Senior engineering leadership role owning architecture and technical strategy for Stripe Identity (Identity Store, headless verification platform, fraud detection). Requires 10+ years' software engineering experience with strategic technical leadership, experience in API and platform development, and familiarity with ML systems in production and fraud/identity domains. Role is open to candidates in Seattle, New York, San Francisco, or remote within the US.

Role responsible for building and improving security-focused ML models (guardrails, classifiers, anomaly detection) across Reddit's GenAI workflows. Owns full ML lifecycle including data ETL, feature engineering, training, evaluation, deployment, monitoring, and retraining. Requires 5+ years of production ML experience and hands-on experience with frameworks such as PyTorch or TensorFlow; remote (United States) position.

The role focuses on translating novel security research into scalable product implementations, driving technology transfer between research and product teams. Requires 5+ years' software engineering or security research experience, deep expertise in at least one security domain, strong programming and system architecture skills, and experience building both rapid prototypes and production-grade systems.

Virta Health seeks a Cloud Security Engineer to build and mature its application security program. Responsibilities include assessing GCP and Kubernetes controls, integrating security into the SDLC, implementing security tooling and automation (SAST/DAST/IAST), refining IAM/RBAC, improving network security, driving vulnerability management and incident response, and developing security policies. Role requires hands-on experience with cloud-native security, Terraform, Go and Python, threat modeling, and secure coding practices.

Reddit is hiring a Staff Product Security Engineer to lead design and delivery of secure frameworks, paved paths, and workflow-native controls that prevent recurring vulnerabilities, with emphasis on AI-assisted development. Responsibilities include embedding security into developer workflows (CI/CD, code review, releases), driving product security reviews, and eliminating systemic security debt. Requires 8+ years in software/product/application security (including 2+ years at staff scope), proficiency in Go/Python/JS/TS, experience building developer-facing platforms and secure libraries. Base salary range: $217,000–$303,900 USD/year.

Join Arize AI as a DevSecOps Engineer to design guardrails for agentic AI, secure TypeScript/Node.js codebases, integrate SAST/DAST/SCA/secret and IaC scanning into CI workflows, threat-model LLM and agent features, and lead incident response. Requires 4+ years in DevSecOps/application/platform security and practical experience with TypeScript, cloud infrastructure, containers, Kubernetes, and CI/IaC tooling.

Role for a backend engineer to design and build AI security frameworks and primitives integrated with Stripe's AI infrastructure. Responsibilities include creating defenses against AI-specific threats (prompt injection, jailbreaks, tool misuse), partnering with engineering teams to integrate security, and contributing to systems and infrastructure. Minimum requirement: 5+ years software development experience.

Hands-on senior security engineer embedded in the Docker Desktop team owning security posture across a cross-platform product. Responsibilities include threat modeling, security design and code reviews (Go), CVE triage and coordinated disclosure, partnering with central security, and improving container/runtime and identity-related security (namespaces, cgroups, seccomp, AppArmor/SELinux, OCI runtimes). Role may include on-call duties.

ActiveCampaign seeks a Senior Security Engineer to define cloud security architecture and secure-by-default patterns in AWS (IAM, VPC, encryption/KMS), optimize CNAPP tooling (Wiz), embed security into IaC and CI/CD (Terraform, build-time scanning, supply chain guardrails), harden containerized workloads (Kubernetes/EKS), and build production automation with Python and SOAR. Role requires 5+ years hands-on security engineering experience. Salary range: $126,000–$154,000 USD per year. Includes participation in an on-call rotation.

CrowdStrike seeks a Strategic Advisory Services Consultant (remote, U.S.) to support delivery of proactive cybersecurity engagements—assessing and maturing security and incident response programs, developing exercise scenarios, producing reports and presentations, contributing thought leadership, and engaging with management-level clients. Candidates should have 2–6 years relevant experience (minimum 2 years) across areas such as security consulting, program development, security operations, risk analysis, or cybersecurity policy. Role may require up to 30% travel. Base salary range for U.S. candidates: $95,000–$140,000/year.

