposure requires immediate incident response or remediation under established operational objectives. Use AI-assisted workflows to ingest and correlate vulnerability intelligence against the organization's actual technology configuration while independently validating conclusions. Partner with Red Team to validate practical exploitability of significant vulnerabilities. Identify compensating controls such as configuration changes, access restrictions, segmentation, or filtering when immediate patching is impractical. Automate vulnerability ingestion, analysis, prioritization, remediation tracking, mitigation, and verification where appropriate. Qualifications Experience with enterprise vulnerability or exposure management. Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies. Experience interpreting vulnerability intelligence and assessing practical exploitability. Knowledge of risk-based prioritization techniques including CVSS, exploit prediction, known-exploitation intelligence, and environmental context. Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, endpoint, or related security data. Experience with scripting, automation, or data analysis. Familiarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation is preferred. Strong understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE. Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, MITRE ATLAS and MAESTRO. At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here. At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

Location: Remote, Canada; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Security Analyst on GitLab’s Product Security Vulnerability Operations team, you will help protect GitLab customers by triaging security reports, supporting vulnerability management operations, and coordinating clear communications with security researchers, customers, and internal teams. You will work closely with PSIRT engineers, Vulnerability Management, Security Engineering, Legal, Customer Success, Support, and Communications. This role is an excellent opportunity for an early-career security prfessional who is curious, organized, detail-oriented, and excited to build expertise in product security response. This role is open to candidates across North America, though we encourage applications from those based on the West Coast US or West Coast Canada (British Columbia) as the team is looking to expand coverage in the Pacific Time Zone. What you’ll do Triage incoming bug bounty reports, including reviewing report quality, validating findings, assessing potential impact, identifying duplicates, and routing reports to the appropriate teams. Triage vulnerabilities identified through vulnerability management activities and help track them through assessment, remediation, and closure. Work with PSIRT engineers and development teams to gather technical details, reproduce issues, and clarify affected products, versions, and configurations. Support severity assessment using frameworks and terminology such as CVE, CVSS, CWE, and OWASP. Communicate professionally and respectfully with security researchers participating in coordinated vulnerability disclosure and bug bounty programs. Support GitLab’s role as a CVE Numbering Authority by preparing information for CVE assignment, maintaining accurate records, and helping coordinate CVE-related activities. Represent GitLab as an acting CNA representative in CVE-related discussions and operations, escalating questions and coordinating with the appropriate internal and external stakeholders. Draft and coordinate customer-facing communications about security vulnerabilities, fixes, mitigations, and release information in partnership with PSIRT, Legal, Customer Success, Support, and Corporate Communications. Maintain accurate issue records, timelines, researcher communications, remediation status, and follow-up actions. Monitor queues and operational metrics to identify trends, aging items, recurring issues, and opportunities to improve response quality and consistency. Create and improve runbooks, procedures, templates, and other documentation that make vulnerability handling more efficient and transparent. Participate in incident handoffs, root cause analysis documentation, lessons-learned activities, and product security reviews. Build technical and operational expertise in PSIRT, bug bounty, vulnerability management, and coordinated vulnerability disclosure. What you’ll bring Early-career experience or equivalent education in cybersecurity, software engineering, information technology, or a related field. Relevant internships, coursework, labs, research, customer support, or practical security projects are welcome. Foundational understanding of software vulnerabilities and security concepts, including web applications, APIs, CI/CD environments, authentication, and authorization. Familiarity with security terminology such as CVE, CVSS, CWE, OWASP Top 10, and coordinated vulnerability disclosure. Strong attention to detail and the ability to organize and prioritize multiple reports or work items. Clear written and verbal communication skills, with the ability to explain technical topics to both technical and non-technical audiences. Experience with a bug bounty or vulnerability disclosure platform such as HackerOne or Bugcrowd. Experience reviewing security reports, participating in capture-the-flag exercises, performing vulnerability research, or working with security tooling. Familiarity with CVE assignment, CNA processes, security advisories, or vulnerability databases. Nice to have: Basic scripting, log analysis, issue tracking, or data analysis experience; experience writing technical documentation, customer communications, support responses, or operational procedures. About the team The GitLab Product Security Vulnerability Operations is a globally distributed team that helps ensure GitLab delivers secure applications customers can trust. VulnOps serves as a central point of contact for external security researchers and helps govern the policies, processes, and guidelines used to address vulnerabilities in GitLab’s supported products. Team members collaborate across regions using documented processes, automation, and structured handoffs to support vulnerability resolution and ongoing operational improvements. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $115,000 — $150,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Обязанности: — Осуществлять контроль и оценку защищённости инфраструктуры компании; — Искать уязвимости на внешнем и внутреннем контуре компании автоматизированными и ручными средствами; — Проводить оценку и приоритизацию обнаруженных уязвимостей; — Писать рекомендации о методах устранения уязвимостей, разрабатывать стратегию информационной безопасности; — Осуществлять мониторинг информации об угрозах информационной безопасности из внешних источников (телеграм‑каналы, тематические форумы, порталы вендоров); — Тестировать новые решения в области оценки защищённости инфраструктуры; — Разрабатывать собственные скрипты для сканирования на критичные уязвимости; — Анализировать и оптимизировать процессы ИБ. Требования: — Опыт работы с автоматизированными средствами анализа защищённости (Nessus, Qualys, Max Patrol 8, RedCheck или Rapid7); — Знание OWASP Top 10 и методов обнаружения web‑уязвимостей; — Владение инструментами Kali Linux (Metasploit, Burp Suite, Nuclei и пр.); — Уверенное знание операционных систем Windows/Linux (на уровне администратора), сетевых технологий, инфраструктурных служб и сервисов (Active Directory, DNS, DHCP, Terminal Services и т.д.); — Понимание рисков информационной безопасности и возможных каналов утечек информации; — Обладание знаниями в области безопасности сетей, протоколов и ОС.

