Individual contributor role owning executive protection, event security, and physical security systems (access control, cameras, guards) across Ramp's HQ and global offices. Requires 6+ years in corporate/physical security with hands-on experience in at least two of the three core areas, vendor and program management, and the ability to build measurable, risk-based security standards and processes.

Chainguard seeks a Security Analyst to maintain and improve security assurance content (questionnaires, Trust Center, sales artifacts), establish review/versioning processes, and maintain/audit AI agents used by the Governance and Trust function. Role requires experience in security assurance/GRC or related functions, familiarity with AI-enabled workflows and prompt engineering, strong documentation and communication skills. Listed base salary range: $89,000–$105,000 USD per year.

Chainguard seeks a Security Analyst focused on assurance and automation to maintain and improve customer security questionnaires, Trust Center content, and other assurance artifacts. The role includes operating and governing AI agents used by Governance and Trust—auditing agent behavior, updating prompts and reference content, documenting changes and limitations, and establishing repeatable processes for assurance content and AI-enabled workflows.

CrowdStrike CAO Elite Senior Analyst responsible for customer-focused threat hunting, tailored threat intelligence, dark web monitoring, delivering briefings and partnering across teams. Requires 5+ years' experience across incident response, threat hunting, cyber threat intelligence or dark web monitoring; familiarity with MITRE ATT&CK, cloud/SaaS security, AI tools, and presentation of findings.

Lead and grow a security operations team, own detection engineering and observability, run hands-on incident response and investigations across logs, endpoints, identity, cloud, and SaaS, and drive security platform strategy (SIEM, EDR/XDR, CSPM, SOAR). Requires 10+ years in security operations with 3+ years leading technical teams, strong scripting (Python/Go), GCP/container experience, and experience applying AI to security workflows.

NVIDIA is hiring a Principal Hardware Security Architect to develop and guide platform security roadmaps for next-generation SoCs and GPUs. The role emphasizes threat modeling for advanced packaging and silicon photonics, mitigations for physical attacks (fault injection, side-channels), AI-accelerated vulnerability discovery, and standards compliance (e.g., OCP S.A.F.E.). Requires MS or PhD (or equivalent), and 15+ years of relevant experience. The posting lists an expected base salary range of 272,000 USD–431,250 USD and accepts applications through at least November 3, 2026.

Lead PCI DSS assessments, gap analyses, and readiness reviews across client environments; evaluate design and effectiveness of cardholder data security controls; prepare assessment reports, observations, and executive summaries; provide remediation recommendations and mentor junior team members. PCI QSA certification required; 3+ years' related experience and a relevant bachelor's degree preferred.

Frazier & Deeter is seeking an Advisory Manager (PCI QSA) with 6+ years of experience to lead PCI DSS assessments, gap analyses, readiness reviews, and remediation strategy. Responsibilities include reviewing technical and process controls in cardholder data environments, managing engagement budgets and staffing, delivering assessment reports, advising senior client stakeholders, and supervising and developing staff. PCI QSA certification is required; additional certifications (CISA, CISSP, CISM, CRISC, ISO 27001) are required or strongly preferred.

Responsible for end-to-end delivery of CMMC readiness and certification engagements including scoping, budgeting, staffing, technical evaluation against NIST SP 800-171/800-171A, review of SSPs and POA&Ms, and final reporting. Role includes supervising consultants, supporting business development, refining methodology and tooling, and representing the firm externally. Requires a bachelor’s degree, 7+ years relevant experience (including supervisory/engagement management), Certified CMMC Professional (CCP), and U.S. citizenship to participate in CUI assessment activities.

VGS is hiring an Application Security Engineer to design and drive a secure SDLC, automate security guardrails in CI/CD (GitHub/GitLab), operate and triage a private bug bounty program, conduct threat models and code reviews for Java and Python microservices, and grow security capability through training and a Security Champions network. The role lists 3–5+ years of AppSec or full stack development experience and includes experience with SAST/DAST/SCA tools and vulnerability/program management.

