Remote (USA) senior role requiring 5+ years in operational threat intelligence, incident response, security research, or cyber investigations. Responsibilities include automating threat tracking and analysis, modeling the threat landscape in the company’s Threat Intelligence Platform, conducting OSINT, delivering intelligence briefs to technical and executive stakeholders, and responsibly applying generative AI. Annual base salary range: $180,370–$212,200 USD.

Lead complex onchain investigations into threat actor infrastructure, scams, exploits, and crypto abuse targeting Coinbase. Perform wallet clustering and attribution using blockchain analytics and OSINT, build analysis pipelines/queries/dashboards, operationalize results into controls, lead post-incident reviews, and brief stakeholders. Requires 5+ years of investigations (including 3+ years onchain), proficiency with Python or Go and SQL, and deep blockchain knowledge.

Join DigitalOcean's Secure Design team to perform threat modeling and security risk assessments, provide remediation guidance, mentor engineering teams, and build automation and tooling to scale product security practices. The role focuses on secure architecture across infrastructure, application, people, and process.

Join DigitalOcean's Secure Design team to perform threat models and security risk assessments, provide hands-on remediation guidance, cultivate a security culture, build security tooling and automation, and collaborate with product and security teams. Preferred experience includes guiding secure architecture design, threat modeling, and knowledge of supply chain security and languages like Go, JavaScript, Rust, or C.

CrowdStrike seeks a junior technical analyst to detect, contain, and remediate incidents across Windows, macOS, and Linux in a virtual SOC. Responsibilities include incident handling, forensic and malware analysis, network log analysis, remediation planning, scripting/programming, and producing written and verbal reports. Role is US-only (citizens and green card holders), hybrid in St. Louis with a 4x10 schedule including weekend coverage.

Contract role at 66degrees responsible for AI/ML security operations, incident response, playbook development, detection engineering, and AI governance. Tasks include securing generative AI systems and LLMs, developing mitigations for prompt injection, model poisoning, data exfiltration, and adversarial attacks, and collaborating with IT and AI/ML teams. Employer cannot sponsor or transfer visas.

Hands-on offensive security researcher role responsible for creating detection rules (primarily OpenGrep), researching new vulnerability and malware classes, building proof-of-concept attacks, designing evaluation harnesses and benchmarks, and collaborating with engineering and platform teams to ship and maintain detection capabilities. Requires 8+ years of offensive/application security research experience, strong JavaScript knowledge (Python a plus), deep web app pentesting and detection-writing experience, and familiarity with cloud-native platforms and CI/CD security. Role is based in the United States with a hybrid schedule (twice weekly in the Austin office).

Lead development and production of ML systems for AI security (detecting prompt injection, jailbreaks, sensitive data exposure, unsafe AI behavior). Responsibilities include model selection and fine-tuning, building reproducible training/evaluation pipelines, improving inference performance and reliability, owning training-data quality and model lifecycle, and establishing responsible ML best practices. Requires 8+ years experience, strong Python and deep learning framework skills, and expertise in distributed training and adversarial evaluation.

1Password is hiring a Staff Security Engineer on the Security Incident Response team (remote within the US and Canada). The role focuses on leading high-severity incidents as an incident commander/technical lead, designing and building AI-assisted and automated security tooling, owning multi-quarter capability roadmaps, and running readiness programs such as tabletop exercises and gamedays. The posting lists an annual base salary range for US-based roles ($192,000–$278,000 USD) and for Canada-based roles (CAD ranges also provided in the posting). The position requires strong software engineering experience, experience with cloud-native/SaaS/identity-related attacks and response, threat hunting and insider-risk capability development, and strong written and verbal communication.

Lead end-to-end strategy, investigations, and system architecture for advertiser fraud detection and enforcement. Partner with Data Science, Engineering, Product, and Policy to build detection logic, risk scoring, automated enforcement pipelines, and standardized operational playbooks. Requires 7+ years in threat intelligence, ad fraud, or platform integrity and strong SQL/Python/R and big-data experience.

