Lead an 8-person PSIRT responsible for first‑party vulnerability triage, remediation coordination with engineering, CVE/CNA operations, and external researcher engagement (HackerOne). Set strategy, staffing, on‑call rotation, KPIs, and coordinate closely with Legal/CELA, Security Comms, and Microsoft's MSRC. Role requires significant security experience and people management.

Responsible for endpoint security architecture, automation, and detection across macOS, iOS, Windows, and Linux. Requires hands-on experience with endpoint management (e.g., Jamf Pro, FleetDM), Terraform/IaC, GitOps, scripting (bash, Python, PowerShell, Go), and familiarity with identity providers such as Okta, Google Workspace, and LDAP. Role is fully remote (Canada and United States listed) and focuses on building auditable, scalable controls for a corporate environment.

The Principal Field Security Engineer partners with Sales, Legal, Product, and Engineering to address enterprise customer security, compliance, and contractual requirements. Responsibilities include customer engagement and assurance, contract and legal review, developing security content and training, and driving strategic initiatives such as maintaining the Trust Center and improving field security processes. The role is remote for United States residents and requires 10+ years of information security experience (with at least 5 years in customer-facing security roles). Salary range listed: $203,200—$285,000 USD (base, U.S. residents).

Join the Elasticsearch Security team to design and implement core security features (authentication, authorization, tenant isolation) in the Elasticsearch engine. The role emphasizes high-performance Java development, distributed systems security, cryptography, identity protocols (OAuth 2.0, SAML), vulnerability management, and using AI-driven tools to accelerate security workflows.

1Password is hiring a Senior Director, Product Security to set strategy and scale programs across Application Security, Secure SDLC, Data & Device Security, Privacy Engineering, and Security Research. The role reports to the CISO, manages managers, partners with engineering and product leaders, and is expected to have deep expertise in application security, privacy, secure SDLC, and security research. The posting requests 9+ years of progressive security experience with at least 5+ years leading teams/programs at scale and lists software development experience with languages such as Go, Ruby on Rails, Python, and shell scripting.

Capital One is hiring a Threat Assessment Manager for GWS Technology & Security Operations to assess and manage workplace violence and other threats, perform investigations using OSINT and SPJ approaches, coordinate with Legal/HR/law enforcement, provide crisis support and training, maintain case management and documentation, and participate in on-call rotations. Minimum qualifications include a bachelor's degree and at least 4 years of relevant threat assessment/investigation experience; this role does not provide visa sponsorship.

Own detection engineering and threat hunting in a SIEM, build security automation and SOAR playbooks, lead corporate incident response, manage CrowdStrike Falcon and Okta configurations, run data loss prevention and vulnerability management, and implement AI security and integrations. The role is hands-on, includes working with an external SOC, and requires coordinating with IT Operations, Compliance, and Product Security.

CrowdStrike is hiring a Senior Red Team Consultant to plan and execute red team/adversary emulation engagements across the Kill Chain and MITRE ATT&CK framework. Responsibilities include penetration testing of systems, applications, databases and networks; producing technical and executive reports; coordinating with leadership; and supporting operational crisis scenarios. Minimum ~5 years' relevant experience; occasional travel (<25%).

Enterprise-facing Consulting Architect (Security) responsible for architecting, implementing, and operationalizing Elastic Security (SIEM, endpoint, cloud) solutions. Requires 5+ years in consulting/architecture/engineering with experience in Elastic Stack or similar platforms, data ingestion/normalization tools, public cloud (AWS/Azure/GCP), Linux and a scripting language. Role may require significant travel to customer sites.

Chainguard is hiring a junior Security Engineer to operate and sustain cloud, IAM, and AI platforms, implement access controls, harden and monitor cloud infrastructure, and help secure AI/ML pipelines. The role requires a foundation in IT administration and/or software development, hands-on experience in at least one area (IAM, AI/ML infrastructure, or cloud platforms such as GCP/AWS/Azure), scripting/automation skills, and strong communication.

