Join Datadog's Security Libraries team to develop and operate customer-side integrations for runtime security products (WAF, RASP, API Security, IAST, SCA). Responsibilities include building instrumentation across multiple languages (primary focus .NET or Java), shipping libraries/SDKs, owning production telemetry and debugging, shaping roadmap and RFCs, and mentoring teammates. Role is remote (France, Germany, Italy, Spain).

CloudLinux seeks an experienced engineer/researcher to design and implement a runtime protection layer for Node.js workloads. You will define the product, instrumentation, and detection logic; integrate cross-layer threat intelligence; and be measured on runtime overhead, false positives/negatives, and customer escalations. Requirements include strong Node.js and JavaScript knowledge, web application security expertise, and experience building detection rules at scale.

Hire for a Senior Software Engineer on the Code Scanning Engine Quality team at GitHub (work from Spain or remote). The role focuses on delivering CodeQL-powered analysis in production (GitHub.com/GHES), building CI/release tooling, improving offline evaluation, and working with cross-functional teams to improve security, reliability, and developer experience. Requires significant software engineering experience and hands-on work with languages such as C/C++, C#, Java, JavaScript/TypeScript, Go, Ruby, Rust, or Python.

The Principal, Global Event Security and Risk Management will proactively identify and mitigate physical security and enterprise risks affecting staff and community participants, lead risk and gap assessments for events, create and implement emergency response plans, coordinate with internal teams and external partners, remain current on geopolitical developments, and provide crisis support as needed. The role is remote, reports to the Deputy General Counsel, and involves moderate international travel.

Remote role (Spain) to deliver features and architectural improvements across the Add-ons stack (DevHub, Reviewer tools, automated moderation). Requires full‑stack development with React/TypeScript frontends and Python/Django backends, plus work on observability, deployments and incident response on Google Cloud. Senior-level collaboration in an open-source environment.

Responsible for scoping, planning, executing, and closing M&A-driven migrations of collaboration platforms and domains into the parent environment. Own platform architecture, governance, email and domain security, eDiscovery and archiving workflows, DLP and access controls, tooling/automation, and vendor management across multiple brands and entities.

Manager-focused role responsible for leading four teams (Java, JavaScript/Go, Python, PHP) totaling ~18 engineers. Owns technical direction, standards for CVE analysis and patch backporting, SLA compliance, CI/CD and delivery processes, coordination with OS/platform teams, and people management (hiring, onboarding, performance reviews). Requires strong multi-language software development background (minimum 6 years) and 3+ years of engineering leadership experience; solid Java skills and upper-intermediate English.

Lead technical direction and implementation of Grafana’s authentication systems, owning large-scale, low-latency, multi-tenant services implemented primarily in Go. The role includes cross-team coordination, mentoring senior engineers, driving identity protocol standards, and representing Grafana at external events. Position is remote-first and explicitly available to candidates in the UK, Germany, Spain, Ireland, and Sweden.

Mozilla is hiring a Senior Software Engineer for Firefox Security to advance Firefox's security architecture and cryptography stack (including WebPKI and PKI evolution), design and implement web platform security features, improve browser reliability/performance, and collaborate on security initiatives. Role expects strong C/C++ skills, familiarity or interest in Rust, multi-threaded and cross-platform debugging, and experience with cryptographic protocols. Salary range for Remote Spain: €58,000–€77,000.

SearchApi seeks an experienced engineer to own the browser stack: patch browser engines (Chromium/Firefox) in C++, maintain per-OS fingerprint profiles, eliminate automation-detection signals (navigator, WebGL, canvas, audio, fonts, Client Hints, CDP leaks), and build tooling and tests to prevent regressions. The role requires deep reverse-engineering skills, familiarity with large browser build systems, and proven contributions to browser-engine patches or stealth tooling.

Join DuckDuckGo's Privacy Functional Team to lead complex projects that protect user privacy, including work on search indexes, AI features, the Tracker Radar crawler, and privacy features like web tracking and email protections. The role involves system design, participating in privacy reviews and audits, mentoring engineers, and requires experience with privacy solutions and strong technical communication.

Join CrowdStrike Services as a Senior Platform Professional Services Consultant specializing in AI for detection and response. The role involves customer engagement, deployment, tuning and operational support of Falcon's AI/ML capabilities, developing automation playbooks, scripting with Falcon APIs, supporting incident response and delivering training. Requires a bachelor's degree and a minimum of 8 years' relevant IT deployment/customer-facing experience; travel up to ~25%.

Lead design and development of security agent capabilities powering runtime threat detection and workload protection across Datadog Security products. Work includes building eBPF-based monitoring, kernel-level instrumentation, performance-sensitive systems, and large-scale data collection, and partnering with cross-functional teams to deliver platform capabilities.

Hands-on Staff Engineer owning major product components end-to-end: discovery, design, implementation, release, and production ownership. Strong backend experience required (Python, Go, or Java), system design and architecture skills, ability to work independently with unclear requirements, and routine use of AI-assisted development tools. Role is fully remote with flexible hours.

Kraken is hiring a Staff (Senior) Security Architect within Kraken Security Labs to design, review, and verify security architecture across a heterogeneous environment. Responsibilities include conducting security assessments and audits, advising blockchain teams, and working hands-on on topics spanning infrastructure security, cryptography, web3, Rust projects, and AI security. Familiarity with OWASP/NIST and strong collaboration and communication skills are expected.

Docker seeks a Senior Supply Chain Security Engineer to author and maintain security-hardened container images and adapt upstream Helm charts for secure, non-root Kubernetes deployments. Responsibilities include tracking upstream releases, handling semver and dependency breaks, triaging CVEs, writing Go integration tests, and reviewing peers' definitions. Requires 6+ years of backend engineering experience, familiarity with container/Kubernetes ecosystem, YAML, basic Go, and supply chain tooling. Role is remote-first with locations listed in Canada, Portugal, Spain, Italy, Germany, the United States (England listed as a location in the posting). Docker considers visa sponsorship on a case-by-case basis.

Mattermost is hiring a Senior Security Engineer to lead security and IT projects, detect/investigate/remediate incidents using SIEM, EDR, and SOAR, conduct threat hunting with a Zero Trust approach, administer IAM and security monitoring, and assess AI-enabled risk. Requires 3+ years hands-on security engineering/incident response experience, familiarity with SIEM/EDR/SOAR, cloud security (AWS/GCP/Azure), Linux and Kubernetes/Docker, IAM, and managing Microsoft 365/Google Workspace tenants. Posted salary range: €62,000–€82,000 EUR.

Hands-on security engineering role embedded in the Desktop team: perform threat modeling and design reviews, triage vulnerabilities and CVEs, review and contribute Go code, and partner with central security. Requires 6+ years in security or application security and deep knowledge of Linux container security (namespaces, cgroups, seccomp, AppArmor/SELinux), OCI runtimes, and IAM (OAuth2/OIDC).

SearchApi seeks a remote Anti-Bot Engineer to research and implement anti-bot evasion, reverse engineer detection systems (Cloudflare, Akamai, DataDome, PerimeterX, etc.), optimize Playwright/Puppeteer/CDP configurations, debug TLS/protocol fingerprinting (JA3/JA4, HTTP/2, HTTP/3/QUIC), analyze network traffic, and run headless browsers reliably at scale. Fluent English and deep hands-on experience with browser internals, fingerprinting, network analysis tools, and relevant tooling (Playwright, Puppeteer, Selenium, Wireshark, Burp Suite, mitmproxy) are required.