Join GitLab’s Trust and Safety team to own and coordinate cross-functional fraud and abuse mitigation programs. Responsibilities include converting abuse trends into prioritized technical and business requirements, partnering with Engineering, Product, Finance and Legal, leveraging AI for early identification and triage, defining metrics and reporting, and driving projects to completion. Requires 5+ years in technical program management or related security/trust & safety/fraud roles with technical fluency in web applications, APIs, identity/authentication, and billing/subscription systems.

1Password is hiring a Senior Director, Product Security to set strategy and scale programs across Application Security, Secure SDLC, Data & Device Security, Privacy Engineering, and Security Research. The role reports to the CISO, manages managers, partners with engineering and product leaders, and is expected to have deep expertise in application security, privacy, secure SDLC, and security research. The posting requests 9+ years of progressive security experience with at least 5+ years leading teams/programs at scale and lists software development experience with languages such as Go, Ruby on Rails, Python, and shell scripting.

Own detection engineering and threat hunting in a SIEM, build security automation and SOAR playbooks, lead corporate incident response, manage CrowdStrike Falcon and Okta configurations, run data loss prevention and vulnerability management, and implement AI security and integrations. The role is hands-on, includes working with an external SOC, and requires coordinating with IT Operations, Compliance, and Product Security.

CrowdStrike seeks a Canada-based remote Detection Engineer for the Falcon Complete team to perform threat research and hunting, develop and deploy high-fidelity NG-SIEM detection rules, leverage AI/LLM-assisted tooling, work with CI/CD processes, and collaborate on parsing and normalization. Requires 3+ years relevant experience and familiarity with SIEMs and scripting (Python preferred). Salary range: CAD 105,000–145,000/year.

CrowdStrike is hiring a remote Analyst I for the Falcon Complete virtual SOC to triage, investigate, and respond to security detections across endpoints, identity, email, network, and cloud. Responsibilities include EDR telemetry and forensic analysis, Microsoft 365 incident investigation, basic malware analysis, developing detection/remediation processes, and customer-facing incident communications. Role is Canada-based (employees must be legally entitled to work in Canada) and follows a 4x10 shift schedule in PST/MST time zones.

Role combines security assurance and customer-facing trust work (maintaining questionnaires, Trust Center content, and assurance artifacts) with maintenance and governance of AI agents (auditing, updating prompts and reference content, and preventing drift). Position is remote and open to US, Canada, UK, and Germany.

Senior IT Engineer focused on Identity and Access Management. Responsibilities include administering Okta and IdP configuration, designing application integrations with SAML/OIDC/SCIM, building automation and IaC using Terraform, Python and Bash, leading IAM initiatives (RBAC, access reviews, lifecycle automation), supporting audit and compliance (SOC 2, SOX, ISO 27001), and participating in the on-call rotation. This is a remote role within the US and Canada; the posting lists a US annual base salary range of $117,000–$164,000 and a Canada annual base salary range of $103,000–$144,000.

Remote internship (Jan–Apr 2027) for candidates located in the United States or Canada. Interns will analyze incoming threat intelligence, run IOC sweeps, triage alerts, develop and test detection and response code, and build orchestration and AI-assisted automation workflows across threat intelligence, detection engineering, and incident response.

Lead and grow a distributed team developing CrowdStrike Falcon sensor components with emphasis on OS internals, performance, reliability, and low resource footprint. Own roadmap, design and delivery, collaborate with peer sensor teams, set engineering quality standards, and coach engineers. Requires systems-level software experience, OS internals knowledge, and familiarity with C/C++ or other low-level languages; AI usage experience is also referenced.

Senior engineer responsible for architecting and building deterministic and agentic automation pipelines, scalable services and integrations for managed detection and response. Requires 6+ years experience in automation engineering, proficiency with one or more languages (Golang, Python, JavaScript, C++, Java), experience with LLMs/agentic systems, cloud, containers (Docker/Kubernetes), data stores and messaging (Postgres, Kafka), CI/CD and version control. Canadian-based employment; base salary range CAD 150,000–210,000/year.

