Join Ramp's security team to lead detection and response initiatives—improving logging, alerting, runbooks, triage, and automation for federal/public sector environments. Requires ~3–4 years IT/security experience (SOC/CERT/C/SIRT), experience with query-based log management (ELK, Datadog, Panther), and hands-on automation tooling; role expects in-person work at NYC HQ at least two days/week. Relocation support to NYC or SF is available as needed.

Role focused on building and operating core attestation cloud services that validate NVIDIA platform integrity. Responsibilities include designing APIs and integrations, improving reliability and operational maturity (SLOs/SLIs, alerting, runbooks), implementing appraisal and verification workflows, and mentoring engineers. Requires BS/MS or equivalent, 12+ years experience in large-scale distributed systems/cloud services with at least 3 years in security/attestation, proficiency in Go or Java, and hands-on experience with Kubernetes, major cloud providers, CI/CD, and observability tools.

CrowdStrike seeks a Senior Competitive Intelligence Analyst for Platform Security to lead competitive analysis and field-facing strategy. The role requires deep technical knowledge in cybersecurity (endpoint and cloud security), at least 5 years of relevant experience, collaboration with product, sales, enablement and marketing teams, deal support, and presenting findings to senior leadership. U.S. base salary range listed: $145,000–$220,000/year.

Twilio is hiring a Senior Software Engineer (remote in the US) to develop Stytch’s fraud detection and prevention products, primarily working on a Device Fingerprinting product to detect bots, manual abuse, and reverse-engineering. Requires 6+ years designing, building, and operating production systems, familiarity with C/C++ and modern programming languages, and ability to work on-call and travel occasionally.

Join Invicti's AI team to design and implement autonomous agent systems and LLM-powered features focused on agentic pentesting and AppSec. Work spans agent architectures, memory/RAG systems, MCP integrations with security and developer tools, prompt chains, and full-stack ownership from design through production. Required: 5+ years shipping production software, strong Python, experience with LLM apps/RAG/agentic AI, distributed systems, API design, and cloud-native architectures.

Fully remote Senior Analyst, Security Compliance responsible for leading SOC 1/2 examinations, supporting SOX 404/ICFR planning and testing, performing ITGC/ITAC assessments, managing remediation, and partnering with internal and external auditors across cloud and hybrid environments. Requires 5+ years of external IT audit or technology risk assurance experience and hands-on SOX/control testing expertise.

The Security Risk Lead will run targeted risk assessments, analyze risk data, own systems that track risk decisions and mitigations, oversee risk committees, design metrics/reporting for senior leadership, maintain core security policies/standards, and support third-party/vendor risk assessment. The role requests 6+ years of relevant experience and familiarity with frameworks such as NIST CSF, ISO 27001, PCI DSS, and OWASP. Preferred locations include San Francisco, New York, Denver, or remote within the United States or Canada.

Role involves designing, building, and maintaining security products and infrastructure at cloud scale: real-time detection engines (Apache Flink, Kafka), high-throughput security APIs and microservices (Go, Node.js), streaming analytics, and Kubernetes-based security solutions. Requires experience with distributed systems, cloud platforms (AWS/GCP/Azure), infrastructure-as-code (Terraform/Helm/Chef), and familiarity with security tooling (SIEM, WAF, IDS/IPS).

Responsible for designing, building, and maintaining security products and infrastructure: real-time detection engines (Apache Flink, Kafka), high-performance APIs and microservices (Go, Node.js), Kubernetes-based security solutions, and petabyte-scale data pipelines. Requires 5+ years of software engineering experience, strong Go and JavaScript skills, deep distributed systems and Kubernetes knowledge, and cloud experience (AWS/GCP/Azure). Role is listed as hybrid.

Full-time Security Architecture Lead based in Foster City, CA (in-office Mon/Wed/Fri). Responsible for defining and maintaining Replit's secure architecture, conducting deep-dive security reviews, driving secure bootstrapping and isolation designs, contributing to the Cybersecurity Risk Register, and enabling compliance and sales with architecture-level security expertise. Requires 8+ years in security engineering or architecture and strong cloud-native security experience (GCP a significant plus).

Work on AI-native, adversarial anti-abuse problems: design LLM guardrails, build and operate ML/LLM-based detection and automated response systems, investigate abuse patterns using BigQuery/Hex, integrate security scanners in CI, and collaborate with Support and Legal. Requires 4+ years in security engineering/anti-abuse/fraud, strong Python and/or TypeScript, SQL/data analysis experience, and familiarity with prompt injection and common attack patterns.

