Replit is hiring an Engineering Manager to create and lead a 0-to-1 Anti-Abuse team focused on defending the platform from phishing, cryptomining, token farming, payment fraud and AI-driven abuse. Responsibilities include defining threat models and metrics, designing progressive verification/KYC-oriented identity infrastructure, shipping detection and enforcement systems, building data pipelines and dashboards, and hiring and growing a small engineering and analytics team. Requires ~6+ years engineering experience with 2+ years managing teams and experience in abuse/fraud/trust-orientated systems.

NerdWallet is hiring a Security Software Engineer focused on AI and automation to design and implement AI-driven security tooling (RAG, LLM multi-agent systems, semantic search), automated code review, integrations (GitHub, Slack, Jira, Confluence), and secure backend services. Requires 3+ years of software or security engineering experience and strong proficiency with Python or Go, application security concepts, cloud and distributed systems (AWS, containers/Kubernetes/ECS), and experience building AI-powered systems while addressing AI-specific security risks.

Hands-on senior product security role responsible for designing and architecting secure network connection patterns and zone segmentation across hybrid networks (AWS, GCP, Azure, physical data centers). Responsibilities include threat modeling, building scalable monitoring/alerting/automation for network security, leading cross-team security initiatives, mentoring engineers, and contributing to medium-term network security strategy. Requires scripting/automation (Python, Go, shell), deep protocol and networking knowledge, and experience in cloud-native/SaaS product environments.

Senior engineering role focused on shaping architecture, reliability, scalability, and security of 1Password's identity systems underpinning authentication, authorization, session management, device trust, federation, and integrations. Requires deep Go expertise, extensive experience in identity and access management, leadership in technical strategy, and collaboration across cross-functional teams. Remote within the United States and Canada; travel for in-person engagement is expected.

Replit is hiring a mid-level AppSec Vulnerability Management Engineer to bridge security, compliance, and engineering. Responsibilities include periodic application scanning and triage, maintaining SBOMs and maturing supply-chain posture (SLSA), tracking vulnerabilities to meet compliance SLAs (SOC 2, ISO 27001, PCI-DSS), integrating and tuning SAST/SCA/secret-scanning tooling in CI/CD, collaborating on remediation (including direct code patching), and supporting incident response. Role is full-time, based in Foster City, CA with an in-office requirement Monday, Wednesday, Friday. Approximately 5 years of relevant experience required.

Join 1Password's Product Security team to implement next-generation security features for macOS, iOS, Android, Windows, Linux and Web apps. Role emphasizes iOS and Apple security (Secure Enclave, biometrics), Rust development and FFI, secure libraries, vulnerability remediation, secure coding guidance, cross-team collaboration, mentoring, and involvement with AI-related security workflows.

Kraken seeks a hands-on Staff Security Architect for Kraken Security Labs to design and review security architectures, conduct assessments and audits, and provide expertise across blockchain, cryptography, web3, Rust, infrastructure, and emerging AI product security. The role involves deep technical consulting and collaboration with engineering teams across the company.

Work on detection and corporate security for Quora and Poe: build and maintain SIEM, write detections, deploy canary tokens, investigate incidents (malware analysis, exfiltration, timelines), create runbooks, and partner with IT on endpoint and identity controls. Requires 5+ years in security/detection engineering, hands-on SIEM experience, endpoint/EDR experience, strong Python skills, and incident response experience. Remote-first role available in the United States and Canada; US and Canada salary ranges provided in the posting.

Role requires designing and implementing security systems, policies, and controls for AI/HPC cluster infrastructure; leading incident response and disaster recovery; and working across engineering, platform, legal, and compliance teams. Requires 8+ years' relevant experience and strong proficiency in C/C++, Linux kernel hardening (SELinux/AppArmor), eBPF, and large-scale Linux infrastructure security.

Lead cross-functional programs to communicate Stripe's security activities to customers and partners, act as the main go-to-market contact for security-related requests, and implement tooling and automation to scale security processes. Identify security control gaps, oversee remediation with control owners, and report on program health and metrics.

