Responsible for end-to-end physical security including selecting and deploying cloud-based ACS and VMS, conducting site risk assessments and hardening, authoring emergency plans, leading tabletop exercises, and delivering executive protection/threat assessments. Requires 8+ years building corporate physical security programs and experience with SOC2/PCI-DSS/ISO 27001 physical controls.

Reddit is hiring a Senior Security Engineer (AI Security) to review and threat-model AI-powered features and agentic workflows, design detection and prevention controls (guardrails, scanners, sandboxes, policy checks), and build reusable security tooling. The role requires 5+ years of product/application/security engineering experience and hands-on work with backend services, security automation, cloud-native systems, and familiarity with AI/LLM risks.

Senior Manager responsible for expanding and operating GitLab's security certification portfolio (ISO 27001/17/18, ISO 42001, SOC 2, PCI, TiSAX, Cyber Essentials, FedRAMP), driving automation and AI-enabled compliance workflows (compliance-as-code, policy-as-code), overseeing audits and third-party assessors, and partnering with Security, Legal, IT, Product, and Engineering. Role requires US citizenship.

Hands-on Red Team role focused on executing real-world adversary simulations, identifying and chaining high-impact vulnerabilities, and validating prevention, detection, and response capabilities. Collaborates with Detection & Response, Incident Response, and engineering teams; produces technical findings and remediation guidance; contributes to tooling and mentors junior engineers. Base salary range listed: $148,500–$223,900 per year.

The Falcon Complete Security Advisor assesses customers' Falcon environments against CrowdStrike standards, provides remediation recommendations, documents and resolves customer issues per SLAs, and partners with internal teams to troubleshoot technical issues. Requires 2+ years in a cybersecurity-focused role, experience with threat detection and incident response, proficiency with Windows/Linux/macOS, and relevant cybersecurity certifications.

Own and manage the organization's compliance program (SOC 2, ISO 27001), lead internal and external audits, run enterprise risk management and periodic risk assessments, design and test internal controls, and administer compliance automation platforms. Requires 5+ years in compliance/GRC/risk roles in a technology or SaaS environment and experience with compliance frameworks, automation tools (e.g., Drata, Vanta), User Access Reviews, and stakeholder collaboration.

Hopper seeks a Senior Security Engineer to build and maintain application security tooling and processes—vulnerability management (containers, dependencies, code scanning), CI/CD-integrated security, runtime detection, and telemetry. The role emphasizes automation, use of AI/LLMs in engineering workflows, cloud (GCP/GKE) experience, and cross-team influence to embed secure development practices. Remote positions listed for Washington D.C. and Chicago, USA.

Lead and grow a distributed Cloud Security engineering team responsible for secure infrastructure configuration, identity and access, IaC and container security, vulnerability management, detection engineering, and incident response across GitHub's cloud environments. Partner with Security, Infrastructure, Platform, Product, and Engineering leaders to define technical roadmaps, coach engineers, manage execution and deliver measurable security outcomes. Role requires senior security engineering experience (qualification options provided in posting).

The Senior Manager, Customer Trust & Security Governance at GitLab leads customer-facing security programs and governance: overseeing security questionnaires, contract and vendor reviews, risk assessments, security policies and standards, metrics/reporting, and security awareness. The role partners across Security, Sales, Legal, Product, Procurement, and Engineering, emphasizes automation and AI, reports to the VP of Security Assurance, and requires U.S. citizenship. The listed U.S. base salary range is $168,000—$245,000 USD per year.

Lead and grow a security engineering team focused on application security, cloud security (AWS), and agentic AI/LLM security. Responsibilities include defining and executing a security engineering roadmap, embedding shift-left practices (threat modeling, SAST/DAST/SCA), building automated controls and guardrails, enforcing cloud security standards, and partnering with Product Engineering and Security Operations. Compensation range: $150,000–$169,750 USD per year.

Senior engineer role within Reddit's SPACE org focused on IAM: modernizing identity infrastructure, building integrations (SCIM, SAML), implementing authentication protocols (OAuth/OIDC), improving observability, supporting compliance/audits, and operating production identity systems. Requires 10+ years backend experience and proficiency with languages such as Go, Python, Java, or TypeScript; tools include Postgres, Docker, Kubernetes, AWS, Okta, and SailPoint.