Location: Remote, Canada; Remote, Israel; Remote, United Kingdom GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As an Intermediate Software Engineer on GitLab’s Vulnerability Management team, you’ll help build the core security workflows that GitLab Ultimate customers use to triage, prioritize, and act on vulnerabilities. You’ll work primarily in Ruby on Rails on backend systems, including security dashboards, vulnerability reports, and ingestion pipelines. You’ll take ownership of well-defined projects, solve technical problems with support from experienced team members, and collaborate with other engineers. You’ll also have opportunities to contribute beyond the backend when the work requires it. You will join a fullstack team, working together with product managers, designers, and frontend engineers to solve problems across the Vulnerability Management domain. What you’ll do Develop and maintain backend features for GitLab’s vulnerability management workflows. Confidently ship features and improvements with minimal guidance and support from other team members; collaborate with the team on larger projects. Help improve the performance, reliability, and scalability of security data ingestion and reporting systems. Collaborate with frontend engineers and contribute across the stack when needed. Work with engineers across security teams as vulnerability data and workflows come together in Vulnerability Management. Collaborate with Product Management and Product Design to maintain a high bar for quality Craft code that meets our internal standards for style, maintainability, and best practices for a high-scale web environment Conduct code reviews within our Code Review Guidelines and ensure community contributions receive a swift response Recognize impediments to our efficiency as a team ("technical debt"), propose and implement solutions Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues. What you’ll bring Experience building and maintaining backend applications with Ruby on Rails. Experience delivering and maintaining software systems as part of a larger engineering team. The ability to investigate technical problems, ask for context when needed, and work toward a practical resolution. Experience working with relational databases such as PostgreSQL. Clear communication and collaboration skills in a distributed team. An interest in learning from others, sharing knowledge, and growing your technical skills. Frontend development experience, including JavaScript or Vue.js, is helpful. Experience with Elasticsearch, graph databases, vulnerability management, application security, or related transferable skills is helpful. About the team The Vulnerability Management team develops the core security workflows that help GitLab customers triage and manage vulnerabilities. The team owns areas including the security dashboard, vulnerability reports, and ingestion pipelines, and serves as an important interface for security-related features across GitLab. The team is focused on moving beyond lists of findings toward workflows that help customers prioritize and coordinate remediation. You’ll collaborate asynchronously with a small, distributed group and with related security teams, including the Agentic Security Flows team. How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Product Manager , you will own GitLab's Secret Detection offering and the Vulnerability Research function that produces the detection content across security products. Secret Detection is one of the highest-signal, highest-volume security capabilities on the platform. Leaked credentials are the most common initial access vector in real breaches, and as AI agents write, commit, and configure more of the software, the surface area for exposed secrets grows faster than the number of humans watching it. You will own the full loop: detect a secret with high precision, tell the customer whether it is still live, get it revoked, and prevent the next one from ever landing. In parallel, you will own vulnerability research as a product asset rather than a back-office function. The detection rules, advisory data, and malicious package and reference intelligence your team produces are what make GitLab's security scanners worth paying for, and they need to ship on a cadence with measurable quality. This is an outcome-owning role - you will carry adoption, retention, and revenue targets for your area and be expected to explain how your roadmap moves them. Some examples of our projects: Push protection and pre-receive blocking that stops a credential before it reaches a repository, without wrecking developer flow Secret validity checking and automated revocation partnerships with major cloud and SaaS token issuers Detection content pipelines that turn threat research into shipped rules, with precision and recall tracked per rule Intelligence-driven detection of malicious packages, dependencies, and references entering the software supply chain What you'll do Own the business outcomes for Secret Detection and Vulnerability Research, including adoption, expansion, competitive win rate, and revenue contribution. Bring a