Role focused on offensive AI security: designing and executing red team assessments, innovating AI attack techniques, building scalable security tooling and automated evaluation pipelines, and partnering across AI Research, Engineering, Ethics, and Cybersecurity. Requires extensive hands-on experience securing AI/ML systems (including LLM vulnerabilities) and strong Python proficiency.

CrowdStrike seeks a Third Party Risk Management (TPRM) Analyst to develop and operate the TPRM program, conduct vendor security risk assessments across the vendor lifecycle, manage findings and remediation, produce reporting/dashboards, collaborate with procurement/legal/privacy/IT, and drive automation using GRC tooling. Experience with GRC/TPRM platforms, vendor control frameworks (SOC, ISO, NIST, CSA-CCM, GDPR, PCI-DSS), and continuous monitoring tools is emphasized. U.S. base salary range: $85,000–$120,000 per year.

Lead day-to-day operations of GitLab's Security Incident Response Team in the Americas: manage and develop incident response engineers, lead high-severity incident command, mature IR processes and runbooks, and coordinate cross-functional mitigations. Role requires hands-on incident response experience (SIEM, DFIR, cloud forensics), use of AI/automation in workflows, availability during US West Coast business hours, and U.S. citizenship.

Senior Manager responsible for strategy, operations, and financial management of Parexel’s global network environment, including SD-WAN, Palo Alto firewalls, Cisco/Meraki LAN/WLAN, telecom, and AV. Role includes vendor and contract management, budgeting and cost optimization, driving standardization, security and compliance alignment, capacity and resilience planning, incident escalation, and leading engineering and operations teams. Requires 10+ years progressive experience.

Hands-on engineering role on GitHub's Product Security team focused on designing, building, and maintaining security tooling and automation (static analysis, secret scanning, dependency analysis, CI/CD integrations) and supply chain defenses. Requires security engineering experience (listed options include 5+ years without degree or fewer years with higher degrees) and 3+ years programming in at least two of Ruby, Go, and Python.

Full-time, in-office (Mon/Wed/Fri) GRC Engineer role responsible for technical ownership of Replit’s GRC program, driving compliance-as-code and automation, managing SOC 2/ISO 27001 and other regulatory requirements, operating the cybersecurity risk register, and partnering with engineering, legal, sales, and external auditors. Requires 8+ years of GRC or information security experience.

Full-time Product Security Architect at Replit responsible for defining and enforcing secure product architecture, leading security implementation of features, conducting threat modeling, specifying authentication/authorization (mTLS/OIDC/OAuth/SAML), performing code reviews (Python/Go/JavaScript), and maintaining the authoritative secure architecture documentation. Requires 8+ years of product security engineering/architecture experience with multi-tenant SaaS.

Work involves maintaining image definition files, adapting upstream Helm charts to security and Kubernetes constraints, tracking upstream releases, writing Go-based integration tests, triaging CVEs, and reviewing peers' work. Requires 6+ years backend engineering experience and strong familiarity with containers, Kubernetes, Helm, YAML, and container/supply-chain security concepts.

Udacity (an Accenture company) seeks external contractors to serve as Cybersecurity Technical Mentors delivering 1:1 sessions, technical deep-dives, and group Q&A. Requires 5+ years relevant experience and strong cybersecurity skills (network, application, system security; threat detection; incident response; familiarity with SIEM/IDS/IPS and security frameworks). Role is remote and targets candidates across US, Canada, Europe, MENA, India and APAC timezones.

Kraken seeks a Network Engineer within Core Infrastructure Engineering to manage and secure network infrastructure across physical and cloud data centers. Responsibilities include implementing zero-trust and defense-in-depth architectures, deploying infrastructure as code, network automation, vendor platform administration (Palo Alto, Cisco, Juniper, Aruba), monitoring, IDS/firewall management, and mentoring internal teams. Requires 4+ years of network engineering experience and familiarity with public/private/hybrid cloud.