Mid-level individual contributor responsible for building and extending platform services that handle federated identity, authentication flows, and authorization enforcement across MeridianLink products. Role requires hands-on experience with OAuth 2.0, OIDC, SAML, JWT, backend service development in Python or .NET, API/integration patterns (REST, event-driven), multi-tenant considerations, observability, and active use of AI-assisted development tools. Expected to participate in on-call rotations, write tests, mentor junior engineers, and support product teams integrating with the identity platform.

Join Stripe's Security Analytics Infrastructure team to build and support SIEM, SOAR, EDR, server observability, threat intel and AI infrastructure. Role requires 5+ years of software engineering experience, significant cybersecurity experience, and experience applying AI tooling; Go and Python are preferred.

Join the Safety Platform team to build and operate critical safety infrastructure and services used to protect millions of Discord users. Responsibilities include designing and delivering backend systems, collaborating with Trust & Safety and ML teams, participating in on-call rotations, and maintaining high quality through code reviews and mentorship. Requires 5+ years of experience in backend services, strong programming skills (Python, Rust, or TypeScript), and experience with distributed systems and cloud platforms (GCP/AWS).

Responsible for designing and implementing security automation, APIs, and frameworks used across Product Security; building scalable systems for software supply chain security, AI-enabled vulnerability discovery, telemetry and monitoring; owning SRE excellence for mission-critical security services. Requires experience with Golang/Python/TypeScript, CI/CD, containers, config management (Ansible/Chef/Salt/Puppet), ElasticSearch/relational/graph databases, incident response/security operations, cloud (AWS/GCP) and Linux.

Remote-based in the United States, this deputy CISO role requires 10+ years in cybersecurity (including 3+ years in senior leadership) to drive security strategy, compliance (PCI, SOC 2, ISO 27001, DORA, FedRAMP), incident response, AppSec, cloud/SaaS security, IAM, and customer-facing security activities. The role involves cross-functional partnership, vendor evaluation, and regular travel (~once every 1–2 months).

Role responsible for developing secure AI/LLM integrations, building payment-related secure infrastructure, improving automated threat-modeling tooling, reducing security debt, partnering with product engineering to design secure-by-default solutions, scaling security via automation and guidance, and mentoring others. Minimum: Bachelor's (or equivalent) plus 5 years security engineering experience; experience with multiple CSPs (including AWS and GCP or Azure), application and infrastructure security, threat modeling, and container orchestration (Docker/Kubernetes). Salary range provided.

Tenable is hiring a Pre-Sales Security Sales Engineer (Chicago-based, US-remote) to lead technical aspects of enterprise selling: deliver demos and technical presentations, manage trials and PoCs/PoVs, advise on security best practices and compliance, engage stakeholders from engineers to CISOs, and collaborate with product and engineering. Role expects ~25% travel and a minimum of 3 years customer-facing technical sales experience with expertise in vulnerability management, cloud and container security, IAM, automation/DevSecOps tools (Python, APIs, Terraform), and compliance mappings.

Hopper is hiring a Senior Security Engineer to own and evolve the application security and vulnerability management program, build security tooling integrated into CI/CD and developer workflows, and leverage AI to automate analyses. The role requires at least 5 years of software and/or platform engineering experience and hands-on experience with cloud infrastructure (ideally GCP/GKE).

Own and evolve vulnerability management and application security (container images, dependencies, code scanning, runtime detection). Build CI/CD-integrated security tooling, use AI/LLMs to automate analyses, work with cloud infrastructure (ideally GCP/GKE), and collaborate with engineering teams to make secure defaults. Requires at least 5 years of software/platform engineering experience and deep application security knowledge.

The role sits in the Office of the CISO and serves as a security subject-matter expert and primary go-to-market contact. Responsibilities include leading cross-functional engagements with customers, partners, Legal, and Security; identifying and remediating control gaps; developing policies and metrics; and implementing tooling and automation to scale security and compliance efforts. Minimum requirement: 5+ years engaging with customers and partners within security, compliance, or go-to-market contexts.