Senior Principal Engineer responsible for defining multi-year technical vision and architecture for build and software supply chain security across Docker Desktop, Hub, and related products. Drive designs for artifact signing, attestations, SBOMs, CI/CD integration, and policy enforcement; work with executives on strategy, participate in on-call incident response, and influence industry standards. Role is individual-contributor (no people management) and requires 12+ years of relevant experience; U.S. base range provided: $219K–$352K.

Lead technical owner for the static analysis engine and evaluation tooling: define architecture for parsing, symbol resolution, IRs, call graphs, and taint/data-flow analysis; design AI-agent workflows and safeguards; build benchmarking and validation harnesses for SAST rules (CWE/OWASP); mentor engineers and participate in on-call operations. Work spans Rust, Go, and Ruby; role is remote with listed locations in Canada, Israel, United Kingdom, and United States. US base salary range provided: $152,800–$259,200 USD per year.

Join GitLab's Security Factory: Code Security team as a Senior Backend Engineer to design and ship hybrid analyzers (rule-based + AI), parse manifests/lockfiles/SBOMs, extend dependency analysis, and contribute to automated remediation. Role involves building evaluation harnesses, packaging analyzers for CI/agent/CLI, mentoring engineers, participating in on-call rotations, and working across Go/Rust/Python/Ruby ecosystems.

Chainguard is hiring a Senior Product Security Engineer to design, build, and maintain secure CI/CD pipelines with security gates; implement software supply chain controls (signed artifacts, SBOMs, SLSA, Sigstore/Cosign); and lead security architecture and threat modeling for Kubernetes workloads on GCP and AWS. Requires 5+ years of relevant engineering/security experience and strong hands-on skills in Go or Python, Kubernetes hardening, cloud IAM/secrets, container security, and CI/CD tooling.

Design and implement Golang/Python microservices and data pipelines for risk intelligence and exposure management. Work with streaming and batch frameworks (Spark, Flink, Kafka), cloud platforms (AWS preferred; Azure/GCP), databases (Cassandra, graph DBs), and ensure operational reliability; mentor engineers and drive architecture.

Remote-optional IT Security Specialist responsible for endpoint security (macOS/Jamf, CrowdStrike), Okta-based identity and access management (adaptive MFA, SSO, provisioning/offboarding), Google Workspace and SaaS security, security monitoring and logging, incident investigation, malware/device remediation, vendor assessments, security awareness/phishing programs, and AI security guidance. Listed salary range: $85,000–$105,000 (annual, US locations).

Join the internal security team to design, test, and deploy detections as code (KQL) via GitOps; perform hypothesis-driven threat hunts across cloud, SaaS, identity, endpoint, and infrastructure; participate in incident response (initial 6–12 months); and maintain security log flows and telemetry pipelines (including Cribl Stream). Requires 5+ years in security operations with hands-on detection engineering, KQL, Python, SIEM and log pipeline experience.

Senior Analyst on the Risk Analytics team focused on end-to-end controls for ATO and scam prevention, defining risk success metrics, building reporting frameworks, conducting SQL/Python-based analyses, and investigating fraudulent activity. Requires 6+ years risk experience (including 2+ years focused on ATO/scams). Annual base salary range: $167,280–$196,800 USD.

Close is hiring a Senior Product Security Engineer to lead application and product security efforts across backend, frontend, APIs, integrations, containers, and cloud. The role involves threat modeling, finding and reproducing vulnerabilities, driving remediation, improving security tooling and automation (SAST/DAST, dependency and secrets scanning), supporting audits (SOC 2), and participating in incident response while writing code and building pragmatic security solutions.

Lead incident investigations from detection through post-incident review, coordinate containment across Security, SRE, and Engineering, and build automation and tooling (Python/Go/Bash) to accelerate triage and containment. Requires hands-on experience with SIEM, cloud logs, GCP (IAM, GKE), Kubernetes, container forensics, and developing detections, playbooks, and response automations.