point of view on packaging and pricing, not just features. Set the strategy for the full secret lifecycle: prevention, detection, validation, revocation, and reporting across GitLab.com, Dedicated, and Self-Managed. Treat detection content as a product. Define how rules, advisories, and intelligence feeds are sourced, validated, versioned, and measured, and make quality visible to customers. Hold the line on detection quality. False positives are a product defect and you will own the metrics that prove precision is improving. Work at the level of the technology. Read the rule syntax, question the entropy heuristics, understand why a scanner missed something, and challenge engineering with informed alternatives. Use AI to compress the distance between question and answer. Pull your own data, prototype your own flows, synthesize research and competitive input yourself, and bring conclusions rather than requests for someone else to investigate. Build the case for where AI belongs in the product: triage, rule generation, remediation guidance, and reducing the human review burden per finding. Partner with engineering, security research, threat intelligence, Field, and GitLab's own Security team, who are one of your most demanding users. Communicate in writing, asynchronously, with enough precision that a distributed team can act without a meeting. What you'll bring Domain depth in application security, vulnerability management, or security research. You have worked on or adjacent to scanners, detection content, threat intelligence, or SDLC security tooling and you know how these products actually get evaluated in a bake-off. Technical credibility sufficient to earn the respect of a security engineering team. You do not need to have written the scanner, but you should be able to reason about detection logic, data pipelines, CI integration, and the tradeoffs between coverage and noise. Commercial reasoning. You start from revenue mechanics, buyer motion, and competitive displacement, then work inward to product decisions. Candidates who reason only from feature lists outward are not a fit. Evidence of using AI as a force multiplier in your own work: research, analysis, data pulls, prototyping, drafting. Consuming a chat assistant occasionally is not the same as restructuring how you work. Judgment under ambiguity. You bring structured options and a recommendation instead of escalating an open question. Bias for clarity. You can take a noisy, technical, politically contested problem and produce one page that everyone can align on. Bonus: hands-on background as a developer, security engineer, red teamer, or researcher; experience with credential and token ecosystems; experience commercializing a data or intelligence asset. About the team This role sits in GitLab's Security product management organization, which owns application security testing, vulnerability management, supply chain security, secrets management, and AI governance. The Security Section is central to GitLab's Ultimate tier and to the shift toward consumption-based product revenue, so the work is visible to senior leadership and directly tied to company results. You will work asynchronously with engineering, design, and research counterparts across multiple regions, and with the Field teams who take this to market. How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Remote - US Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . This is a seasoned engineer role in which you lead technical efforts across multiple teams or subsystems, owning system architecture and development across the stack. A Senior Software Engineer drives technical innovation, acts as a mentor and process advocate, driving improvements that scale beyond a single team. You will exercise high discretion over technical decisions and influence department-level business outcomes. You will set the architectural direction for the systems you own, make and document the key design tradeoffs, and provide strong leadership within and across scrum teams to deliver on that vision. Essential Duties and Responsibilities Proactively research, prototype, and introduce technologies and  system designs for green-field products. Lead the design of new systems and major changes to existing ones: write design docs, evaluate alternatives, and document tradeoffs and decisions (e.g., ADRs) Primary IC for green-field product, ensuring long-term code maintainability, readability, and extensibility. Continuously evolve team processes, driving scalable improvements in delivery, quality, and collaboration. API & Integration Design, develop, and maintain scalable and secure APIs, UIs and integration services. Implement RESTful, RPC, and event-driven APIs/UIs for internal and external systems. Collaborate with product, data, and platform teams to ensure seamless system interoperability. Manage API lifecycle including versioning, authentication, monitoring, and performance optimization. Develop and maintain integration pipelines between SaaS systems, data sources, and third-party applications. Troubleshoot integration issues, conduct root cause analysis, and implement fixes. Support