Lead assessment and mitigation of security risks in the virtualization stack (hypervisor, KVM/QEMU). Build systematic threat models, shared impact/likelihood rubrics, and propose defense-in-depth mitigations; collaborate with product and kernel teams to implement remediations. Required: deep familiarity with at least one kernel security feature, experience with virtualization performance trade-offs, and strong communication with engineering teams. Preferred: 5+ years systems-level coding, experience with threat models, side-channel mitigations, and languages such as Go, Rust, or C.

Quora seeks a Senior Software Engineer for its Security Engineering team to secure cloud infrastructure and compute platforms. Responsibilities include threat modeling, building and integrating security tooling (IaC, CI/CD, monitoring), hardening OS and cloud environments (AWS, Kubernetes), and participating in incident response. Role is remote-first and requires availability during Quora coordination hours (Mon-Fri 9am-3pm Pacific Time).

Role on the Secure Design team partnering with product and engineering teams to threat model applications, assess and reduce security risk, provide remediation guidance, run vulnerability management, mentor engineers, and build automation and tooling to scale product security practices.

Role to design and implement APF Core Services (runtime policy verifier, signed policy verification, trust roots, revocation, authorization APIs), deterministic policy projection, conformance and verification test suites, and public runtime integration interfaces. Requires 15+ years experience in systems/software/security engineering, strong programming in Rust/Go/C++/Python, familiarity with Linux, protobuf/gRPC, CI/test automation, cloud deployments, and practical security engineering (signatures, revocation, rollback protection, zero-trust).

Responsible for owning the architecture and multi-quarter roadmap for Docker Hardened Images (security-hardened container images and Helm charts). Requires deep expertise in container/Kubernetes ecosystem, container supply chain security (SBOM, SLSA, Sigstore), distributed systems, and Go; role includes cross-team alignment, standards-setting, incident response, and mentorship.

Mid-level Infrastructure Vulnerability Management Engineer role focused on continuous cloud and workload scanning, CSPM/KSPM/DSPM ownership, IaC security in CI/CD, container and VM scanning, compliance-driven tracking (SOC 2, ISO 27001, PCI-DSS), and incident response support. Role is full-time based in Foster City, CA with in-office requirement Monday, Wednesday, and Friday.

Hands-on Staff Security Architect role within Kraken Security Labs providing internal security consulting: design, review, and verify security architecture across product and infrastructure; conduct security assessments and audits; advise blockchain teams and work on cryptography, web3, Rust, and AI-related security projects. Requires proven experience in application and infrastructure security and familiarity with frameworks like OWASP and NIST.

Quora seeks a Detection & Corporate Security Engineer to build and maintain SIEM/detection systems, deploy canary tokens and early warning mechanisms, and investigate incidents end-to-end. The role also involves partnering with IT to define and enforce corporate security standards (endpoint protection, device compliance, VPN/zero-trust) and providing security guidance across the organization. Minimum 5 years experience required; remote work from the US or Canada.

Role focuses on securing AI cluster and high-performance computing infrastructure: design and implement security systems, incident response and disaster recovery, harden infrastructure across networking, storage, OS and firmware, ensure compliance and audit readiness, and work cross-functionally with engineering, legal, and leadership. Requires 8+ years of relevant experience and expertise in C/C++, Linux kernel hardening (SELinux/AppArmor), eBPF, and large-scale Linux infrastructure security.

Senior individual contributor responsible for AWS cloud and application security, including IAM and AWS-native security services, infrastructure-as-code (Terraform/AWS CDK), CI/CD-integrated SAST/DAST/SCA, vulnerability management, and compliance (SOC 2, ISO 27001, CIS Benchmarks). Requires ~5+ years security experience and 3+ years hands-on AWS security; US-remote.

Join the DHI Content team to author and maintain hardened system packages, container images and Helm charts; triage and remediate vulnerabilities; write Go-based integration tests and validators; and convert repeated work into automation for a machine-first factory. The role expects end-to-end ownership from upstream discovery through release and ongoing maintenance, strong Kubernetes and container security experience, and clear remote-first communication.