CrowdStrike is hiring a Senior Incident Response Consultant based in Canada (remote). The role involves leading incident response engagements, performing host and network forensics across Windows/macOS/Linux, basic malware analysis, threat hunting, cloud incident response (AWS/Azure/GCP), producing reports for stakeholders, and occasionally public thought leadership. Travel up to 30% may be required. Salary range: 100,000–165,000 CAD per year.

1Password is hiring a mid-level Frontend Developer to join the Device Security team, building administrative interfaces such as device compliance dashboards and policy configuration tools. The role is remote within the US and Canada, requires 2+ years of software development experience with React and TypeScript, and involves cross-functional collaboration with Product, Design, and infrastructure partners. USA and Canada salary ranges are specified in the posting (country-dependent).

Lead improvements across identity (Okta), Google Workspace, and device management (JumpCloud) while designing automation for onboarding/offboarding and administering core SaaS tools. Partner with Security and Risk/Audit to implement controls and support ISO 27001 and SOC 2, own projects from scoping through rollout, and mentor colleagues in a fully remote environment. Typically requires six or more years of relevant IT engineering or systems administration experience.

Chainguard seeks a Security Analyst to maintain and improve security assurance content (questionnaires, Trust Center, sales artifacts), establish review/versioning processes, and maintain/audit AI agents used by the Governance and Trust function. Role requires experience in security assurance/GRC or related functions, familiarity with AI-enabled workflows and prompt engineering, strong documentation and communication skills. Listed base salary range: $89,000–$105,000 USD per year.

Chainguard seeks a Security Analyst focused on assurance and automation to maintain and improve customer security questionnaires, Trust Center content, and other assurance artifacts. The role includes operating and governing AI agents used by Governance and Trust—auditing agent behavior, updating prompts and reference content, documenting changes and limitations, and establishing repeatable processes for assurance content and AI-enabled workflows.

VGS is hiring an Application Security Engineer to design and drive a secure SDLC, automate security guardrails in CI/CD (GitHub/GitLab), operate and triage a private bug bounty program, conduct threat models and code reviews for Java and Python microservices, and grow security capability through training and a Security Champions network. The role lists 3–5+ years of AppSec or full stack development experience and includes experience with SAST/DAST/SCA tools and vulnerability/program management.

Lead technical owner for the static analysis engine and evaluation tooling: define architecture for parsing, symbol resolution, IRs, call graphs, and taint/data-flow analysis; design AI-agent workflows and safeguards; build benchmarking and validation harnesses for SAST rules (CWE/OWASP); mentor engineers and participate in on-call operations. Work spans Rust, Go, and Ruby; role is remote with listed locations in Canada, Israel, United Kingdom, and United States. US base salary range provided: $152,800–$259,200 USD per year.

Join GitLab's Security Factory: Code Security team as a Senior Backend Engineer to design and ship hybrid analyzers (rule-based + AI), parse manifests/lockfiles/SBOMs, extend dependency analysis, and contribute to automated remediation. Role involves building evaluation harnesses, packaging analyzers for CI/agent/CLI, mentoring engineers, participating in on-call rotations, and working across Go/Rust/Python/Ruby ecosystems.

GitLab is hiring a Senior Security Risk Engineer (remote in Canada and the United States) to own third-party risk, security risk assessments, and remediation tracking. The role requires building and maintaining a risk register, driving remediation to closure, and creating automation and AI-enabled tooling (including AI risk management and assessments) to improve GRC workflows. Requires 5+ years in security risk management with experience in frameworks such as NIST RMF, NIST 800-39, or ISO 31000.

Join GitLab as a Staff Product Security Architect within Security Platforms and Architecture to lead security architecture and design for strategic initiatives, act as Security Owner for high-priority risks, build prototypes, codify reusable security artifacts, conduct architecture reviews, and mentor engineers. Role is remote and listed locations include Canada, Israel, Poland, United Kingdom, and United States. A US base salary range is provided for residents of the United States.