continuous improvement through automation, observability, and best practices. Education, Experience, Knowledge, Skills, and Abilities 5+ years of experience of software development experience Strong proficiency in TypeScript and modern JavaScript. Extensive experience with React and JavaScript web development frameworks (Next.js preferred) Experience with ORM frameworks and relational databases, including data modeling and provenance tracking patterns (Prisma, Drizzle, PostgreSQL) Experience building long-running, fault-tolerant workflows with durable execution engines (Inngest, Temporal, or similar) Hands-on experience integrating state-of-the-art LLMs into production systems, including agent design, tool use, and evaluation Strong understanding of integration patterns, and experiencing building external API integrations (pub/sub, webhook, ETL, etc.). Excellent debugging, analytical, and problem-solving skills. Preferred Experience Bachelor’s degree in Computer Science, Software Engineering, or related field. Working Conditions and Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time with travel to client sites Pay Range Disclosure At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business. The national estimate for the current base range for the position of Senior Full Stack Engineer is: $140,400 - $175,500. This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

Location: Limassol, Cyprus Workplace: hybrid We are looking for an Application Security Engineer in the AppSec team. As a Senior Application Security Engineer at inDrive, you will own whole areas of our AppSec program, from security requirements and design reviews to controls that work in production. You will work with product, platform and infrastructure teams on new architecture, AI systems and the security of our apps and services. The role fits a hands-on engineer who reviews code and architecture, leads work across several teams and makes security decisions based on data. Key Responsibilities Own one or more areas of the AppSec program end to end, including the plan, the risks and the metrics. Run security design reviews and threat modeling of new features, services and AI systems, and defend security requirements at the architecture committee. Assess the security of web, mobile and API applications and find variants of confirmed vulnerabilities across other services. Coordinate external security assessments and bug bounty findings, from triage and prioritisation with teams to fix verification. Design secure authentication and authorization between users, services and internal tools together with platform teams. Choose, pilot and tune security tools, and keep only those that pay off in real findings. Turn incidents and assessment results into lasting controls, policies and secure defaults for developers. Consult development teams on complex security issues and take shifts in AppSec duty for Critical and High incidents. Skills, Knowledge and Expertise Higher education in IT, preferably in information security. Knowledge of mobile application security on Android and iOS, client-server trust, app integrity and protection against bots and account takeover. Deep knowledge of web and API security, including authentication and authorization flaws, SSRF, injections and business logic issues, and the ability to find variants of a vulnerability class across many services. Strong understanding of identity and access, OAuth 2.0, OIDC, JWT, signing key rotation, mTLS, service-to-service authentication and SSO. Understanding of security risks of AI systems and LLM agents, such as prompt injection, excessive tool permissions and agent access to sensitive data, and practical use of AI in your own security work. Practical understanding of cloud-native infrastructure, Kubernetes, containers, API gateways and AWS. Experience in threat modeling and security design review of new features and architecture. Understanding of vulnerability management and risk, including severity, SLA, compensating controls and risk acceptance. Ability to read and review code in at least one language, preferably Golang. Track record of leading projects with two or more teams from a requirement to a verified fix, and clear written English. Experience with secrets and key management, rotation and response to credential leaks. Nice to have Knowledge of software supply chain security, dependencies, CI/CD pipelines and source control platform hardening. Experience tuning SAST, DAST and SCA tools for precision and judging a tool by noise and cost per real finding. Why join us Help us challenge injustice by creating fair choices for millions of people across 47 countries. Develop your professional skills with access to mentoring, career consulting, and learning programs. Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program. Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects. Work alongside people who take initiative, speak openly, and challenge themselves to grow. Improve your language skills through co-financed courses and internal speaking clubs. Annual salary from 70 700 EUR gross. Final benefits may vary depending on the location.