Senior Technical Architect (Security) for Professional Services responsible for designing and delivering secure GitLab architectures (SaaS, Self-Managed, Dedicated), conducting security risk assessments and threat modeling, leading CI/CD and security-tool migrations, and advising customers on compliance frameworks such as NIST 800-53, ISO 27001, and SOC 2. Role requires hands-on experience with infrastructure as code (Ansible, Terraform), GitLab security scanning capabilities, and integrating security controls into CI/CD pipelines.

The role is a hands-on systems engineering position on Corporate Security responsible for device management and patching, identity and authenticator policies (Okta), endpoint security enforcement (EDR, DLP, VPN), and controls around enterprise AI (OpenAI/Claude). Work emphasizes API-driven automation, configuration-as-code, drift detection, and reporting; you will collaborate with IT, Security Engineering, and AI DevX.

The Home Depot seeks a Cybersecurity Software Engineer II to build secure, scalable AI-powered security applications. Responsibilities include designing and integrating threat defense capabilities, building agentic AI and RAG systems, integrating MCP, working with cloud services (primarily GCP/Vertex AI), implementing CI/CD and observability, and supporting security operations. Minimum 2+ years' experience; preferred skills include Python, Java, LangChain/agent frameworks, embeddings/vector search, SQL/NoSQL, microservices/APIs, and security concepts (MITRE ATT&CK, authentication/authorization).

Lead Sysdig's assurance function from a technical, customer-facing perspective. Own ISO 27001/27701 and SOC 2 Type II certification lifecycle, design and implement continuous controls monitoring and control automation, build AI assurance aligned to ISO 42001/NIST AI RMF/EU AI Act, manage high-consequence customer engagements and third-party AI risk, and enable field teams to answer security questions without escalation.

Senior leadership role to run Sysdig Threat Research end-to-end: set the AI security research agenda, lead a small hands-on team of researchers and engineers, own detection content and the detection platform, publish original research (CVE, campaigns, talks), and partner with Product and Marketing. Requires 10+ years in security research/detection engineering, published AI security work, hands-on tooling and analysis, and deep knowledge of Linux, containers, Kubernetes, and cloud internals.

Hands-on principal-level engineering role to architect, prototype, and productionize agent identity and security features (credential brokering, token exchange, workload identity, lifecycle management) and to collaborate with Enterprise Security, Product Security, and platform teams. Requires 15+ years of experience in software/security engineering, strong backend/API engineering skills, offensive security mindset, container and cloud experience (AWS/Azure/GCP), and familiarity with identity standards (OAuth/OIDC, SPIFFE, mTLS) and secrets/certificate management.

Role leads Product Security and Security Operations, setting strategy and operating plans, embedding security in the SDLC, driving detection engineering and incident response, guiding high-severity investigations and remediation, and managing budgets and security vendors. Requires leadership experience and deep technical knowledge across application security, detection engineering, cloud security, and incident response.

Role owns the end-to-end technical strategy for Identity & Access Management (human, AI agent, service/workload identities) and sets architecture and standards across multiple pods and hundreds of consuming teams. Responsibilities include driving adoption and migration for 700+ systems, defining shared primitives for authentication/authorization/provisioning/governance, translating audit and regulatory requirements (UAR, SOX, SOC 2) into automated controls and evidence, designing data models and tooling to answer access questions, and mentoring senior engineers. Required: 12+ years software engineering experience, senior technical leadership across multi-team platforms, production Go experience, distributed systems design on AWS, and fluency in identity protocols (OAuth 2.0, OIDC, SAML, SCIM).

Work on ACE to design, prototype, and deploy API- and product-level controls (rate-limiting, auth checks, input validation, pre-debit holds), run experiments/A-B tests to measure risk vs conversion, build automated regression and attack-simulation suites, and hand off mature controls to product teams. Requires 3+ years in security/software/anti-abuse engineering and strong development skills (Python/Go/Java, SQL).

Join Docker's security team to run adversary‑emulation exercises, penetration tests, and threat modeling across products and cloud infrastructure (AWS, GCP, Azure). The role requires building exploits and automated tests, partnering with engineering to remediate findings, improving security programs and tooling, and participating in incident response and on‑call rotations. Requires 3+ years in security engineering, hands‑on offensive experience, development in Python or Golang, and cloud/container security expertise.