Join Docker's IAM team to own and evolve the identity backbone used by millions. Responsibilities include building Go services for auth and authorization, extending OIDC/SSO/SAML/SCIM, improving observability, performance, and security, designing for multi-region operation, and participating in on-call rotation. Requires 6+ years backend experience, strong Go proficiency, Postgres, gRPC, event-driven systems (Kafka), AWS, and solid understanding of OAuth2/OIDC/SAML/JWT and authorization models (RBAC/ReBAC).

Join GitLab’s Infrastructure Security team as a Staff Security Engineer to set architectural patterns, lead infrastructure security initiatives, conduct threat modeling and security reviews, and implement security automation for cloud infrastructure (AWS/GCP/Azure) and Kubernetes. The role requires hands-on experience with IaC (Terraform/Ansible/CloudFormation), policy-as-code, applying AI to security workflows, proficiency in languages such as Go/Python/Ruby, and familiarity with compliance frameworks (FedRAMP, ISO 27001, SOC 2, PCI-DSS). Remote across APAC, EMEA, or US.

Senior engineer role owning end-to-end abuse detection and response: design and implement LLM guardrails, build AI-powered classifiers and automated enforcement, integrate/tune security scanners in CI, and analyze abuse patterns using BigQuery/Hex. Requires 8+ years in security engineering/anti-abuse/fraud detection and experience with Python/TypeScript, SQL at scale, ML/LLM classifiers, and familiarity with common attack vectors.

The Developer Relations Manager will serve as a technical advisor and advocate to security companies building solutions for AI and Agentic environments, driving adoption of NVIDIA technologies through onboarding, integration, co-innovation, and developer enablement. The role requires strong technical experience in HPC, cloud, AI/ML and security, 8+ years overall experience (5+ years in AI/Agentic Security), and demonstrated success scaling developer programs and technical partnerships.

Role responsible for managing vulnerability lifecycle (intake from bug bounty, scanners, reports), validating and reproducing findings, coordinating remediation with Engineering/SecOps/SRE/Cloud teams, running bug bounty and disclosure programs (HackerOne preferred), and preparing CVEs and public advisories. Position is full-time based in Foster City, CA with an in-office requirement Monday, Wednesday, and Friday.

Remote U.S.-based Senior Platform Professional Services Consultant focused on planning, deploying, configuring, tuning and supporting CrowdStrike Falcon AI/ML detection and response. Requires ~8 years of IT deployment experience, strong AI/ML and cybersecurity knowledge, scripting/API experience (Python, PowerShell), endpoint and cloud familiarity, and up to 25% travel.

This senior consultant role focuses on planning, deployment, configuration, tuning and operational support of CrowdStrike Falcon's AI/ML detection and automated response features for customers. Responsibilities include configuring ML models, developing automation playbooks, scripting with Falcon APIs, integrating AI capabilities into customer workflows, supporting incident response and leading internal AI skills workshops. Position is remote (USA) and may require travel up to 25%.

Twilio seeks a GSOC Operator to maintain situational awareness across internal and external physical events worldwide. Responsibilities include monitoring access control and surveillance systems, OSINT and travel-safety tools, performing incident intake and triage, dispatching security or emergency resources, executing mass notifications, maintaining incident documentation, and participating in post-incident reviews. Role requires 3+ years GSOC experience and availability for variable 8–10 hour shifts including weekends and holidays; approximately 10% travel is anticipated.

VGS is hiring an Application Security Intern to assist security and engineering teams with application and API security reviews, validating findings from SAST/DAST and dependency/container scans, threat modeling, manual web/API testing (access control, auth, input validation, secrets), and improving secure SDLC processes and tooling. Candidates should be pursuing a relevant degree or have equivalent experience, understand OWASP Top 10 and secure coding, be able to read code (Java, Python, JavaScript, or Go), and be familiar with Git and development workflows. Role is remote-first, $20/hr, and requires legal authorization to work in the United States; hiring is limited to specified US states.

CrowdStrike is hiring a Senior Platform Professional Services Consultant to plan, deploy, tune and support AI/ML-driven detection and response using the Falcon platform. The role requires ~8 years of IT deployment or customer-facing experience, strong AI/ML and cybersecurity knowledge, scripting/API skills, cross-platform OS expertise, and up to 5% travel (US-based, remote).