Location: Limassol, Cyprus Workplace: hybrid We’re looking for a Senior DevSecOps Engineer to help us take our security work further through automation across SOC and DevSecOps processes. You’ll join AppSec Cheetahs, our team of ethical hackers. We look for vulnerabilities, strengthen application security, and share our knowledge with other engineers. In this role, you’ll build and improve security solutions, develop automation with Python, create and maintain CI/CD pipelines, and explore AI integrations to make security processes more efficient. It’s a great opportunity to combine your DevOps and Python expertise with Application Security, work on real security challenges, and have a direct impact on the security of our products. Key Responsibilities Integrate Security into CI/CD: Design, build, and maintain a secure CI/CD pipeline by integrating static (SAST), dynamic (DAST), and interactive (IAST) application security testing tools. Automation: Develop and implement automation for security processes, vulnerability management, and compliance checks to ensure continuous security feedback. Infrastructure as Code (IaC) Security: Secure IaC scripts (e.g., Terraform, CloudFormation) by scanning for misconfigurations and vulnerabilities before deployment. Tooling & Maintenance: Evaluate, implement, and manage security tools for vulnerability scanning, monitoring, and compliance. Mentorship & Advocacy: Act as a security champion within the organization. Mentor developers and operations teams on secure coding practices and DevSecOps principles. Skills, Knowledge and Expertise Experience: 5+ years of experience in a DevOps, Security Engineering, or a similar role, with at least 2 years focused specifically on DevSecOps. CI/CD Expertise: Proven experience with CI/CD tools such as Jenkins, GitLab CI, any else. Scripting Proficiency: Strong scripting skills in languages like Python, Bash, or Go for automation tasks. Cloud Platform Knowledge: Knowledge of at least one major cloud provider (AWS, Azure, or GCP) and its security services (e.g., AWS Security Hub, Azure Security Center, GCP Security Command Center). IaC Skills: Experience with Infrastructure as Code tools like Terraform, Ansible, or CloudFormation. Container Security: Strong understanding of containerization technologies (Docker, Kubernetes) and their security challenges, including securing container images and runtime environments. Security Tools: Familiarity with a wide range of security tools, such as SAST (e.g., SonarQube, Checkmarx), DAST (e.g., OWASP ZAP, Burp Suite), and vulnerability scanners (e.g., Trivy, Nessus). Soft Skills: Problem solving abilities, strong communication skills, and the ability to work collaboratively across different teams. Why join us Help us challenge injustice by creating fair choices for millions of people across 47 countries. Develop your professional skills with access to mentoring, career consulting, and learning programs. Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program. Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects. Work alongside people who take initiative, speak openly, and challenge themselves to grow. Improve your language skills through co-financed courses and internal speaking clubs. Annual salary from 70 700 EUR gross. Final benefits may vary depending on the location.

Location: Limassol, Cyprus Workplace: hybrid You’ll be responsible for auditing and hardening cloud and bare-metal systems, securing CI/CD pipelines, and designing robust security controls for our Kubernetes-based environments. This role requires deep technical expertise in cloud security (AWS), infrastructure as code, and vulnerability management, as well as the ability to collaborate on architectural decisions and drive security improvements across infrastructure layers.. Key Responsibilities Perform regular security audits across cloud, bare-metal, CI/CD, auth systems, and logging infrastructure. Support external security audits and penetration tests; manage remediation of findings and misconfigurations. Contribute to architectural design of infrastructure services, providing security expertise throughout the lifecycle. Build and maintain vulnerability scanning processes using commercial and open-source tools; support remediation efforts. Maintain and evolve the internal security infrastructure using AWS, Kubernetes, and modern DevOps practices. Skills, Knowledge and Expertise 3+ years of hands-on experience in infrastructure security, including vulnerability management across cloud and on-prem environments. Proficiency with cloud platforms (especially AWS) and Kubernetes, including applying security best practices and managing secure infrastructure. Strong knowledge of IaC tools (Terraform, Terragrunt, Ansible) and CI/CD pipeline security, using tools like GitHub Actions or GitLab CI. Automation skills using scripting languages such as Python or Bash, with experience building tools and scripts to improve security operations. Familiarity with security compliance and monitoring, including secret management (e.g., Vault), SIEM tools, and standards like ISO 27001 or PCI DSS. Why join us Help us challenge injustice by creating fair choices for millions of people across 48 countries. Develop your professional skills with access to mentoring, career consulting, and learning programs. Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program. Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects. Work alongside people who take initiative, speak openly, and challenge themselves to grow. Improve your language skills through co-financed courses and internal speaking clubs. Annual salary from 70 700 EUR gross Final benefits may vary depending on the location.

