Hands-on senior product security role responsible for designing and architecting secure network connection patterns and zone segmentation across hybrid networks (AWS, GCP, Azure, physical data centers). Responsibilities include threat modeling, building scalable monitoring/alerting/automation for network security, leading cross-team security initiatives, mentoring engineers, and contributing to medium-term network security strategy. Requires scripting/automation (Python, Go, shell), deep protocol and networking knowledge, and experience in cloud-native/SaaS product environments.

Senior engineering role focused on shaping architecture, reliability, scalability, and security of 1Password's identity systems underpinning authentication, authorization, session management, device trust, federation, and integrations. Requires deep Go expertise, extensive experience in identity and access management, leadership in technical strategy, and collaboration across cross-functional teams. Remote within the United States and Canada; travel for in-person engagement is expected.

Join OpenZeppelin's Secure Development team to own the OpenZeppelin Contracts Library for Daml and lead year-1 reference implementations (privacy-preserving DEX, lending, cross-chain stablecoin settlement, confidential auction launchpad). Responsibilities include technical design and implementation, coordinating with Digital Asset and ChainSafe, collaborating with auditors on threat models and audits, contributing upstream to Canton/Splice/Daml SDK, and extending AI-native tooling and agents to support secure development. Required: production Daml fluency, 3+ years UTXO-based protocol development, 3+ years DeFi engineering, security/auditing experience, cross-chain interoperability experience, and AI-native development experience.

Replit is hiring a mid-level AppSec Vulnerability Management Engineer to bridge security, compliance, and engineering. Responsibilities include periodic application scanning and triage, maintaining SBOMs and maturing supply-chain posture (SLSA), tracking vulnerabilities to meet compliance SLAs (SOC 2, ISO 27001, PCI-DSS), integrating and tuning SAST/SCA/secret-scanning tooling in CI/CD, collaborating on remediation (including direct code patching), and supporting incident response. Role is full-time, based in Foster City, CA with an in-office requirement Monday, Wednesday, Friday. Approximately 5 years of relevant experience required.

Seeking a Senior Full-Stack Engineer to lead modernization of a .NET platform with responsibilities across C#, ASP.NET Core, SQL Server, and front-end technologies (jQuery, Kendo UI, Bootstrap) with incremental migration to Angular/TypeScript. Role emphasizes security (OWASP, vulnerability remediation), CI/CD improvements, automated testing, performance, and clean architecture. Requires 5+ years building production .NET applications. 100% remote, targeted to Latin America.

Join 1Password's Product Security team to implement next-generation security features for macOS, iOS, Android, Windows, Linux and Web apps. Role emphasizes iOS and Apple security (Secure Enclave, biometrics), Rust development and FFI, secure libraries, vulnerability remediation, secure coding guidance, cross-team collaboration, mentoring, and involvement with AI-related security workflows.

Kraken is hiring a Staff (Senior) Security Architect within Kraken Security Labs to design, review, and verify security architecture across a heterogeneous environment. Responsibilities include conducting security assessments and audits, advising blockchain teams, and working hands-on on topics spanning infrastructure security, cryptography, web3, Rust projects, and AI security. Familiarity with OWASP/NIST and strong collaboration and communication skills are expected.

Kraken seeks a hands-on Staff Security Architect for Kraken Security Labs to design and review security architectures, conduct assessments and audits, and provide expertise across blockchain, cryptography, web3, Rust, infrastructure, and emerging AI product security. The role involves deep technical consulting and collaboration with engineering teams across the company.

Responsable de liderar defensa y respuesta a incidentes, gestionar CyberSOC y plataformas SIEM, evaluar la postura de seguridad con frameworks como NIST y SOC-CMM, integrar fuentes de monitoreo, gestionar vulnerabilidades y ejecutar iniciativas de seguridad en entornos cloud (Azure, GCP). Requiere +5 años en ciberseguridad y experiencia en firewalls, VPN, WAF, PAM y manejo de proveedores.

