Senior Information Security Risk Analyst

Work on Engineering Systems to design, implement, and maintain code signing and encryption frameworks, automate build/test/sign/deploy pipelines, manage certificate lifecycles, and troubleshoot CI/CD and packaging failures. Requires 5+ years of software engineering or DevOps/build engineering experience, strong Python and CI/CD platform skills, PKI knowledge, and U.S. citizenship or permanent resident status.

Conduct cloud-focused Red Team/Blue Team (CRTBT) engagements, support customers' SOC/IR in real-time threat hunting, detection engineering and incident response, manage engagements end-to-end, and identify enhancements to adversary emulation and cloud detection capabilities. Requires 5+ years cybersecurity experience, cloud platform experience (AWS/Azure/GCP/Microsoft Entra ID/M365), scripting/automation skills, and client-facing consulting experience.

Seeking a GRC Automation Engineer to design, build, and evaluate AI-enabled automations and workflows for information security and compliance tasks (e.g., evidence collection, control validation, third‑party reviews, POA&M, continuous monitoring). Requires 3+ years' related experience and hands-on work with AI tools/agents, automation platforms, scripts/APIs, and compliance frameworks including FedRAMP, CJIS, HIPAA, PCI, SOC 2, ISO standards, FISMA, and CyberEssentials. Role is remote-first across multiple countries.

Join Docker's Secure Build team to design, build and operate Go services and APIs for secure, reproducible build and CI workflows (Docker Build Cloud and Auto Builds). Responsibilities include developing isolation, identity, policy, provenance and signing capabilities, improving reliability and observability, participating in on-call rotation, and partnering with product and security teams. Requires 6+ years experience, production Go and distributed systems experience, and knowledge of containers, build systems, cloud-native infrastructure and software supply-chain security.

Remote Staff Software Engineer role on GitHub's Billing team responsible for evolving payment and billing systems serving millions of users, with a primary focus on fraud and abuse mitigation. The role spans backend services, APIs, and frontend work, involves on-call and incident response, collaboration across GitHub and Microsoft, and requires experience with cloud platforms (Azure), payments integrations, and production-scale engineering.

Individual-contributor Staff role responsible for operating and scaling a pipeline of novel vulnerabilities (identification, measurement, disclosure and reporting), running a CNA program to assign CVEs, coordinating embargoes with customers and maintainers, and representing Chainguard with industry and public-sector bodies (e.g., Linux Foundation, CISA). Requires 7+ years in software security, open source maintenance, or vulnerability disclosure management and practical experience automating pipelines and working with open source communities. Familiarity with Python, Java, JavaScript, or Go and security research/pen testing or bug bounty experience are listed as nice-to-have.

Lead technical ownership of a high-volume novel vulnerabilities pipeline: measure, disclose, and report vulnerabilities identified by frontier models and other sources; automate and calibrate response processes; run a CNA program and assign CVEs where needed; coordinate embargoes with customers, internal teams, and maintainers; and represent Chainguard with bodies such as the Linux Foundation and CISA. Requires 7+ years in software security, open source maintenance, or vulnerability disclosure management.

NVIDIA seeks a Senior Detection Engineer to design, build, validate, and maintain detection logic across platforms (Splunk, Sentinel, CrowdStrike, cloud logs, identity and endpoint telemetry). Requires 8+ years in detection engineering, threat hunting, incident response, or related roles, strong query/scripting skills (SPL, KQL, SQL, Python), and experience with detection-as-code, CI/CD, and telemetry-driven investigations. Salary ranges provided for levels 4 and 5.

Join Reddit's Compliance Engineering team to adapt platforms for evolving privacy, security, and regulatory requirements. Responsibilities include partnering with product/design/engineering, owning product areas end-to-end (design, coding, testing, experimentation, launch), leading cross-functional initiatives, and mentoring engineers. Technologies referenced: Go, Python, Postgres, Redis, Thrift, GraphQL; deployments to Docker/k8s on AWS. Role expects tech lead experience and designing complex distributed systems under high load.

The Home Depot is hiring a Cybersecurity Engineer II to design, implement, and optimize SIEM and EDR capabilities (platforms such as Cortex XSIAM, Splunk, CrowdStrike). Responsibilities include developing detection use cases, tuning alerts, automating correlations, onboarding data sources, dashboarding, parsing/event extraction, troubleshooting, and collaborating with SOC and engineering teams. Minimum 2+ years cybersecurity experience and 1+ years SIEM/EDR experience; role requires legal authorization to work in the United States.