Chainguard seeks a Security Analyst to maintain and improve security assurance content (questionnaires, Trust Center, sales artifacts), establish review/versioning processes, and maintain/audit AI agents used by the Governance and Trust function. Role requires experience in security assurance/GRC or related functions, familiarity with AI-enabled workflows and prompt engineering, strong documentation and communication skills. Listed base salary range: $89,000–$105,000 USD per year.

Chainguard seeks a Security Analyst focused on assurance and automation to maintain and improve customer security questionnaires, Trust Center content, and other assurance artifacts. The role includes operating and governing AI agents used by Governance and Trust—auditing agent behavior, updating prompts and reference content, documenting changes and limitations, and establishing repeatable processes for assurance content and AI-enabled workflows.

Join Tide's Product Security team to protect web and mobile products and cloud-native applications. Responsibilities include proactive vulnerability hunting, threat modelling, secure design guidance, remediation through patches or tickets, integrating security into CI/CD pipelines, mentoring junior engineers, and using automation and security tooling. Role is part of a broader Security Engineering organisation and is based in the United Kingdom with flexible working.

Lead technical owner for the static analysis engine and evaluation tooling: define architecture for parsing, symbol resolution, IRs, call graphs, and taint/data-flow analysis; design AI-agent workflows and safeguards; build benchmarking and validation harnesses for SAST rules (CWE/OWASP); mentor engineers and participate in on-call operations. Work spans Rust, Go, and Ruby; role is remote with listed locations in Canada, Israel, United Kingdom, and United States. US base salary range provided: $152,800–$259,200 USD per year.

Lead the design and delivery of core security features in Elasticsearch, including authentication, authorization (scalable RBAC/ABAC), tenant isolation, cryptographic solutions, and performance optimization for distributed systems. Collaborate with engineering and product leaders, drive vulnerability management (including AI-assisted triage), and mentor other engineers.

Mozilla is hiring a Senior Security Engineer (Incident Responder) to identify and respond to security incidents at global scale, act as incident commander, build alerts/playbooks/automations, conduct threat hunting, and work on-cloud and endpoint telemetry. Requires 5+ years of relevant incident response/SOC experience and proficiency with SIEM (Splunk preferred), EDR, and SOAR platforms.

Join GitLab as a Staff Product Security Architect within Security Platforms and Architecture to lead security architecture and design for strategic initiatives, act as Security Owner for high-priority risks, build prototypes, codify reusable security artifacts, conduct architecture reviews, and mentor engineers. Role is remote and listed locations include Canada, Israel, Poland, United Kingdom, and United States. A US base salary range is provided for residents of the United States.

Deliver integration and professional services for Falcon Next-Gen SIEM and log management, act as trusted advisor to expand customer use cases, onboard and parse data, develop searches/dashboards, create integrations and automation using scripting and APIs, and provide feedback to product teams. Requires 2+ years working with SIEM/log management and experience with cloud providers, IT security functions, scripting languages and AI platform usage. Occasional travel (<25%).

Lead technical work on the Prism team to design, implement, and operate systems that convert security data into reliable entity views and risk scores. Responsibilities include data modeling, background tasks, APIs, performance profiling and optimization, writing TypeScript/React and Node.js code, building telemetry and tests, and collaborating across Elastic Security, Kibana, and Elasticsearch teams.

Join CrowdStrike's Intelligence Automation team to design, prototype, implement, deploy and maintain large-scale distributed systems that support intelligence analysts and researchers. Responsibilities include building processing pipelines, data storage and presentation layers, maintaining new and legacy systems, gathering requirements from internal customers, and operating production services. Technologies referenced include Go, Python, Linux, containers, SQL/NoSQL databases, cloud platforms (AWS/GCP) and AI tooling. Role is remote with distributed team collaboration expected.

