Full-time Product Security Architect at Replit responsible for defining and enforcing secure product architecture, leading security implementation of features, conducting threat modeling, specifying authentication/authorization (mTLS/OIDC/OAuth/SAML), performing code reviews (Python/Go/JavaScript), and maintaining the authoritative secure architecture documentation. Requires 8+ years of product security engineering/architecture experience with multi-tenant SaaS.

Work involves maintaining image definition files, adapting upstream Helm charts to security and Kubernetes constraints, tracking upstream releases, writing Go-based integration tests, triaging CVEs, and reviewing peers' work. Requires 6+ years backend engineering experience and strong familiarity with containers, Kubernetes, Helm, YAML, and container/supply-chain security concepts.

Mid Security Engineer role based in Hermosillo, Mexico (in person). Requires 3–5 years in security operations or cloud security with hands-on experience in AWS, CrowdStrike Falcon (or similar EDR), SIEM, IDS/IPS, Docker and Kubernetes, incident response, vulnerability management, and basic scripting (Python or Bash). Preferred familiarity with DevSecOps practices and infrastructure-as-code tools (Terraform, Ansible, Chef).

CrowdStrike seeks an Automation Engineer II for the Falcon Complete MDR team to develop and maintain SOAR playbooks, PowerShell/Python scripts, and AI/LLM-integrated automation pipelines. The role requires ~2+ years of experience in automation, scripting, or cybersecurity and involves API integrations, SIEM query use, data parsing (JSON/regex), version control (Git), and workflow validation.

Lead development and evolution of Fingerprint's Android products (PRO SDK, OSS SDK, Showcase and Demo apps). Responsibilities include designing detection signals, improving performance and reliability, building UI with Jetpack Compose, researching new fraud-detection methodologies, and collaborating with product, backend, and data teams. Requires 5+ years of hands-on Android development, strong information security experience, proficiency in Kotlin and Android SDK, and experience with C++ is desired. Role is fully remote; Fingerprint does not sponsor visas. US-based salary range listed as $178,000–$205,000.

CrowdStrike seeks a Senior Intelligence Analyst (remote) for the Counter Adversary Operations Elite team to deliver threat intelligence, digital risk monitoring and dark web research for assigned customers. The role requires developing actionable intelligence, delivering briefings, triaging Falcon Counter Adversary Recon findings, collaborating across teams, and responding to customer requests. Minimum 2+ years specialized experience in cyber threat intelligence, digital risk monitoring and third-party risk management. Location options include Germany, Ireland, Romania, Israel and the United Kingdom (remote).

Encora seeks a Cyber Security Engineer with 8+ years' experience to manage Tenable Security Center, Nessus, Tenable.io and TenableOne; conduct vulnerability, hardening and compliance scans across infrastructure, applications and cloud; analyze and prioritize findings; coordinate remediation with stakeholders; produce dashboards and reports; and support audit and compliance initiatives.

Twilio is hiring a Staff Enterprise Security Engineer (AI Security) to lead technical strategy and engineering execution for securing the enterprise AI ecosystem. Responsibilities include designing secure reference architectures, establishing AI vetting frameworks, developing agentic AI identity/posture management, coding (Python/Go/Java), and using IaC to maintain enterprise security posture. The role is remote and based in Ireland or the UK and requires 7+ years in security engineering and cloud/container security expertise.

CrowdStrike seeks a senior TAC Cloud security researcher to investigate cloud-conscious adversaries using cloud provider logs (AWS CloudTrail, Azure Activity Logs, GCP), reverse engineering, signature development (YARA, KQL, Athena, Snort/Suricata), and automation. The role produces intelligence reporting, supports incident response and detection engineering, and requires strong Python and malware analysis skills plus experience with IAM and cloud log reconstruction.

Udacity (an Accenture company) seeks external contractors to serve as Cybersecurity Technical Mentors delivering 1:1 sessions, technical deep-dives, and group Q&A. Requires 5+ years relevant experience and strong cybersecurity skills (network, application, system security; threat detection; incident response; familiarity with SIEM/IDS/IPS and security frameworks). Role is remote and targets candidates across US, Canada, Europe, MENA, India and APAC timezones.

