Join SecurityScorecard's STRIKE team to own the research-to-production path: implement detection rules, distributed feeds, pipeline hooks, and platform integrations. Requires 5+ years engineering experience with threat intelligence or detection engineering, production experience with Python and TypeScript/Node, familiarity with STIX/TAXII/MISP/MITRE ATT&CK, applied language-model systems experience, and cloud/container/CI-CD knowledge. Remote (Washington, DC). No immigration sponsorship provided. Estimated total compensation range $140,000–$180,000.

Join SecurityScorecard's STRIKE team as the engineering counterpart to threat research, owning the path from research artifacts to production-ready detection rules, distributed feeds, scoring inputs, and platform APIs. Requires 5+ years hands-on engineering experience with threat intelligence or detection engineering, production experience with Python and TypeScript/Node, knowledge of STIX/TAXII/MISP/MITRE, and experience shipping production systems that use language models and large-scale telemetry.

Remote Staff Software Engineer for Grafana Labs’ Identity and Access team (role available for candidates in the UK, Germany, Spain, Ireland and Sweden). Lead architecture and implementation of large-scale, low-latency authentication systems (edge redesign), mentor senior engineers, drive organization-wide identity standards, and contribute to reliability and operations. Primary backend development in Go; expertise in modern identity protocols and distributed systems required.

Serve as the technical point of contact for enterprise accounts and account managers, architect solutions using the Elastic Stack, enable sales and partners, deliver demos and presentations at events, and convey customer feedback to engineering. Requires proven technical presales experience, strong customer and stakeholder engagement, and willingness to travel ~30% within region and occasionally internationally.

Lead and develop a team of four TPRM analysts to manage end-to-end vendor risk lifecycle (onboarding, assessment, reassessment, offboarding). Drive automation and AI integrations (ServiceNow TPRM), define and enforce cybersecurity vendor policies and controls aligned with frameworks (NIST, ISO 27001, SOC 2, FAIR), partner with procurement/legal/IT/security, support audits, and report KPIs to senior leadership. Requires 10+ years in TPRM/GRC or related risk disciplines and 3+ years of people management experience.

Role at Reddit to review and threat model AI-powered features (LLMs, agents, tool integrations), design and build reusable AI security primitives (guardrails, scanners, sandboxes, policy checks), and partner with product and platform teams to prevent prompt injection, data leakage, unsafe outputs, and other AI-specific risks. Requires 5+ years in product/application/security engineering and experience building security automation and backend services.

The role partners with SecOps, engineering, architecture, IT, legal, and privacy to design resilient detection, defense, and response architectures, conduct security architecture reviews, and lead detection engineering and AI-augmented security operations improvements. Requires 5+ years in security operations and multi-cloud platform experience, and 2+ years applying AI tooling to security operations.

Senior Product Security Engineer based in Brazil (CLT). Responsibilities include integrating and operating SAST, DAST, SCA, CNAPP and WAF tooling in CI/CD pipelines; building and maintaining security automation and agentic/LLM-assisted tooling; conducting vulnerability identification, triage, remediation and retesting; securing cloud-native applications (Docker, Kubernetes, public cloud); and partnering with engineering teams to embed security across the SDLC. Role expects 4+ years across security domains and hands-on experience with languages such as Python, .NET, or TypeScript.

Hands-on Red Team role focused on executing real-world adversary simulations, identifying and chaining high-impact vulnerabilities, and validating prevention, detection, and response capabilities. Collaborates with Detection & Response, Incident Response, and engineering teams; produces technical findings and remediation guidance; contributes to tooling and mentors junior engineers. Base salary range listed: $148,500–$223,900 per year.

Lead and grow a distributed Cloud Security engineering team responsible for secure infrastructure configuration, identity and access, IaC and container security, vulnerability management, detection engineering, and incident response across GitHub's cloud environments. Partner with Security, Infrastructure, Platform, Product, and Engineering leaders to define technical roadmaps, coach engineers, manage execution and deliver measurable security outcomes. Role requires senior security engineering experience (qualification options provided in posting).