Udacity (an Accenture company) seeks external contractors to serve as Cybersecurity Technical Mentors delivering 1:1 sessions, technical deep-dives, and group Q&A. Requires 5+ years relevant experience and strong cybersecurity skills (network, application, system security; threat detection; incident response; familiarity with SIEM/IDS/IPS and security frameworks). Role is remote and targets candidates across US, Canada, Europe, MENA, India and APAC timezones.

Reddit is hiring a Staff Product Security Engineer to lead design and delivery of secure frameworks, paved paths, and workflow-native controls (including for AI-assisted development) to prevent vulnerabilities before production. Responsibilities include building guardrails and library-level controls, driving product security reviews, and improving vulnerability discovery and remediation pipelines. Requirements include 8+ years in software engineering/product/application security (with at least 2 years at staff scope), proficiency in one or more languages (Go, Python, JS/TS), and experience with CI/CD, developer-facing platforms, and vulnerability management. Base salary range (US): $217,000–$303,900 USD/year.

Serve as technical steward and platform architect for fraud engineering teams: design and optimize ultra-low-latency backend services and a high-throughput rules engine, define data access patterns and partitioning, build real-time pipelines for feature computation, and mentor senior engineers. Requires 7+ years of software engineering experience and hands-on expertise with distributed systems, stream processing (e.g., Kafka, Flink, SQS, Pub/Sub), and polyglot persistence.

Join Docker as a Senior Software Engineer on the Desktop team focusing on security-sensitive areas of Docker Desktop. Responsibilities include contributing Go code, participating in design and code reviews with a security lens, threat modeling, handling vulnerability reports and CVE triage, and maintaining security documentation. Requires 6+ years of software engineering experience and strong familiarity with container/runtime security (namespaces, cgroups, seccomp, AppArmor/SELinux), OCI specs, and identity/auth flows (OAuth2/OIDC). Locations listed: Canada, Portugal, Spain, Italy, Germany, United States (also England referenced).

Drive Ramp's cloud security roadmap: review cloud deployments, design and build security-focused infrastructure primitives, lead remediation of prioritized issues, and partner with infrastructure, data, and DevOps teams. Minimum 5 years software experience and at least 3 years building in AWS (with Terraform).

Role to design, implement, and operate backend services and enforcement tooling for fraud, account takeover protection, and identity primitives. Requires partnership with Fraud Ops, Risk, Security, Product and Data; strong backend fundamentals; production operations experience; and 3+ years of software engineering experience. Relocation expense coverage to NYC or SF is mentioned.

Customer-facing Sales Engineer role focused on demonstrating CrowdStrike's endpoint security platform to federal/civilian customers. Responsibilities include articulating current security solution gaps, leading technical engagements, collaborating with sales/marketing/support/engineering, and presenting to diverse audiences including C-level. Requires strong endpoint/network security knowledge (AV, EDR, IR, forensics, SIEM, firewall, HIPS/IDS), OS experience (Windows/macOS/Linux), excellent communication skills, and a sales engineering background or 5+ years relevant experience. Ability to travel as required and pass government background/fingerprint checks.

Work on designing, implementing, and running core attestation cloud services that integrate hardware trust mechanisms with large-scale distributed systems. Responsibilities include API and SDK/CLI development, reliability and SLO/SLI-driven operations, trust-material distribution, verification workflows, and mentoring. Requires extensive distributed systems and cloud experience with security-focused knowledge such as PKI, TLS, signing, and secrets management.

Role involves designing, building, and maintaining security products and infrastructure at cloud scale: real-time detection engines (Apache Flink, Kafka), high-throughput security APIs and microservices (Go, Node.js), streaming analytics, and Kubernetes-based security solutions. Requires experience with distributed systems, cloud platforms (AWS/GCP/Azure), infrastructure-as-code (Terraform/Helm/Chef), and familiarity with security tooling (SIEM, WAF, IDS/IPS).