Kraken seeks a Network Engineer within Core Infrastructure Engineering to manage and secure network infrastructure across physical and cloud data centers. Responsibilities include implementing zero-trust and defense-in-depth architectures, deploying infrastructure as code, network automation, vendor platform administration (Palo Alto, Cisco, Juniper, Aruba), monitoring, IDS/firewall management, and mentoring internal teams. Requires 4+ years of network engineering experience and familiarity with public/private/hybrid cloud.

DataCamp seeks a Senior Application Security Engineer to be embedded within Engineering to own end-to-end vulnerability management, act as first responder for security topics (bug bounty, pentests, incidents), maintain application security tooling (JFrog X‑Ray, SonarCloud, OWASP ZAP), integrate security checks into CI/CD, support ISO 27001 compliance, run developer security awareness, and address security for AI-assisted and agentic development practices. Requires 6+ years of software engineering or application security experience and strong TypeScript/Node.js, Kubernetes, and AWS knowledge.

Senior engineering leadership role owning architecture and technical strategy for Stripe Identity (Identity Store, headless verification platform, fraud detection). Requires 10+ years' software engineering experience with strategic technical leadership, experience in API and platform development, and familiarity with ML systems in production and fraud/identity domains. Role is open to candidates in Seattle, New York, San Francisco, or remote within the US.

Mattermost is hiring a Senior Security Engineer to lead security and IT projects, detect/investigate/remediate incidents using SIEM, EDR, and SOAR, conduct threat hunting with a Zero Trust approach, administer IAM and security monitoring, and assess AI-enabled risk. Requires 3+ years hands-on security engineering/incident response experience, familiarity with SIEM/EDR/SOAR, cloud security (AWS/GCP/Azure), Linux and Kubernetes/Docker, IAM, and managing Microsoft 365/Google Workspace tenants. Posted salary range: €62,000–€82,000 EUR.

Lead design and implementation of security tooling, harden cloud and IT infrastructure, detect/investigate/remediate incidents using SIEM/EDR/SOAR, conduct threat hunting with a Zero Trust approach, administer IAM and security monitoring, collaborate with Engineering on AI-related risks, and contribute to policies and incident response. Requires 3+ years relevant experience.

Role responsible for building and improving security-focused ML models (guardrails, classifiers, anomaly detection) across Reddit's GenAI workflows. Owns full ML lifecycle including data ETL, feature engineering, training, evaluation, deployment, monitoring, and retraining. Requires 5+ years of production ML experience and hands-on experience with frameworks such as PyTorch or TensorFlow; remote (United States) position.

The role focuses on translating novel security research into scalable product implementations, driving technology transfer between research and product teams. Requires 5+ years' software engineering or security research experience, deep expertise in at least one security domain, strong programming and system architecture skills, and experience building both rapid prototypes and production-grade systems.

Operate and maintain Palo Alto, Fortinet, and Cisco firewalls, secure web gateways, and VPN architectures; manage HA clusters, dynamic routing (BGP/OSPF), NAT/policy objects, and perform packet-level troubleshooting. Integrate security platforms with SIEM/SOAR, identity, PKI and endpoint telemetry; tune IDS/IPS, URL filtering, malware defenses, and drive governance, audits (e.g., MAS TRM), runbooks, automation (Ansible/Terraform) and incident response.

Virta Health seeks a Cloud Security Engineer to build and mature its application security program. Responsibilities include assessing GCP and Kubernetes controls, integrating security into the SDLC, implementing security tooling and automation (SAST/DAST/IAST), refining IAM/RBAC, improving network security, driving vulnerability management and incident response, and developing security policies. Role requires hands-on experience with cloud-native security, Terraform, Go and Python, threat modeling, and secure coding practices.

Reddit is hiring a Staff Product Security Engineer to lead design and delivery of secure frameworks, paved paths, and workflow-native controls that prevent recurring vulnerabilities, with emphasis on AI-assisted development. Responsibilities include embedding security into developer workflows (CI/CD, code review, releases), driving product security reviews, and eliminating systemic security debt. Requires 8+ years in software/product/application security (including 2+ years at staff scope), proficiency in Go/Python/JS/TS, experience building developer-facing platforms and secure libraries. Base salary range: $217,000–$303,900 USD/year.