Join the Security Architecture team to own end-to-end security telemetry ingestion into Elasticsearch, maintain Elastic Cloud on Kubernetes clusters, manage pipelines, index templates and ILM, and use Terraform, Kubernetes and Helm for deployments. The role requires Python scripting, API integrations, experience operating Elasticsearch in production, and applying AI/automation to improve reliability and reduce toil.

Seeking a CyberArk Architect to design and lead an enterprise-scale Privileged Access Management migration and merger consolidation (vault migration v12.2→v14.2), identity federation (Entra ID via SAML/OIDC), and large-scale application onboarding (250+ applications). Role includes migration/runbook design, credential provider strategy, MFA migration (e.g. RSA SecurID → Entra MFA), ensuring TSA compliance and audit evidence, and mentoring senior engineers. 3+ month rolling contract in the UK; requires 10+ years IAM experience and 5+ years in CyberArk PAM architecture.

Join the Detection & Response team to own detections in the SIEM (Elastic), onboard log sources, build automation (Python, Go, Terraform, Tines), lead incident investigations and write clear findings, participate in on-call rotation, and help keep controls audit-ready (e.g., SOC 2, PCI DSS). Work is remote; hiring locations listed as United Kingdom, South Africa, and Ireland.

Lead and conduct advanced security research and penetration testing across GitLab's platform and AI/agent surfaces, develop testing methodologies and tooling, validate vulnerabilities with proof-of-concept exploits, drive class-level remediations, mentor others, and coordinate cross-functional remediation. Role expects 10+ years' relevant experience and proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust. US base salary range listed: $203,200–$275,000 USD (for US residents).

CrowdStrike is hiring a Senior Analyst for its Falcon Complete virtual SOC to monitor and perform in-depth analysis of security alerts, handle incidents, conduct malware and forensic analysis, perform remote remediation, and improve detection and response processes. The role includes mentoring lower-level analysts, serving as a technical escalation point, and producing written and verbal findings for customers. Preferred experience areas include incident handling, computer forensics, network forensics, systems administration, malware analysis, and scripting/programming.

Join Elastic's Security EDR Workflows team to implement user-facing features and architectures for Elastic Defend and OSquery forensics, write production-grade code (TypeScript/Node.js and potentially other languages), collaborate with cross-functional and global teams, and apply AI-assisted development practices. Experience with Elastic Stack, cybersecurity/forensics, and open-source contributions are listed as bonuses.

Lead and run the Cyber Security Engineering team's operational activities: build team capacity, run and mature incident response processes and playbooks, support on-call rotation, drive detection engineering and automation, and partner with cross-functional teams to improve security across enterprise and SaaS environments. Requires incident response experience, security operations/engineering background, familiarity with SIEM (ideally Google Chronicle and YARA-L), cloud (AWS/GCP), containers (Kubernetes/Docker), EDR, and SOAR/scripting.

Join the Vulnerability Management team to develop and maintain backend features—primarily in Ruby on Rails—for security dashboards, vulnerability reports, and ingestion pipelines. Responsibilities include shipping backend features, improving performance/reliability/scalability, collaborating with frontend and product teams, participating in code reviews, and taking part in on-call/operational support. Remote role listed for Israel and the United Kingdom.

The Security Technical Account Manager (Lightwell) will act as a trusted advisor and SME for Lightwell, liaise with product security and customer teams, accelerate SDLC and OS patching, mentor customer teams, contribute to the knowledge base, and partner with engineering to resolve technical issues. Role requires 10+ years' experience and willingness to travel internationally.

Docker is hiring a Senior Software Engineer for the Sandboxes team to design, build, and operate isolated microVM sandboxes (each with its own Docker daemon, filesystem, and network) for AI agent workloads. Responsibilities include improving agent integration, sandbox lifecycle reliability and performance, cross-platform correctness (macOS, Windows, Linux), architecture evolution, mentoring, and on-call rotations. Qualifications include 8+ years of software engineering experience, experience with runtime/container/VM infrastructure and security/isolation, and strong communication skills. US base salary range provided; Docker considers visa sponsorship on a case-by-case basis.