Join Mozilla's Security team to develop and implement an integrated GRC framework across enterprise and product verticals. Responsibilities include risk assessments and register maintenance, third-party risk activities, audit and compliance support (SOC 2, ISO 27001), SSDLC governance, BC/DR and BIA support, vulnerability and penetration testing coordination, and administration of GRC tooling. Typical experience: 2–4 years and hands-on experience with GRC platforms; familiarity with SOC 2, ISO 27001, or NIST.

Join the Emerging Threats and Security Validation team to research and analyse malware across the attack lifecycle, reverse engineer malicious files and exploits, validate and improve detection coverage, and partner with engineering, threat research, red team and ML teams to translate findings into product improvements. Requires a Bachelor's/Master's in Computer Science or related field and 4+ years of threat research/malware analysis experience.

CrowdStrike is hiring a Senior Security Researcher for the Advanced Research Team to perform vulnerability research, operate and develop honeypots, run large-scale data collection and analysis, reverse engineer malware and binaries, collaborate across intelligence teams, and publish research. Requires 4+ years in information security, strong OS internals and network protocol knowledge, Python development skills, and experience with GenAI/LLM workflows.

CrowdStrike seeks a Senior Analyst for Falcon Complete to monitor and analyze security alerts, perform incident handling across Windows/macOS/Linux, conduct malware and network forensic analysis, perform remote remediation, improve detection and triage processes, mentor junior analysts, and produce customer-facing communications. Relevant technical skills and incident response/forensics experience are emphasized.

Twilio is hiring a Security Engineer on the Security Incident Response Team to lead technical response to security events across its global infrastructure. Responsibilities include triage, containment, remediation, building runbooks/SOPs, automation (SIEM/SOAR), artifact/forensic triage, and driving post-incident improvements. Role is remote and based in Ireland or the U.K.; requires 3+ years of security incident response experience in production cloud environments.

SearchApi seeks an experienced engineer to own the browser stack: patch browser engines (Chromium/Firefox) in C++, maintain per-OS fingerprint profiles, eliminate automation-detection signals (navigator, WebGL, canvas, audio, fonts, Client Hints, CDP leaks), and build tooling and tests to prevent regressions. The role requires deep reverse-engineering skills, familiarity with large browser build systems, and proven contributions to browser-engine patches or stealth tooling.

CrowdStrike Intelligence seeks a Senior Vulnerability Researcher to join the Advanced Research Team to perform vulnerability research and exploit development, analyze vendor patches and malicious artifacts, reproduce vulnerabilities, develop automated collection and analysis tools, and publish research. Requires 4+ years in information security, reverse engineering experience, strong Windows and Linux internals knowledge, software development (Python preferred), and proficiency in English. Experience with GenAI/LLMs, mobile platforms, macOS, Go or Rust and threat intelligence are a plus.

WhiteTech seeks a remote PHP Developer with 4+ years of commercial PHP experience and hands-on SEON integration. The role focuses on building fraud detection/prevention flows, risk scoring and decision logic, orchestration within complex systems, and integrating SEON beyond simple API calls. Required skills include REST APIs/webhooks, asynchronous processing, queues, transactional consistency, idempotency, observability, SQL, and experience with Symfony or another modern PHP framework. Candidates across Europe (including listed non-EEA countries) and those able to work within CET are welcome to apply.

Kraken is hiring a staff/senior security architect for Kraken Security Labs to design, review, and verify security architectures; conduct security assessments and audits; advise blockchain teams; and stay current with security trends including cryptography, web3, Rust projects, and AI security. The role emphasizes hands-on technical work, collaboration across distributed teams, and familiarity with security frameworks such as OWASP and NIST.

NVIDIA seeks a Senior Embedded Architect Manager to research, design, and implement hardware and software security solutions for networking products. The role requires 12+ years of experience with IO interfaces (I2C, I3C, SPI, UART, USB, PCIe), low-level firmware and languages (Verilog, Python/Perl, ARM assembly, C/C++), and experience with boot architecture, RISC-V, root-of-trust, and hardware security primitives.

Olo is hiring a Senior Security Engineer focused on blue team operations. Responsibilities include leading detection and response improvements, participating in on-call incident response, conducting vulnerability assessments, operating and optimising security tools (SIEM, scanners, IDS, WAF, etc.), supporting compliance, collaborating with development and IT teams, mentoring engineers, and developing automation for security operations. Requires 5+ years of security engineering/operations experience and proficiency in cloud security (AWS) and IaC tools.

Provide real-time monitoring and in-depth analysis of security alerts across Windows, macOS, and Linux; perform malware analysis and remote remediation; develop detection and triage processes; produce customer-facing reports and recommendations; act as a technical escalation point and mentor for junior analysts.

SearchApi seeks a remote Anti-Bot Engineer to research and implement anti-bot evasion, reverse engineer detection systems (Cloudflare, Akamai, DataDome, PerimeterX, etc.), optimize Playwright/Puppeteer/CDP configurations, debug TLS/protocol fingerprinting (JA3/JA4, HTTP/2, HTTP/3/QUIC), analyze network traffic, and run headless browsers reliably at scale. Fluent English and deep hands-on experience with browser internals, fingerprinting, network analysis tools, and relevant tooling (Playwright, Puppeteer, Selenium, Wireshark, Burp Suite, mitmproxy) are required.

DuckDuckGo is hiring a Senior Security Engineer (App Sec) to work on browser and sync security, agentic browsing hardening, SERP mitigations, security tooling and scanning infrastructure, and incident detection/response. The role is remote, expects 7+ years of web/application security experience, and requires occasional travel for company meetups.

Work on the Falcon Host sensor (kernel-mode driver) and related cloud telemetry features. Responsibilities include designing, implementing, and owning cross-platform sensor features (Windows primary, also Mac/Linux), debugging low-level issues (memory corruption, process contention, performance), collaborating with distributed teams, and mentoring others. Requires strong C++ and Windows kernel/OS internals expertise; preferred experience with WFP, TCP/IP, USB, file systems, Agile and Git.