Remote US-based Senior IAM/Identity Infrastructure Operations Engineer for CrowdStrike. Responsible for managing identity provider operations and application lifecycle in GovCloud (US-Gov-1/US-Gov-2), ensuring FedRAMP/DoD compliance, implementing security controls, automating repetitive tasks, developing monitoring/alerting, and providing tier 2/3 support including participation in on-call rotation. Requires 6+ years' relevant experience (Master's with 6-7 years or Bachelor's with 8-11 years). Salary range for US candidates: $125,000 - $180,000 per year.

Manage, coach, and develop a small team of investigators and analysts focused on violent and extremist threat ecosystems. Serve as a player-coach on complex investigations and incident response, translate findings into actionable intelligence and policy recommendations, and coordinate with internal and external partners including law enforcement. Requires 5+ years relevant experience with at least 2 years of people-management experience.

Lead a highly-autonomous team of engineers to reduce security risk across engineering by building secure paved paths (IAM, CI/CD, cloud infrastructure), managing vulnerabilities, securing software supply chains, consulting on risk/architecture, and coaching a diverse engineering team. Requires 3+ years managing security software engineers and experience securing large-scale cloud environments; familiarity with Python, TypeScript, Rust, GCP, AWS, and Cloudflare.

Staff-level Security Governance Engineer responsible for drafting, maintaining, communicating, and measuring security policies and standards; aligning policies to regulations and frameworks (e.g., EU AI Act, NIST AI RMF, ISO 42001, SOC 2, ISO 27001, FedRAMP, NIST CSF); implementing automation and Policy as Code; and supporting audits, customer trust, and cross-functional collaboration. Requires 10+ years in security governance/GRC/IT risk.

GitLab is hiring a Senior Security Risk Engineer (remote in Canada and the United States) to own third-party risk, security risk assessments, and remediation tracking. The role requires building and maintaining a risk register, driving remediation to closure, and creating automation and AI-enabled tooling (including AI risk management and assessments) to improve GRC workflows. Requires 5+ years in security risk management with experience in frameworks such as NIST RMF, NIST 800-39, or ISO 31000.

NVIDIA is hiring a Security Engineer to own vulnerability backlog and drive scanning, triage, remediation, and validation for GPU kernel and firmware components. Requires 5+ years industry software engineering experience, strong C and low-level driver skills, and knowledge of OS and computer architecture. Responsibilities include security reviews, tooling evaluation, and communicating security posture to stakeholders.

Hands-on engineering role to implement tracing and explainability primitives for multi-agent LLM workflows, integrate and extend open-source observability/evaluation frameworks, build CI evaluation checks and red-team tests, and partner with product and security teams. Requires 3+ years' software engineering experience and production Python work; experience with LLM systems and cloud (Azure/AWS) is expected.

CrowdStrike is hiring a Platform Professional Services Senior Consultant to lead customer engagements for deployment, configuration, optimization, and operational support of the CrowdStrike Falcon platform and related applications. Responsibilities include technical implementation, troubleshooting, scripting using Falcon APIs, integrating CrowdStrike with customer tools, supporting Incident Response and Compromise Assessment teams, and delivering workshops. Role is remote for US candidates, may require up to 25% travel, and lists a U.S. base salary range of $100,000–$155,000 per year.

Lead the FedRAMP Moderate authorization end-to-end: maintain and defend the SSP, run continuous monitoring and annual 3PAO assessments, manage POA&M lifecycle, coordinate remediation with engineering, automate evidence collection and reporting (including AI-assisted workflows), and serve as primary federal point of contact. Requires 5+ years in information security with at least 3 years in a dedicated FedRAMP ISSO/ISSE role and strong familiarity with NIST SP 800-53 Rev 5. Remote (US-based).

Cribl seeks a Facility Security Officer to serve as the appointed FSO with DCSA, own FCL processes in NISS, manage cleared-personnel lifecycle in DISS/NBIS, guide applicants through eApp, deliver required security briefings, maintain DD Form 254s, conduct self-inspections and prepare for DCSA reviews, and establish security policies and training. Requires U.S. citizenship, active Secret clearance (ability to obtain Top Secret), and 7+ years of industrial- or personnel-security experience (including 3+ years as an appointed FSO or Assistant FSO).