Work on Reddit's Privacy and Compliance Engineering team to design, implement, and maintain integrations, scheduled workflows, data pipelines, and automated checks across cloud, identity, HR, finance, code, and ticketing systems to support security and compliance (including SOX, SOC 2, ISO 27001, NIST CSF, EU DSA/NIS2). Requires 7+ years' relevant experience and hands-on proficiency with Python or Go, SQL, API integrations, Airflow, cloud platform services, CI/CD, and observability; U.S.-remote role with a disclosed base salary range.

Senior Technical Compliance Analyst (Public Sector) responsible for end-to-end management of sensitive US government authorizations (FedRAMP High, DoD IL5+, CJIS, ITAR), leading external audits, continuous monitoring, control mapping to NIST 800-53/800-171, and coordinating with engineering, auditors, and agency sponsors. Requires 7+ years in GRC/InfoSec/IT Audit, deep cloud security and federal framework expertise, advanced Jira/Confluence proficiency, and US citizenship. Remote within the United States.

The role owns design, development, and production validation of Windows kernel and user-mode low-level components for the Falcon sensor, focusing on performance, stability, and correctness. Requires strong C/C++ and Windows kernel/driver experience (minifilter drivers, kernel callbacks, WinDbg) and familiarity with endpoint security/EDR concepts. Location options are US offices (Austin, Sunnyvale, Redmond) or remote; U.S. base salary range $160,000–$260,000/year.

Advises on the security posture of AI models, AI bills of materials (AI-BOM), AI-SPM and AI SaaS agents across pre-production and post-production. Responsibilities include designing automation and CI/CD model scanning policies, threat hunting and incident response capabilities, building inventories and dashboards for models/apps/agents, driving remediation to SLAs, and documenting standards, runbooks and policies.

Owns deployment and tuning of AI gateway and Prisma AIRS AI Runtime Security, configures DLP policies to detect and stop exfiltration of sensitive data, deploys Google Model Armor and SCC DLP for the Gemini Enterprise Agent Platform, and integrates Prisma AIRS with Koi AES. Requires ~8+ years of experience in network and application security, familiarity with CI/CD, Google Cloud, API/SDK integration, and application-level troubleshooting; no travel required.

CrowdStrike seeks a Senior Incident Response Consultant to lead incident response engagements, perform host and network forensics across Windows/macOS/Linux, conduct malware analysis and reverse engineering, and develop remediation plans. The role includes cloud incident response (AWS/Azure/GCP), producing written and verbal reports for stakeholders, travel up to 30%, and contributing thought leadership in the incident response community.

CrowdStrike is hiring an Analyst I for Falcon Complete GovCloud (St. Louis, hybrid/remote) to perform alert triage, threat detection, digital forensics, malware analysis, and incident response within a FedRAMP-authorized environment. US salary range listed: $85,000–$120,000 per year.

CrowdStrike is hiring an Analyst I for the Falcon Complete virtual SOC (remote, candidates in PST or MST). Responsibilities include customer-facing communications, triage and investigation of security alerts, EDR and log analysis, Microsoft 365 incident handling (including BEC/AITM), and contributing to detection and remediation processes. Requires foundational IT/security knowledge, scripting coursework or experience (Python/PowerShell/Bash), and willingness to work a 4x10 schedule including a weekend day. US base salary range listed: $85,000–$120,000/year.

Platform Resident Consultant (U.S.-based) serving as a primary technical advisor for strategic government customers to plan, deploy, configure, troubleshoot, and operationalize CrowdStrike Falcon across endpoint, identity, and cloud domains in accredited environments (FedRAMP/DoD IL). Requires U.S. citizenship or permanent residency, clearance eligibility, and 5+ years relevant security experience.

The Falcon Complete Detection Engineering role performs threat research and hunting to create and maintain high-fidelity CrowdStrike Next-Gen SIEM detection rules, leverages CI/CD and AI-assisted tooling to deploy detections as code, and collaborates on parsing, normalization, automation and tooling to support large-scale managed detection and response. The role expects 3+ years of related experience and hands-on experience with SIEMs, scripting (preferably Python), and familiarity with LLMs/AI-assisted workflows.