Join the Elasticsearch Security team as a Senior Java Engineer contributing to architecture, design and delivery of core security features (authentication, authorization, tenant isolation). Work involves JVM- and Java-level performance and concurrency, distributed systems security (node trust, zero-trust transport, cluster state), cryptography and identity protocols (OAuth2, SAML), vulnerability management, and leveraging AI-driven tooling to automate triage and debugging.

CrowdStrike is hiring a Senior Incident Response Consultant to join services engagements remotely (Germany, Ireland, United Kingdom). Responsibilities include participating in incident response investigations, performing host and network forensics, threat hunting across large data sets, malware analysis/reverse engineering, cloud incident response (AWS/Azure/GCP), and producing written and verbal reports for customers and legal stakeholders. Candidates should have experience in IR, forensic analysis tools, network analysis (Bro/Zeek, Suricata), incident remediation, strong communication skills, and experience applying AI technologies to improve workflows.

Remote role (United Kingdom) at GitHub on the Code Scanning Language Coverage team. Responsibilities include maintaining and expanding language coverage for CodeQL, partnering to build scalable cross-language solutions, unifying analysis technology across languages, and working with engineering, product, and users to deliver secure, high-quality features. Requires software engineering experience with production coding in multiple languages and experience in areas such as software security, CI/DevOps, automation frameworks, or machine learning applied to source code.

Role combines security assurance and customer-facing trust work (maintaining questionnaires, Trust Center content, and assurance artifacts) with maintenance and governance of AI agents (auditing, updating prompts and reference content, and preventing drift). Position is remote and open to US, Canada, UK, and Germany.

Hands-on Governance, Risk & Compliance role focused on audit readiness (SOC 2 Type II, ISO 27001), evidence collection, control testing, risk assessments, remediation tracking, and maintaining policies and GRC documentation (e.g., in Vanta). Collaborates cross-functionally across Security, Engineering, Legal, HR, and Product. Earlier-career position; requires strong organizational skills, clear communication, and comfort with spreadsheets, ticketing tools, and process improvement.

Lead and oversee incident response consulting engagements, perform initial triage and scoping, partner with sales to win business, manage and mentor consulting teams, and produce reports and presentations for stakeholders. Role requires experience in incident response/information security, strong communication and leadership, public thought leadership, and ability to travel in-region up to 30%.

Work on the Firefox DOM LWS team to deliver Storage Encryption Everywhere in Gecko. Responsibilities include migrating data between schemas, implementing storage in PBM, writing Web Platform Tests and Gecko tests, integration testing, working through code review with module owners, and shepherding the feature through Nightly, Beta, and Release while fixing correctness, performance issues, and regressions. Required: strong C++, substantial browser-engine (ideally Firefox/Gecko) and database experience, familiarity with web standards and Web Platform Tests, and strong debugging/optimization in multithreaded codebases.

The role leads and participates in incident response and cloud security assessment engagements across public cloud environments (AWS, Azure, GCP), investigates and remediates incidents, analyzes cloud/hybrid architectures, and helps develop internal tools and service offerings. Requires a college degree or equivalent and 5+ years of related experience (including 2+ years as a Security Architect/Engineer) and proficiency in scripting/compiled languages such as Python, Ruby, C#, PowerShell or Go.

The Staff Security Engineer (Blue Team) will act as the technical lead for Olo’s Blue Team, overseeing information protection, incident detection & response, vulnerability and threat hunting programs, and security services (including PCI and audit support). Responsibilities include coaching and leading distributed security engineers/analysts, driving security tooling and automation, coordinating incident response (including participation in a 24/7 on-call rotation), and collaborating cross-functionally with product, engineering, legal, and external partners. Role is remote within Northern Ireland and requires 5+ years of relevant security experience.

CrowdStrike seeks senior technical analysts to monitor security alerts, perform incident handling across Windows/Mac/Linux, conduct static and dynamic malware analysis, perform forensic analysis and remote remediation, and improve detection and triage processes. Candidates should have incident response, forensics or systems administration experience, scripting/programming skills (Powershell, Python, C/C#/VB/Perl/Ruby/.NET), strong communication skills and at least one relevant security certification or equivalent experience.

