Senior individual contributor reporting to the CISO responsible for the Security Operating System: running cadences (staff meetings, program and business reviews), producing executive-ready reporting (OKR/KPI scorecards, decision memos), managing end-to-end security programs (risk, vulnerability, incident readiness, compliance, M&A), and using AI tooling to multiply output. Requires 7+ years program/portfolio management experience (4+ years in security/GRC/product security), mastery of tools like Jira/Confluence/ServiceNow/Smartsheet, and strong executive communication. US base salary range provided.

Director-level role reporting to the CISO to build and lead a security engineering function across the code-to-cloud lifecycle. Responsibilities include setting technical direction, hiring and developing senior engineers, owning roadmap, standards, and budget, integrating AI/agentic tooling into security delivery, partnering with product, and engaging executives and customers. Requires 7+ years in security or software engineering (4+ years leading engineers) and technical foundations in cloud/Kubernetes security, infrastructure-as-code, CI/CD, and compliance (ISO 27001, ISO 27701, SOC 2). Location: Flexible - USA. Salary range provided: 186,000–256,000 USD/year.

CrowdStrike seeks a remote Security Advisor I for Falcon Complete to assess customer Falcon environments, provide remediation recommendations, document and resolve customer issues per SLAs, partner with internal teams, and support threat detection and incident response. Requires 2+ years in a cybersecurity-focused role, experience with Windows/Linux/macOS, customer-facing communication skills, and relevant security certifications.

CrowdStrike is hiring a remote Security Advisor II for the Falcon Complete service. The role is customer-facing and focuses on assessing customers' Falcon environments, recommending and documenting remediation, supporting incident detection and response, and coordinating with internal teams. Requires 3+ years in a cybersecurity-focused role, experience with Windows/Linux/macOS, threat detection and incident response, relevant certifications, and US citizenship or green card. US base salary range stated: $100,000–$155,000 per year.

Remote senior individual-contributor role supporting CrowdStrike's cloud security portfolio (CNAPP, CSPM, CWPP, CIEM, ASPM). Responsibilities include competitive analysis, win/loss analysis, deal support, go-to-market and product strategy recommendations, and presenting findings to field and senior leadership. Requires minimum 5 years in cloud security (including hands-on AWS and either GCP or Azure) and experience translating technical analysis into field-actionable guidance.

CrowdStrike is hiring an Analyst I for the Falcon Complete virtual security operations center to detect, contain and remediate incidents across Windows, macOS and Linux. Responsibilities include incident handling, malware (static/dynamic) and forensic analysis, network analysis, development of countermeasures and customer-facing written/verbal communications. Candidates must be US citizens or permanent residents, be willing to work a 4x10 schedule (including a weekend day) and a hybrid on-site schedule, and have relevant technical background (degree preferred or equivalent experience). Base salary range for U.S. candidates is $85,000–$120,000 per year.

Lead identity engineering efforts including Okta integrations (Workday master), SSO/SCIM for enterprise apps, AWS identity architecture, PBAC with OPA/Rego, and lifecycle management for non-human identities and AI agents in a HIPAA-regulated environment. Mentor engineers, produce runbooks, and raise identity/security maturity.

Fully remote senior backend engineer position on Reddit's IAM team. Requires 5+ years building large-scale distributed backend systems and at least 2 years in security-sensitive domains. Responsibilities include designing and shipping authentication/authorization services, improving performance and scalability, and mentoring other engineers. Technologies and concepts mentioned include OAuth2, OIDC, SAML, RBAC/ABAC/ReBAC, Go, Kubernetes, CI/CD, AWS/GCP.

The GRC Manager will own Mattermost's compliance posture end-to-end (federal readiness and commercial certifications), lead certification and surveillance cycles (CMMC, NIST, ISO 27001, SOC 2), operate risk and third-party vendor risk programs, apply GRC engineering and AI for continuous controls monitoring and automation, coordinate external audits, maintain compliance artifacts, manage customer security assurance, and grow the GRC team. Role requires U.S. citizenship and location in the United States.

Contract role focused on managing AI information security operations and engineering, including incident response, playbook development for AI/ML threats (prompt injection, model poisoning, adversarial attacks), securing LLMs and generative AI systems, contributing to AI governance, and collaborating with IT and AI/ML teams. Requires 5+ years in information security operations and 2+ years in AI/ML security.