Location: Annapolis Junction, MD, United States Job Title Mid‑Level Systems Integration Engineer (Linux, Unix, C) Why IDS? IDS believes in resolving conflict, building innovative approaches to do so. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world. IDS tailors solutions for a diverse range of government, military, nonprofit, and public‑sector clients. Locations Annapolis Junction, MD Shifts Available Please note, candidates must be flexible. Shift times are general hours; some projects may require earlier or later reporting based on customer requirements. Job Description IDS is seeking a Mid‑Level Systems Integration Engineer to support enterprise computer systems and network operations. The engineer will manage and analyze system and network environments, translate user needs into technical solutions, support system migrations, and evaluate technologies to enhance agency standard solutions. Key Duties • Manage enterprise computer systems and networks by analyzing technical issues and implementing corrective actions • Monitor and interpret visual outputs indicating operational status of systems and network infrastructure • Translate user requests into technical diagnoses and implement solutions to meet operational needs • Develop and support migration strategies to transition customers to new architectures or technologies with minimal impact • Evaluate new technologies and equipment for integration into agency standard solutions Requirements • Bachelor’s degree with five (5) years of relevant experience, or Master’s degree with three (3) years, or Associate’s degree with seven (7) years, or high school diploma/GED with nine (9) years of relevant experience • Degree in Network Engineering, Systems Engineering, Information Technology, or related field • Strong experience with Linux systems • Experience in systems administration, network administration, application administration, or IT support • Experience supporting hardware installation such as servers or network infrastructure • Experience configuring storage solutions such as network‑attached storage • Experience implementing security best practices including PKI certificate generation, deployment, and maintenance • Knowledge of Unix shell scripting languages such as Bash, Bourne, or C • Must possess an IAT‑I certification (e.g., Security+ CE) • Relevant experience must include computer or information systems design or development, programming, information or cyber security, network security, vulnerability analysis, computer forensics, information assurance, or systems engineering • Experience in network or system administration • Active TS/SCI with Polygraph Compensation • Salary range: $110,000 – $130,000 • Benefits

Location: Annapolis Junction, MD, United States Job Title Senior‑Level AI Engineer (Python) Why IDS? IDS believes in resolving conflict, building innovative approaches to do so. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world. IDS tailors' solutions for a diverse range of government, military, nonprofit, and public‑sector clients. Locations Annapolis Junction, MD Shifts Available Please note, candidates must be flexible. Shift times are general hours; some projects may require earlier or later reporting based on customer requirements. Job Description IDS is seeking a Senior‑Level AI Engineer to support the AI and Emerging Technologies mission. The engineer will work closely with mission stakeholders to capture requirements, support structured planning, improve certification processes using AI/ML tooling, and develop AI‑enabled capabilities including fine‑tuning Large Language Models to enhance vulnerability identification and mitigation. Key Duties • Collaborate with technical leadership to design, develop, and maintain LLM orchestration frameworks • Integrate static analyzers, retrieval‑augmented generation (RAG) systems, and automated testing pipelines • Clean, transform, and vectorize documentation, source code, and test artifacts for LLM consumption • Design and implement database solutions to support RAG architectures, artifact storage, and audit trails • Work with systems engineers to architect and deploy networked AI tools within secure enclaves • Perform performance profiling, optimization, and scalability analysis of mission systems • Support security assessments and Authority to Operate (ATO) processes Requirements • Bachelor’s degree with eight (8) years of relevant experience, or Master’s degree with six (6) years, or Doctoral degree with four (4) years • Associate’s degree with ten (10) years of clearly related experience may be considered • Degree in Computer Science or a related field with substantial coursework in algorithms, data structures, programming languages, computer architecture, logic, and advanced mathematics • Proficiency in Python and AI/ML integration • Experience with LLMs, static analyzers, RAG frameworks, and relational and vector databases • Familiarity with Agile methodologies and tools such as Git, Jira, and Confluence • Relevant experience across the software development lifecycle • Active TS/SCI with Polygraph Compensation • Salary range: $155,000 – $175,000 • Benefits

Location: Annapolis Junction, MD, United States Job Title Mid‑Level Information Systems Security Officer (ISSO) Why IDS? IDS believes in resolving conflict, building innovative approaches to do so. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world. IDS tailors solutions for a diverse range of government, military, nonprofit, and public‑sector clients. Locations Annapolis Junction, MD Shifts Available Please note, candidates must be flexible. Shift times are general hours; some projects may require earlier or later reporting based on customer requirements. Job Description IDS is seeking a Mid‑Level Information Systems Security Officer to support the Signals Analysis Division. The ISSO will maintain compliance and strengthen the security posture of mission systems using the Risk Management Framework and will be responsible for managing eight to ten System Security Plans. Key Duties • Maintain appropriate operational security posture for assigned information systems • Support continuous monitoring to identify security non‑compliance, vulnerabilities, and risk conditions • Follow established security processes and support the information system continuous monitoring