Hands-on security analyst role in CrowdStrike's virtual SOC: conduct monitoring and in-depth analysis of alerts using the CrowdStrike platform, handle incidents across Windows, macOS and Linux, perform static and dynamic malware analysis and remote remediation, develop detection and triage processes, and produce high-quality written and verbal communications. Requires experience in incident handling, digital forensics, systems administration, scripting/programming (examples listed), at least one relevant security certification and relevant degree or equivalent experience. Role is remote for the United Kingdom.

Remote senior analyst position with CrowdStrike's Falcon Complete virtual SOC. Responsibilities include monitoring and analysis of security alerts, incident handling across Windows/Mac/Linux, malware analysis, remote remediation, developing detection/triage processes, customer communications, mentoring and technical escalation. Preferred experience includes incident response, computer forensics, network analysis, systems administration, programming/scripting, and use of AI technologies.

CrowdStrike seeks a Senior Consultant for incident response engagements, performing host and network forensics, threat hunting, malware analysis, and producing written and verbal reports for stakeholders. The role involves investigations across Windows, Mac, Linux and cloud platforms (AWS/Azure/GCP) and requires strong technical and communication skills, plus experience using AI technologies to enhance workflows.

Hands-on senior software engineering role building automated security assurance, observability, and compliance tooling for a cloud-native SaaS organization. Requires production development experience (Go, TypeScript, Python commonly used), knowledge of container/Kubernetes and cloud environments, and experience automating security and compliance workflows and working with security frameworks and audits.

Join Grafana Labs' GRC engineering team to develop automated security assurance programs, security observability systems, and developer-friendly guardrails across the SDLC, applications, and infrastructure. Requires hands-on software development experience (primary languages used: Go, TypeScript, Python), familiarity with containerized cloud-native environments (Kubernetes), and experience automating compliance and security controls. Role is remote and the Sweden base compensation range is provided.

Work on building security observability, compliance, and control management systems and tooling; develop automated security assurance programs and integrate security controls across the SDLC. Role expects hands-on software development experience (primarily Go, TypeScript, Python), knowledge of containerized cloud-native environments (Kubernetes), and familiarity with security frameworks such as ISO 27001, SOC 2, PCI DSS, GDPR, and NIST.

Grafana Labs seeks a Senior Software Engineer, Security Assurance (remote, candidates in UK, Ireland, Spain, Germany or Sweden) to develop services and automations for security observability, compliance (ISO 27001, SOC 2, GDPR, etc.), and guardrails across SDLC, applications, and infrastructure. Role is hands-on development (languages used include Go, TypeScript, Python) and involves collaborating with security, engineering, and customer teams.

Hands-on senior software engineering role focused on developing services, automations, and tooling for security observability, compliance, and control management across cloud-native infrastructure and SDLC. Preferred experience with languages such as Go, TypeScript, or Python, containerized/Kubernetes environments, automation of security/compliance processes, and familiarity with standards like ISO 27001, SOC 2, PCI-DSS, GDPR, and NIST. Position targets candidates in Germany, UK, Ireland, Spain, or Sweden; Germany salary range provided.

Lead improvements across identity (Okta), Google Workspace, and device management (JumpCloud) while designing automation for onboarding/offboarding and administering core SaaS tools. Partner with Security and Risk/Audit to implement controls and support ISO 27001 and SOC 2, own projects from scoping through rollout, and mentor colleagues in a fully remote environment. Typically requires six or more years of relevant IT engineering or systems administration experience.

Join Firefox Security to build and improve security architecture across platforms (privilege isolation, cryptographic protocols, WebPKI, security-sensitive APIs). Responsibilities include designing, implementing, testing, and shipping security features; investigating security issues and fixing stability, performance, and memory problems in a multithreaded, cross-platform codebase. Requires 3+ years low-level/software systems experience, strong C/C++ proficiency, familiarity or interest in Rust and web technologies, and experience working with distributed teams. Salary range listed for Remote UK: £66,000–£87,000.