Role involves designing and executing red team operations against GenAI systems, LLM pipelines, RAG architectures, autonomous agents, SaaS products, web applications, and cloud environments (AWS/GCP). Responsibilities include adversarial testing (prompt injection, jailbreaking, model extraction, training-data poisoning), deepfake and voice synthesis attacks, penetration tests, SAST/DAST in CI/CD, threat modeling, security code and architecture reviews, and building automation for offensive workflows. Must have 3+ years of penetration testing/red team experience, hands-on GenAI/LLM attack experience, deepfake/audio spoofing experience, offensive tooling proficiency, and Python scripting skills.

Role responsible for supporting security pillars within Salesforce Government Cloud including continuous monitoring, advisory, incident response, accreditation and security documentation. Requires at least 4 years' experience in information security/cybersecurity, experience with AWS/Azure/GCP government cloud environments, knowledge of FedRAMP and DoD SRG, and the ability to work with federal authorization bodies and stakeholders. U.S. citizenship (no dual citizenship) and ability to complete federal background screening are required. Typical base salary range listed: $117,200–$176,700 annually.

Join STRIKE as the engineering counterpart to threat research to own the research-to-production pipeline, build and extend threat intelligence platform components, produce detection content (YARA, Sigma, STIX), and ship production systems that may include language-model-backed workflows. Requires 5+ years engineering experience with threat intel or detection engineering and hands-on experience with Python and TypeScript/Node.

SecurityScorecard seeks a Senior Research Engineer for its STRIKE Threat Intelligence team to own the research-to-production path: turning findings into detection rules, distributed feeds, scoring inputs, and platform APIs. The role requires 5+ years hands-on engineering with prior experience building production systems that consume or emit threat intel, strong skills in Python and TypeScript/Node, familiarity with STIX/TAXII/MISP/MITRE ATT&CK, practical experience with YARA/Sigma and LLM-backed systems, and experience with cloud, containers, and CI/CD.

Join STRIKE to own the path from threat research outputs to production artifacts (detections, distributed feeds, APIs). The role requires building and extending platform components (sandbox orchestration, ingestion, distribution, rules engines), producing detection content (YARA, Sigma, STIX), operating ML-backed workflows with eval harnesses and schema validation, and coordinating delivery with product and platform teams. Requires 5+ years engineering experience with threat intel or detection engineering and production experience with Python and TypeScript/Node.

Join STRIKE as the engineering counterpart to threat research, owning delivery from research outputs (malware findings, indicators, behavioral patterns) to production artifacts (detection rules, distributed feeds, schemas, APIs). Requires 5+ years hands-on engineering experience with threat intel systems, production use of Python and TypeScript/Node, cloud (AWS), STIX/TAXII knowledge, detection tooling (YARA, Sigma), and experience shipping systems that use language models.

Join STRIKE to own the path from threat research output to production artifacts (detection rules, distributed feeds, scoring inputs). The role requires hands-on engineering across platform components (ingestion, sandboxing, distribution), detection content (YARA, Sigma, STIX), applied language-model production systems, and cross-functional delivery with researchers and product teams.

Join STRIKE as the engineering counterpart to threat research, owning delivery from research outputs (malware findings, indicators, behavioral patterns) to production artifacts (detection rules, distributed feeds, schema-constrained outputs). Requires 5+ years engineering experience with threat intel or detection engineering, production experience with STIX/TAXII and detection tooling (YARA, Sigma), strong Python and TypeScript/Node skills, cloud and pipeline experience (AWS, containers, CI/CD), and experience shipping systems that use language models.

Join STRIKE as the engineering counterpart to threat researchers: own the pipeline from research output to production artifacts (detection rules, distributed feeds, scoring inputs, APIs). Build and maintain platform components (ingest, distribution, sandbox orchestration, agent runtimes), author detection content (YARA, Sigma, STIX), and deploy model-informed workflows with schema validation and evaluation harnesses. Requires 5+ years engineering experience with production threat-intel systems, production Python and TypeScript/Node skills, and working knowledge of STIX/TAXII/MISP/ATT&CK. No immigration sponsorship provided for this position.

Lead and develop a team of four TPRM analysts to manage end-to-end vendor risk lifecycle (onboarding, assessment, reassessment, offboarding). Drive automation and AI integrations (ServiceNow TPRM), define and enforce cybersecurity vendor policies and controls aligned with frameworks (NIST, ISO 27001, SOC 2, FAIR), partner with procurement/legal/IT/security, support audits, and report KPIs to senior leadership. Requires 10+ years in TPRM/GRC or related risk disciplines and 3+ years of people management experience.