CrowdStrike is hiring an Associate Analyst for the Falcon Complete team to detect and respond to incidents in real time across Windows, Mac and Linux, perform basic static and dynamic malware analysis, develop/improve detection and countermeasure processes, and communicate findings to customers. The role requires high business-level to native Japanese (writing included), is open to candidates located in Japan, Australia or Austria (remote), involves allocated shift schedules (40 hours/week, Wed–Sat or Sun–Wed), expects 0–2 years related experience, and does not offer visa sponsorship.

Senior engineering role within Reddit's Security, Privacy, Assurance, and Corporate Engineering (SPACE) org focusing on Identity & Access Management. Responsibilities include building and operating core IAM platforms and API integrations, improving observability, supporting compliance and audits, troubleshooting production incidents, and mentoring cross-functional teams. Requires 10+ years backend experience and familiarity with IAM tools/protocols (e.g., Okta, SailPoint, OAuth/OIDC/SAML) and technologies such as Go, Python, Java, TypeScript, Postgres, Docker, Kubernetes, and AWS.

Pindrop is hiring a Research Scientist II to develop and deploy applied machine learning models and scoring systems for fraud and scam detection using audio, behavioral, and metadata signals. The role requires an advanced quantitative degree or equivalent experience, 3+ years in relevant domains (ML, fraud detection, NLP, speech/signal processing), strong Python and modern ML framework experience, and collaboration with engineering to move research into production. US-remote; base pay range $160,000–$185,000 USD.

Senior staff Information Systems Engineer responsible for designing and operating core IT systems and workflows: identity and lifecycle management, AWS-hosted IT infrastructure, ServiceNow architecture and automations, endpoint management, observability, and security incident support. Requires 8+ years of corporate IT/systems engineering experience. Base salary range listed: $136,000–$213,000 USD per year.

Lead assessment and mitigation of security risks in the virtualization stack (hypervisor, KVM/QEMU). Build systematic threat models, shared impact/likelihood rubrics, and propose defense-in-depth mitigations; collaborate with product and kernel teams to implement remediations. Required: deep familiarity with at least one kernel security feature, experience with virtualization performance trade-offs, and strong communication with engineering teams. Preferred: 5+ years systems-level coding, experience with threat models, side-channel mitigations, and languages such as Go, Rust, or C.

Role on Quora's Security Engineering team to secure cloud infrastructure (particularly AWS) and compute, build IaC pipelines (Terraform/CloudFormation), integrate security tooling into CI/CD, harden OS and container environments, implement monitoring/logging and detection, perform threat modeling and incident triage, and partner with engineering teams on remediations.

Principal Engineering Manager responsible for IAM platform areas including identity lifecycle, entitlements, privileged access, federation, and workforce identity providers. Role involves technical leadership, building high-performing teams, cross-functional partnership (Security, Infrastructure, IT, Legal, Compliance), driving migrations and automation, and overseeing reliability and operational maturity. Requires people management experience (5+ years) and senior technical experience as detailed in the posting; base salary range USD 160,200–425,000 per year.

Mozilla is hiring a Senior Software Engineer for Firefox Security to advance Firefox's security architecture and cryptography stack (including cryptographic protocols and WebPKI), design and implement web platform security features, and improve stability, performance, and memory efficiency in a multi-threaded browser. Role requires strong C/C++ proficiency, security fundamentals, debugging skills, and familiarity or interest in Rust. Position is remote (UK) with a stated hiring range of £66,000–£87,000 GBP.

Work on Firefox's security architecture and cryptography stack, including cryptographic protocols, WebPKI, and security-sensitive web APIs. Design and implement web platform security features, improve browser reliability/performance in a multi-threaded native codebase, collaborate across teams on security initiatives, and contribute to technical design and standards-based implementations. Requires strong C/C++ skills, security fundamentals, debugging and systems programming experience; Rust familiarity is a plus.

Work on Firefox security architecture and cryptography stack (cryptographic protocols, WebPKI, security-sensitive web APIs), design and implement web platform security features, improve browser reliability/performance/memory in a multi-threaded native codebase, and collaborate across teams. Requires strong software engineering fundamentals, proficiency in C/C++, familiarity with Rust, and experience debugging cross-platform native applications.