Join the Proactive Threat team to simulate adversary TTPs, conduct penetration tests across web, API, mobile, cloud (AWS/GCP/Azure), and internal infrastructure, lead red team operations, collaborate with detection and incident response teams, and design automation and tooling. Minimum 5+ years in offensive security or related fields and strong programming skills (Python, Go) required.

Owner of the post-sales customer journey for an automated compliance platform, responsible for onboarding, implementation, adoption, audit readiness, and customer health. Requires hands-on GRC/security compliance experience and customer-facing SaaS implementation experience, with familiarity in frameworks such as SOC 2, ISO 27001, HIPAA, and GDPR.

Join GitLab as a Staff Product Security Architect within Security Platforms and Architecture to lead security architecture and design for strategic initiatives, act as Security Owner for high-priority risks, build prototypes, codify reusable security artifacts, conduct architecture reviews, and mentor engineers. Role is remote and listed locations include Canada, Israel, Poland, United Kingdom, and United States. A US base salary range is provided for residents of the United States.

The role focuses on building automated discovery and lifecycle workflows for non-human identities (service accounts, API tokens, cloud roles, CI/CD identities, AI agents), integrating with IAM/PAM, secrets management, PKI, and ITSM platforms, and supporting threat detection and incident response. Minimum 3 years' experience; candidate must be legally permitted to work in the United States. Pay range listed: $120,000–$160,000 (annual, per posting for specified US locations).

Responsible for operating the risk register and posture engine (register, evidence, audit ops) using Drata; running critical control monitoring and automation; coordinating ISO 27001 and SOC 2 audits, customer questionnaires, and external testing (red team, pentest); maintaining ISMS and security policy library; and reporting residual risk and exceptions. Qualifications call for hands-on GRC experience, audit coordination, strong written work, stakeholder management, and certifications such as CISA or ISO 27001 Lead Implementer/Auditor. Applications from France, Italy, and Germany are excluded. US pay range: $150,000–$206,000 USD (year).

Seeking a Senior Detection & Security Automation Engineer to lead SIEM platform administration, develop SOAR workflows, onboard log sources across cloud/infrastructure/identity/endpoint/app environments, create and tune detection content, perform threat hunting, and support incident response and FedRAMP-related security operations. Position is fully remote within the United States; minimum 5 years' relevant experience.

Senior individual contributor role at NVIDIA DGX Cloud responsible for architecture and implementation of core security domains (e.g., tenant isolation, workload identity, infrastructure/network, supply-chain provenance, baseline hardening, policy/admission control). Requires ~15+ years of experience in security and infrastructure engineering, production-grade coding, threat modeling for distributed systems, cloud-native architectures (Kubernetes), Linux security (including kernel primitives like eBPF), and collaboration across platform teams. Preferred experience includes GPU/HPC security, workload identity/attestation, TPM/HSM, confidential computing, and converting offensive research into engineering controls. Location: US (WA, remote). Salary range (base): 272,000–431,250 USD/year.

NVIDIA seeks a Distinguished Engineer to own and implement the security design standard for DGX Cloud, covering hardware root of trust through workload isolation, identity, supply chain, and detection. The role is hands-on, embeds with engineering teams, leads a small Principal Engineer team, and requires deep experience in securing large-scale distributed/cloud platforms (minimum ~18+ years noted). Location listed as US (Remote).

The Home Depot is hiring a Principal Cybersecurity Engineer (Domain Architecture & Data Science) to design and implement AI-powered security solutions that improve threat detection, incident response, automation, and overall SOC effectiveness. Requires 10+ years' experience, technical leadership, and collaboration across threat detection, red teaming, and engineering teams. Travel is not required; candidate must be legally permitted to work in the United States.

NVIDIA seeks a Tech Lead with 8+ years building and operating production software to lead the Cryptographic Services team. Responsibilities include building a cryptographic asset registry, key and certificate lifecycle tracking, telemetry/audit controls, API/CLI signing flows, and production post-quantum signing support (ML-DSA, LMS, hybrid). Requires hands-on engineering in Python/Java/Go and working knowledge of applied cryptography and HSM-backed key management.