CrowdStrike seeks a Senior Analyst for the Falcon Complete virtual SOC (US remote). The role leads high-severity, multi-customer incident investigations across endpoint, identity, email, network and cloud environments, conducts advanced EDR telemetry, forensic and malware analysis, develops and coordinates strategic remediation, builds detections and automation, mentors junior analysts, and engages in thought leadership. Requires deep experience in incident response, forensics, malware analysis, network analysis, identity platforms (e.g., Okta, Entra ID, AD), SIEM/log correlation, scripting (Python/PowerShell/Bash) and applying AI in security operations. Position follows a 4x10 schedule including one weekend day.

Full-time senior consultant role (remote, US) to serve as a trusted advisor for strategic customers—leading complex engagements from discovery through implementation and optimization. Responsibilities include workshops, technical assessments, integrations with contact center and security systems, cross-functional collaboration, and producing thought leadership. Requires 7+ years in consulting or customer-facing technical roles in SaaS/cloud/security/fintech and experience with voice biometrics, authentication, and fraud risk.

Hands-on Infrastructure Security Engineer responsible for building and operating security controls, telemetry, detections, and automated enforcement for large, long-running EDA compute jobs. Requires 8+ years of infrastructure or infrastructure-security engineering, strong Linux depth, experience with compute fleets, networking and storage at scale, programming/scripting (Python, Go, shell), and foundations in access control, authentication, segmentation, encryption, and vulnerability management. Work includes selection, rollout, and lifecycle of security technologies and close collaboration with operations, networking, and central security teams.

CrowdStrike is hiring a Principal Consultant for Incident Response to lead engagements, perform host and network forensics across Windows/Mac/Linux, conduct malware analysis and threat hunting, produce technical and executive reports, and contribute thought leadership. Role may require up to 30% travel and targets U.S. candidates with a listed base salary range of $140,000–$200,000.

1Password is hiring a mid-level Frontend Developer to join the Device Security team, building administrative interfaces such as device compliance dashboards and policy configuration tools. The role is remote within the US and Canada, requires 2+ years of software development experience with React and TypeScript, and involves cross-functional collaboration with Product, Design, and infrastructure partners. USA and Canada salary ranges are specified in the posting (country-dependent).

Chainlink Labs seeks a Security Assurance Engineer (3+ years) to build and improve automated security assurance workflows, streamline evidence collection and analysis, and apply security/compliance frameworks (e.g., SOC 2, ISO 27001, NIST CSF). The role requires hands-on scripting/automation (Python or similar), experience with APIs/JSON/Git, and familiarity with enterprise security platforms and assurance activities. Employment eligibility must meet approved hiring jurisdictions and work hours should overlap Eastern Time.

NVIDIA seeks a Senior AI Security Engineer to develop secure agentic systems and cybersecurity tooling, turning research prototypes into production-ready services. The role requires ~8+ years in software/security engineering, experience with backend services, APIs, automation, agent/AI tooling, and familiarity with offensive security and red teaming approaches.

Work on foundational detection and response functions for the Falcon endpoint sensor within the Sensor Security Platform (SSP). Responsibilities include owning and modifying complex sensor detections, contributing to core sensor logic, writing code (including C++ and an internal asynchronous domain-specific language), testing, debugging, and collaborating with other engineering, research and product teams. Role is hybrid requiring 2–3 days on-site in Redmond, WA.

Own the technical implementation of Playlist's governance, risk, and compliance control environment, including a Master Control List mapped across PCI DSS, SOC 1 Type II, ISO 27001, HITRUST, and NIST CSF/800-53. Lead control lifecycle management, evidence automation, framework crosswalks (using OSCAL), and build AI/agentic workflows and cloud-native tooling to scale compliance across a multi-brand footprint.

Work on security architecture for NVIDIA Networking firmware—trust boundaries, privilege separation, secure boot, secure update, key storage, and device lifecycle features. Responsibilities include threat modeling, analyzing hardware/firmware interactions, defining mitigations and requirements, and guiding engineering teams. Requires 8+ years in product/firmware security; locations include US (multiple states) and remote; posted salary ranges provided.