Join Datadog's enterprise sales engineering team to drive adoption of Datadog security solutions. Responsibilities include conducting product demonstrations, supporting evaluations and proof-of-value, collaborating with sales and product teams, and advising on SIEM, SOC workflows, endpoint security (EDR/MDR), and cloud security across AWS/Azure/GCP. Role may require up to 30% travel.

The role is a Senior Engineer, Cybersecurity on The New York Times' Security Architecture team. Responsibilities include designing, implementing, and operating security controls (IAM, secrets, endpoint hardening, network segmentation, detection/response), performing security reviews, threat modeling, risk assessments, investigating and triaging security incidents, and partnering with product and platform teams. Requires 5+ years in software or security engineering and experience with cloud platforms (AWS/GCP), software engineering practices (CI/CD, GitOps, IaC), and programming in Go or Python. Preferred experience includes Kubernetes, Terraform, Packer, and HashiCorp Vault.

Hiring Ramp’s founding Privacy Engineer to design and implement privacy-focused application primitives, partner with engineering teams to deploy privacy-centric and secure solutions, implement data retention and anonymization strategies, and track/update systems for shifting data-protection legal standards. Requires minimum 4 years building software and at least 2 years focused on platform/privacy/security; experience with Python (Flask), React, and AWS (ECS) is listed as desirable.

Join Ramp's Product Security team to build security-focused application primitives, design and deploy platform-level mitigations, and lead remediation of vulnerabilities discovered internally and via pen tests and a bug bounty program. The role partners with engineering teams to design secure solutions and champion security tooling (linters, static analysis, posture scanners, query inspectors). Preferred experience includes Python (Flask), Elixir, and AWS (ECS).

Technical leadership role focused on reducing security risk across engineering by building secure baselines for cloud infrastructure, securing software supply chains, and owning identity and access management. Requires experience building and operating production systems, writing software (Python/Rust), securing large-scale systems and mentoring other engineers; familiarity with cloud providers (GCP, Cloudflare, AWS), containers, CI/CD, and modern authentication/authorization concepts.

DigitalOcean is hiring a Senior Software Engineer for the Security Products team (hybrid, Seattle). The role involves designing and building real-time detection engines (Apache Flink, Kafka), high-performance APIs/microservices (Go, Node.js), Kubernetes-based security solutions, and large-scale security data pipelines. Requires 5+ years' software engineering experience and expertise in distributed systems, high-throughput architectures, cloud platforms (AWS/GCP/Azure), and IaC tools (Terraform/Helm/Chef). Salary range listed: $133,680–$167,100 per year.

Join MetaMask as a DevSecOps Engineer to deliver, upgrade, and maintain development and production infrastructure with strong cybersecurity standards (ISO/SOC2). The role involves operating CI/CD pipelines, Kubernetes/Helm deployments, IaC (Terraform), monitoring, and collaborating with engineering, SRE, and product teams across a fully remote, global organization. US-based candidates have a listed pay range of $164,000–$218,000 USD (base).

Join Coinbase as a Senior Site Reliability Engineer focused on the corporate identity and access management (IAM) platform. You will own end-to-end reliability (on-call, incident response, RCA), build and maintain CI/CD pipelines and automation, partner with IT/Security/Engineering on IAM architecture (SSO, MFA, provisioning, ABAC/RBAC), and drive observability and disaster recovery. The role requires 5+ years of SRE or infrastructure engineering experience with hands-on IAM platform experience (e.g., Okta, Duo, Auth0, EntraID, Ping), proficiency in at least one modern language (Go, Python, Ruby, Java, C#), and experience with cloud environments and IaC (Terraform). Annual base salary range: $186,065–$218,900 USD.

The Staff Security Engineer (Blue Team) will act as technical lead for Olo’s Security Blue Team, guiding information protection, incident detection and response, threat hunting, vulnerability management, and security service programs. The role requires 5+ years of security engineering/operations/architecture experience, familiarity with PCI-DSS compliance, cloud security (AWS), IaC, containers/Kubernetes, operating system hardening, SIEM/EDR and a range of security technologies. This position supports a distributed/remote U.S. workforce and participates in a 24/7 on-call rotation.