CrowdStrike is hiring an Analyst I for the Falcon Complete virtual SOC to detect, contain and remediate incidents across Windows, macOS and Linux. Responsibilities include incident handling, basic malware analysis, forensic and network analysis, developing detection/remediation processes, and customer communications. Role requires willingness to work a 4x10 schedule including a weekend day and a hybrid onsite arrangement. Position is open only to US citizens and Green Card holders. Base salary range US$85,000–120,000 per year.

Individual contributor Principal Engineer responsible for owning DHI platform architecture, driving multi-quarter roadmaps, setting standards for image and Helm chart hardening (SBOM, SLSA, Sigstore), aligning cross-functional stakeholders, mentoring senior engineers, and participating in on-call incident response. Requires 10+ years backend/distributed systems experience and strong Go and container/Kubernetes ecosystem expertise.

Full-time mid-level role based in Foster City, CA (in-office Mon/Wed/Fri). The engineer will manage continuous infrastructure vulnerability lifecycles across multi-cloud environments, operate CSPM/KSPM/DSPM tooling, embed IaC security into CI/CD, support incident response, and track remediation to meet compliance requirements (e.g., SOC 2, ISO 27001, PCI-DSS).

Experienced engineer (8+ years) to design and operate LLM-based guardrails and detection systems, automate enforcement and response, analyze abuse patterns (BigQuery/Hex), and integrate security tooling in CI. Role is full-time based in Foster City, CA with an in-office requirement three days per week.

Senior engineering role on the Risk team focused on designing and operating abuse detection systems (phishing, cryptomining, account takeover, fraud) using LLMs and traditional techniques. Responsibilities include building LLM guardrails, ML/LLM classifiers, integrating security scanners in CI, analyzing data (BigQuery/Hex), and owning detection-to-enforcement workflows across Security, Support, and Legal. In-office in Foster City, CA with a 3-days-per-week on-site requirement.

Replit is hiring a Staff Software Engineer for Trust & Safety to design and operate AI-powered abuse detection systems and automated responses for threats such as phishing, cryptomining, account takeover, and financial fraud. The role requires owning detection and enforcement end-to-end, building LLM guardrails, analyzing large-scale data (BigQuery/Hex), integrating security scanners in CI, and collaborating with Support and Legal. Requires 8+ years in security engineering/anti-abuse/fraud detection and strong skills in Python or TypeScript, SQL, and ML/LLM-based classifiers. Location: Foster City, CA (full-time, hybrid with specified in-office days).

Full-time Senior Software Engineer on Replit's Fraud team (based in Foster City, CA; in-office M/W/F). Own end-to-end abuse detection and response: design and implement LLM-based guardrails and classifiers, build AI-powered detection systems, integrate security scanners into CI, and automate enforcement. Requires 4+ years in security/anti-abuse/fraud, strong Python/TypeScript skills, and experience with SQL and ML/LLM classifiers.

Replit is hiring a Senior Software Engineer for the Risk team to design and operate AI-powered abuse detection and automated response systems (phishing, cryptomining, account takeover, fraud) and build LLM guardrails. The role requires 4+ years in security engineering/anti-abuse, strong Python/TypeScript skills, experience with SQL and large-scale data analysis (e.g. BigQuery), and familiarity with ML/LLM classifiers and LLM-specific attack vectors. This is a full-time, primarily on-site role in Foster City, CA (in-office Monday, Wednesday, Friday).

Work on adversarial, AI-native trust & safety problems: design LLM guardrails, build ML/LLM-based detectors for phishing, cryptomining, account takeover and fraud, integrate security scanners into CI, operate detection tooling, and own the full abuse response lifecycle. Requires 4+ years in security engineering/anti-abuse/fraud detection and strong Python or TypeScript skills, SQL and large-scale data analysis experience.

Remote role (US or Canada) responsible for designing and delivering GRC automation and integrations (e.g., Drata), building AI-assisted evidence-collection and control-testing workflows, and owning delivery from scoping through go-live. Requires ~5+ years in security engineering, DevSecOps, solutions engineering, or GRC automation and hands-on scripting/integration experience (Python/JavaScript/APIs).