program • Perform regular audits of information systems • Assist the Information Systems Security Manager with preparation for periodic reaccreditation • Apply Defense‑in‑Depth principles across network and enterprise security architectures • Implement and assess controls using NIST 800‑53 and Risk Management Framework procedures • Support compliance with STE/STN requirements Requirements • Bachelor’s degree with five (5) years of relevant experience, or Master’s degree with three (3) years, or Doctoral degree with no required experience • Associate’s degree with seven (7) years of clearly related experience may be considered • Degree in Computer Science or a related field such as Engineering, Cyber Security, Information Assurance, Information Security, Information Systems, or Information Technology • Relevant experience in information or cyber security, network security, vulnerability analysis, penetration testing, computer forensics, systems engineering, or network/system administration • Completion of relevant military cyber training may be applied toward experience requirements • Strong written and verbal communication skills • Active TS/SCI with Polygraph Compensation • Salary range: $90,000 – $110,000 • Benefits

Location: Annapolis Junction, MD, United States Job Title Mid‑Level AI Engineer (Python) Why IDS? IDS believes in resolving conflict, building innovative approaches to do so. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world. IDS tailors solutions for a diverse range of government, military, nonprofit, and public‑sector clients. Locations Annapolis Junction, MD Shifts Available Please note, candidates must be flexible. Shift times are general hours; some projects may require earlier or later reporting based on customer requirements. Job Description IDS is seeking a Mid‑Level AI Engineer to support the AI and Emerging Technologies mission. The engineer will work closely with mission stakeholders to capture requirements, support structured planning, improve certification processes using AI/ML tooling, and develop AI‑enabled capabilities including fine‑tuning Large Language Models to enhance vulnerability identification and mitigation. Key Duties • Collaborate with technical leadership to design, develop, and maintain LLM orchestration frameworks • Integrate static analyzers, retrieval‑augmented generation (RAG) systems, and automated testing pipelines • Clean, transform, and vectorize documentation, source code, and test artifacts for LLM consumption • Design and implement database solutions supporting RAG architectures, artifact storage, and audit trails • Work with systems engineers to architect and deploy networked AI tools within secure enclaves • Perform performance profiling, optimization, and scalability analysis of mission systems • Support security assessments and Authority to Operate (ATO) activities Requirements • Bachelor’s degree with five (5) years of relevant experience, or Master’s degree with three (3) years, or Doctoral degree with no required experience • Associate’s degree with seven (7) years of clearly related experience may be considered • Degree in Computer Science or a related field with substantial coursework in algorithms, data structures, programming languages, computer architecture, and mathematics • Proficiency in Python and AI/ML integration • Experience with LLMs, static analyzers, RAG frameworks, and relational or vector databases • Familiarity with Agile development and tools such as Git, Jira, and Confluence • Relevant experience across the software development lifecycle • Active TS/SCI with Polygraph Compensation • Salary range: $105,000 – $125,000 • Benefits

Location: Fort Bragg, NC, United States Job Title Assistant IT Support Lead Why IDS? IDS believes in resolving conflict, building innovative approaches to do so. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world. IDS tailors solutions for a diverse range of government, military, nonprofit, and public-sector clients. Locations Fort Bragg, NC Shifts Available Please note, candidates must be flexible. Shift times are general hours; some projects may require earlier or later reporting based on customer requirements. Job Description IDS is seeking an Assistant IT Support Lead to support cybersecurity, Risk Management Framework (RMF), and information assurance activities. The selected candidate will assist with RMF package management, vulnerability assessment activities, cybersecurity compliance requirements, and the maintenance of system security documentation in support of Department of Defense information systems. Key Duties • Support management of DoD RMF packages within the Enterprise Mission Assurance Support Application (eMASS) system. • Conduct vulnerability scans using ACAS/Nessus and analyze scan results. • Develop and maintain RMF artifacts, including System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms). • Support cybersecurity and information assurance activities. • Support security incident response and handling activities. • Support security system design and implementation requirements. Requirements • Secret clearance. • Bachelor’s degree in Information Technology (IT) or Cybersecurity related field, or an Associate degree in Information Technology (IT) or Cybersecurity related field with five years of experience. • Current certification that meets the requirements for the DCWF Information Systems Security Officer at the Intermediate or Advanced proficiency level, such as CISSP or CISM. • Must complete a minimum of 20 hours of Continuous Professional Development (CPD) annually, or as required to maintain certifications, whichever is greater. • Demonstrated knowledge and skill in cybersecurity principles and methodologies. • Demonstrated knowledge and skill in risk management processes and frameworks. • Demonstrated knowledge and skill in network security architecture and protocols. • Demonstrated knowledge and skill in vulnerability assessment and penetration testing techniques. • Demonstrated knowledge and skill in security system design and implementation. • Demonstrated knowledge and skill in security incident response and handling. • Demonstrated knowledge and skill in compliance with relevant laws, regulations, and standards (e.g., NIST, FISMA, PCI DSS). • Two years' experience managing DoD RMF packages within the eMASS system. • Experience conducting vulnerability scans and analyzing results. • Experience developing and maintaining RMF artifacts. • Knowledge of operating system security (Windows and Linux). • Knowledge of network security, architecture, protocols, and technologies. • Experience conducting vulnerability scans with ACAS/Nessus and analyzing scan results. • Experience developing and maintaining RMF artifacts, such as the System Security Plan (SSP) and Plan of Action & Milestones (POA&M). Compensation • Competitive Hourly Pay • Benefits