Work on detection and corporate security for Quora and Poe: build and maintain SIEM, write detections, deploy canary tokens, investigate incidents (malware analysis, exfiltration, timelines), create runbooks, and partner with IT on endpoint and identity controls. Requires 5+ years in security/detection engineering, hands-on SIEM experience, endpoint/EDR experience, strong Python skills, and incident response experience. Remote-first role available in the United States and Canada; US and Canada salary ranges provided in the posting.

Role requires designing and implementing security systems, policies, and controls for AI/HPC cluster infrastructure; leading incident response and disaster recovery; and working across engineering, platform, legal, and compliance teams. Requires 8+ years' relevant experience and strong proficiency in C/C++, Linux kernel hardening (SELinux/AppArmor), eBPF, and large-scale Linux infrastructure security.

Lead cross-functional programs to communicate Stripe's security activities to customers and partners, act as the main go-to-market contact for security-related requests, and implement tooling and automation to scale security processes. Identify security control gaps, oversee remediation with control owners, and report on program health and metrics.

Role focused on offensive AI security: designing and executing red team assessments, innovating AI attack techniques, building scalable security tooling and automated evaluation pipelines, and partnering across AI Research, Engineering, Ethics, and Cybersecurity. Requires extensive hands-on experience securing AI/ML systems (including LLM vulnerabilities) and strong Python proficiency.

CrowdStrike seeks a Third Party Risk Management (TPRM) Analyst to develop and operate the TPRM program, conduct vendor security risk assessments across the vendor lifecycle, manage findings and remediation, produce reporting/dashboards, collaborate with procurement/legal/privacy/IT, and drive automation using GRC tooling. Experience with GRC/TPRM platforms, vendor control frameworks (SOC, ISO, NIST, CSA-CCM, GDPR, PCI-DSS), and continuous monitoring tools is emphasized. U.S. base salary range: $85,000–$120,000 per year.

NVIDIA seeks a Senior Embedded Architect Manager to research, design, and implement hardware and software security solutions for networking products. The role requires 12+ years of experience with IO interfaces (I2C, I3C, SPI, UART, USB, PCIe), low-level firmware and languages (Verilog, Python/Perl, ARM assembly, C/C++), and experience with boot architecture, RISC-V, root-of-trust, and hardware security primitives.

Lead day-to-day operations of GitLab's Security Incident Response Team in the Americas: manage and develop incident response engineers, lead high-severity incident command, mature IR processes and runbooks, and coordinate cross-functional mitigations. Role requires hands-on incident response experience (SIEM, DFIR, cloud forensics), use of AI/automation in workflows, availability during US West Coast business hours, and U.S. citizenship.

Senior Manager responsible for strategy, operations, and financial management of Parexel’s global network environment, including SD-WAN, Palo Alto firewalls, Cisco/Meraki LAN/WLAN, telecom, and AV. Role includes vendor and contract management, budgeting and cost optimization, driving standardization, security and compliance alignment, capacity and resilience planning, incident escalation, and leading engineering and operations teams. Requires 10+ years progressive experience.

Hands-on engineering role on GitHub's Product Security team focused on designing, building, and maintaining security tooling and automation (static analysis, secret scanning, dependency analysis, CI/CD integrations) and supply chain defenses. Requires security engineering experience (listed options include 5+ years without degree or fewer years with higher degrees) and 3+ years programming in at least two of Ruby, Go, and Python.

Customer-facing Senior Solutions Engineer for Firefox Enterprise covering Germany, Austria and Switzerland. Responsibilities include technical discovery, solution design, workshops, pilots/PoCs, validating interoperability (SSO/MFA/IdP, SIEM, proxies, PKI, endpoint tooling), and creating reusable technical assets. Requires 7+ years in solutions/sales/architect roles, strong enterprise security and deployment experience, native-level German and strong English. Hiring range listed for Remote Germany: €81,000–€108,000 (annual).

Full-time, in-office (Mon/Wed/Fri) GRC Engineer role responsible for technical ownership of Replit’s GRC program, driving compliance-as-code and automation, managing SOC 2/ISO 27001 and other regulatory requirements, operating the cybersecurity risk register, and partnering with engineering, legal, sales, and external auditors. Requires 8+ years of GRC or information security experience.