Work on applied machine learning to detect, score, and investigate fraud across voice/IVR using audio, behavioral, and metadata signals. Responsibilities include building fraud risk models and scam detection systems, analyzing fraud patterns, supporting investigations, and moving research into production. Requires an advanced degree or equivalent experience and 3+ years in ML, fraud detection, speech/NLP, or related fields. Remote (US).

Hands-on Senior Product Security Engineer with 5+ years in security to lead product security strategy and governance for AI-enabled features. Responsibilities include threat modeling, secure code reviews, penetration testing, establishing secure design patterns and guardrails, cloud governance, tooling (SAST/DAST), AI-specific security controls (data handling, model access, inference workflows), and mentoring other engineers.

Remote-first Sr Staff Information Systems Engineer role owning identity and lifecycle management, AWS-based IT infrastructure, ServiceNow architecture and automations, and endpoint management. Requires ~8+ years of corporate IT/systems engineering experience, hands-on AWS and ServiceNow administration, strong scripting/automation skills, observability/log management experience, and participation in on-call incident support.

Lead assessment and mitigation of security risks in the virtualization stack (hypervisor, KVM/QEMU). Build systematic threat models, shared impact/likelihood rubrics, and propose defense-in-depth mitigations; collaborate with product and kernel teams to implement remediations. Required: deep familiarity with at least one kernel security feature, experience with virtualization performance trade-offs, and strong communication with engineering teams. Preferred: 5+ years systems-level coding, experience with threat models, side-channel mitigations, and languages such as Go, Rust, or C.

The Senior Security Engineer is the senior technical owner of NuHarbor's engineering layer for managed services, with primary anchoring in Splunk but applying engineering across the company catalog. Responsibilities include architecture, onboarding and normalization of data sources, multi-tenant scalability, automation/integrations (SIEM, EDR, identity, ticketing), client-facing technical leadership, and participation in a 24x7 on-call rotation. Requires 5+ years engineering security platforms, 3+ years with Splunk, strong Linux/Windows and networking skills, scripting (PowerShell/Bash/Python), and US citizenship. Salary target $130,000–$175,000.

Quora seeks a Senior Infrastructure Security Software Engineer to join a new Security Engineering Team, working remotely from the US or Canada. The role focuses on securing large-scale cloud environments (especially AWS), building infrastructure-as-code pipelines (Terraform/CloudFormation), integrating security into CI/CD (SAST/DAST/dependency scanning), hardening OS/container environments (eBPF, OSQuery, SECCOMP), threat modeling, and participating in incident response. US- and Canada-specific salary ranges are provided in the posting.

Principal Engineering Manager responsible for IAM platform areas including identity lifecycle, entitlements, privileged access, federation, and workforce identity providers. Role involves technical leadership, building high-performing teams, cross-functional partnership (Security, Infrastructure, IT, Legal, Compliance), driving migrations and automation, and overseeing reliability and operational maturity. Requires people management experience (5+ years) and senior technical experience as detailed in the posting; base salary range USD 160,200–425,000 per year.

Lead and own security monitoring, detection engineering, and threat hunting efforts. Responsibilities include real-time event triage, engineering and automating detection use cases across cloud and corporate environments, developing monitoring metrics, integrating and maintaining log/data pipelines, proactive threat hunting, mentoring analysts, and authoring playbooks/runbooks. Requires 5+ years with SIEM and endpoint detection tools, scripting (Python, Bash, SQL), and experience across Linux, Windows, and macOS. Salary range listed: $140,800–$176,000 (USD, annual).

Owner of the security risk posture for the virtualization stack: build systematic threat models, assess impact and likelihood, propose and drive implementation of defense-in-depth mitigations, and collaborate with engineering teams. Requires deep kernel and virtualization knowledge (QEMU/KVM), familiarity with kernel security features (AppArmor/SELinux/Landlock), systems-level programming experience, and experience in threat modelling and vulnerability management.