Lead the Security Posture Management (SPM) team to drive governed rollouts of GitLab's security capabilities, establish proactive software supply chain security (including SBOMs and third-party component governance), manage the Product Security Risk Register, and partner with Compliance for audit evidence. The role requires experience managing security or engineering teams, technical fluency in security posture and supply chain security, and the ability to drive adoption across engineering teams in a remote, asynchronous environment.

Build and maintain backend features for GitLab’s vulnerability management workflows, including security dashboards, vulnerability reports, and ingestion pipelines. Work primarily in Ruby on Rails with relational databases (PostgreSQL) and collaborate with frontend engineers, product, and design. Participate in code reviews, improve performance and scalability, and join on-call rotations as needed.

Engineer security improvements to GitLab product and maintain in-house abuse prevention platform (Ruby on Rails). Build anomaly detection and prevention systems, expand agentic AI capabilities for mitigation, collaborate with peer teams on safety improvements, and create documentation and runbooks. Strong Ruby/Rails, cloud-native (GCP/AWS), automation, and interest in security/abuse mitigation are required.

The Director of Engineering, Security Factory will set the engineering vision and roadmap across nine distributed teams building proprietary security scanners, AI/ML detection engines, agentic remediation flows, and supporting security foundations. The role includes leading managers and engineers, driving architecture and delivery decisions, partnering with product management, and representing the group in cross-functional and customer-facing contexts within a remote, async-first organization.

Lead architecture and execution of critical cryptographic infrastructure and high-availability services (Tier-0 MPC engine) to protect customer assets and meet global regulatory requirements. Implement secure, resilient cryptographic protocols, define multi-quarter technical strategies, mentor senior engineers, and coordinate with Security, Product, and Policy. Requires 8+ years experience, deep applied cryptography/KMS/HSM expertise, and extensive systems programming (Golang preferred).

SearchApi seeks an experienced engineer to own the browser stack: patch browser engines (Chromium/Firefox) in C++, maintain per-OS fingerprint profiles, eliminate automation-detection signals (navigator, WebGL, canvas, audio, fonts, Client Hints, CDP leaks), and build tooling and tests to prevent regressions. The role requires deep reverse-engineering skills, familiarity with large browser build systems, and proven contributions to browser-engine patches or stealth tooling.

Join DuckDuckGo's Privacy Functional Team to lead and own major components of privacy technology, design systems to protect user privacy, build features for Tracker Radar, and participate in privacy reviews and audits. Role is remote (many listed countries), includes mentoring responsibilities, requires occasional travel (~2 times/year), and offers $178,500 USD annual compensation plus stock options.

DuckDuckGo seeks a Privacy Engineering Director to own complex privacy initiatives end-to-end, build privacy triage/review processes and automation, and grow privacy engineers. Requires 10+ years leading privacy reviews/audits and 4+ years privacy engineering leadership. Role is remote across many countries; compensation listed at $243,800 USD/year. Candidates must be willing to travel ~2x/year.

Join CrowdStrike Intelligence Advanced Research Team to perform vulnerability research and exploit development, analyze vendor patches and large file collections, reverse engineer malware and payloads, develop automated collection/analysis tools (Python preferred), leverage GenAI/LLMs in workflows, collaborate cross-team, and publish research. Requires 4+ years in information security and proficiency in English.

As a Staff Infrastructure Security Engineer you will define architectural patterns, reference implementations, and security automation for GitLab’s public cloud infrastructure and container platforms. The role requires leading cross-team security initiatives, conducting threat modeling and security reviews, applying AI to security workflows, and mentoring engineers. Required expertise includes cloud security (AWS/GCP/Azure), Kubernetes, infrastructure-as-code tooling, multiple programming languages (Go, Python, Ruby), and familiarity with security frameworks such as FedRAMP, ISO 27001, SOC 2, and PCI-DSS.

Lead and manage SOC 1/SOC 2 examinations and SOX (ICFR) planning and execution; design, assess, and mature ITGCs and ITACs across hybrid/cloud environments; drive remediation and auditor-ready documentation; collaborate with Security, IT, Engineering, Data, and Finance in a distributed organization. Fully remote role open to candidates based in Europe with regular availability for U.S. business hours.

SearchApi seeks a remote Anti-Bot Engineer to research and implement anti-bot evasion, reverse engineer detection systems (Cloudflare, Akamai, DataDome, PerimeterX, etc.), optimize Playwright/Puppeteer/CDP configurations, debug TLS/protocol fingerprinting (JA3/JA4, HTTP/2, HTTP/3/QUIC), analyze network traffic, and run headless browsers reliably at scale. Fluent English and deep hands-on experience with browser internals, fingerprinting, network analysis tools, and relevant tooling (Playwright, Puppeteer, Selenium, Wireshark, Burp Suite, mitmproxy) are required.