Location: Fort Bragg, NC, United States Job Title Information Technology (IT) Support Lead Why IDS? IDS believes in resolving conflict, building innovative approaches to do so. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world. IDS tailors solutions for a diverse range of government, military, nonprofit, and public-sector clients. Locations Fort Bragg, NC Shifts Available Please note, candidates must be flexible. Shift times are general hours; some projects may require earlier or later reporting based on customer requirements. Job Description IDS is seeking an Information Technology (IT) Support Lead to oversee cybersecurity, information systems security, and IT operations supporting mission requirements. The selected candidate will provide leadership for technical teams, support cybersecurity program management, oversee complex datacenter environments, and ensure compliance with applicable DoD cybersecurity requirements, policies, and standards. Key Duties • Develop and maintain the organization's cybersecurity program. • Conduct risk assessments and develop mitigation strategies. • Oversee the implementation of security controls. • Monitor security systems and respond to security incidents. • Ensure compliance with applicable laws, regulations, and policies. • Provide security guidance and training to personnel. • Manage security-related projects and initiatives. • Collaborate with stakeholders to ensure the security of information systems and data. Requirements • Secret clearance. • Bachelor’s degree in an Information Technology (IT) related field or an associate degree in an Information Technology (IT) related field with ten years’ IT Lead experience. • Current certification that meets the requirements for the DCWF Information Systems Security Manager (722) at the Intermediate or Advanced proficiency level, such as CISSP or CISM. • Must complete a minimum of 20 hours of Continuous Professional Development (CPD) annually, or as required to maintain certifications, whichever is greater. • Demonstrated knowledge and skill in cybersecurity principles, methodologies, and best practices. • Demonstrated knowledge and skill in risk management frameworks (e.g., NIST RMF). • Demonstrated knowledge and skill in national and international cybersecurity laws, regulations, and standards. • Demonstrated knowledge and skill in network security architecture and technologies. • Demonstrated knowledge and skill in security incident response and handling procedures. • Demonstrated knowledge and skill in vulnerability management and penetration testing methodologies. • Demonstrated knowledge and skill in security assessment and authorization processes. • Demonstrated knowledge and skill in disaster recovery and business continuity planning. • Demonstrated knowledge and skill in security awareness training and education. • Demonstrated knowledge and skill in DoD cybersecurity policies and guidance. • Minimum of four years' experience in a formal supervisory role managing technical teams responsible for military information systems. • Demonstrated experience in program management, including task delegation, performance tracking, and personnel development. • Demonstrated experience overseeing the planning, implementation, and maintenance of complex datacenter environments, including server virtualization, network infrastructure, and storage. Compensation • Competitive Hourly Pay • Benefits

Location: Fort Bragg, NC, United States Job Title Network Administrator Why IDS? IDS believes in resolving conflict, building innovative approaches to do so. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world. IDS tailors solutions for a diverse range of government, military, nonprofit, and public-sector clients. Locations Fort Bragg, NC Shifts Available Please note, candidates must be flexible. Shift times are general hours; some projects may require earlier or later reporting based on customer requirements. Job Description IDS is seeking a Network Administrator to support the operation, maintenance, and security of DoD network environments. The selected candidate will support network administration activities, configure and maintain network infrastructure, and assist with network security and troubleshooting requirements in support of mission operations. Key Duties • Support network administration activities. • Configure and maintain network devices, including routers, switches, and firewalls. • Support VPN administration and maintenance. • Perform network troubleshooting and diagnostics. • Support network security practices and technologies. • Utilize network systems management principles and tools. Requirements • Secret clearance. • Associate degree in a related technical discipline or equivalent military training (e.g., 25B/H/N). • Current certification that meets the requirements for DCWF Network Operations Specialist (441) at the Intermediate proficiency level. • Acceptable certifications include Security+, CCNA, or Network+. • Demonstrated knowledge of computer networking concepts and protocols. • Demonstrated knowledge of cyber threats and vulnerabilities. • Demonstrated knowledge of network security principles and architecture. • Demonstrated knowledge of network systems management principles and tools. • Demonstrated knowledge of network troubleshooting and diagnostics. • Demonstrated knowledge of configuration and maintenance of network devices (routers, switches, firewalls). • Demonstrated knowledge of network security practices and technologies (VPNs, firewalls, intrusion detection systems). • Three years' experience in a senior technical role on a DoD network. • Extensive hands-on experience configuring and managing Cisco network infrastructure (switches, routers, firewalls) and VPNs. Compensation • Competitive Hourly Pay • Benefits