GitHub is hiring a Staff Security Data Engineer to design, build, and maintain scalable, reliable data infrastructure and security telemetry across Azure (and AWS). The role owns pipelines, compute clusters, tables, and data models to support security monitoring, detection, hunting, incident response, and investigations. Requires deep hands-on experience with Azure infrastructure, Kusto/KQL, Apache Airflow, Terraform, and Python; leadership across organizational boundaries; and senior-level security experience (role lists 10+ years as one explicit qualification).

The role leads an engineering team owning enterprise single sign-on platforms and authentication services (centered on Microsoft Entra), emphasizing automation, CI/CD, infrastructure as code, and operational rigor. Responsibilities include technical direction, coaching engineers, incident management, partnership with security/infrastructure/application teams, and driving secure, scalable authentication at production scale. Minimum 8+ years experience; pay range listed at $170,000–$240,000 (annual) for specified locations.

Elastic is hiring a Senior Incident Response Analyst to review and respond to alerts from the Elastic Detection Engine and other sources, perform SIEM and endpoint log analysis, develop detection and response approaches, identify root causes, and oversee cross-team remediation. The role requires at least 3 years of security operations/incident response experience and familiarity with cloud and SaaS environments; experience with the Elastic Stack is a plus.

Capital One is hiring a Security Engineer (level 4) to design and deliver security platforms and automated controls across cloud and on-prem environments, with a focus on Secure Web Gateways, proxies, and remote access. The role requires expertise in IAM, vulnerability management, DevSecOps (CI/CD and IaC), incident response, and cloud security; minimum 5 years' experience in cybersecurity or IT and at least 4 years with SWG/proxy/remote access.

NVIDIA is hiring a Senior Security Engineer to define and implement security architecture patterns for AI tooling. Responsibilities include creating shift-left security solutions for AI-generated code, converting standards into machine-enforceable formats, engineering verification workflows and evaluation harnesses, and producing secure reference implementations (templates, Helm charts, container images). Requires 8+ years in security/platform/devops or related engineering, expertise with AI coding agents and non-deterministic evaluation, strong cloud-native and container experience (Kubernetes, Helm), proficiency in Python or Go, and experience with CI/CD, policy-as-code, and security architecture practices. Role is based in the US (including Santa Clara, CA) with remote options mentioned. Salary range: 168,000–270,250 USD per year.

Join the Vulnerability Management Engineering team to design, build, and operate systems that collect security findings from code, containers, hosts and cloud, match findings to owning teams, enforce software supply chain controls, and track remediation and compliance (e.g., FedRAMP). Role involves backend/distributed systems development, cloud and container work, on-call participation, technical leadership, and cross-functional collaboration.

Join GitHub's GRC Entity Risk function to lead security capability risk assessments (scoped to frameworks like NIST CSF), develop and quantify FAIR-style cyber risk scenarios, maintain the risk register in a GRC platform, drive risk treatment plans, and produce actionable risk reporting for engineering, security, and product stakeholders. The role requires deep experience in technical risk management, security frameworks, and tooling for data analysis and reporting.

Join the Authentication team to design, develop, deploy, and operate secure, low-latency backend services and APIs using Go and Python. Work with AWS and GCP managed services (S3, DynamoDB, Kinesis, IAM), CI/CD and infrastructure-as-code, observability tooling, and integrate ML-driven signals for fraud prevention and identity verification. Requires 5+ years backend experience and production ownership, with participation in on-call rotation. US-remote; base pay range $130,000–$170,000 USD per year.

Fingerprint seeks a Senior Web Browser Researcher to conduct deep research into JavaScript, Web APIs, and browser internals; own findings end-to-end from experiments and data analysis through implementation review; build and maintain research tooling (fuzzers, scrapers, observers); and produce actionable write-ups. The role is remote and the company does not sponsor visas.

Work includes triage, validation, routing, and remediation of findings from SAST/DAST/SCA, pentests and bug bounties; building automation to reduce manual effort; writing custom static analysis rules; reviewing platform-layer controls (authorization, secrets, service identity); threat modeling; and security enablement across engineering teams. Role is remote within the United States.