CrowdStrike seeks a Senior Product Security Engineer (Application Security) to join the Product Security team and secure web and cloud-native applications. The role requires 8+ years in cybersecurity, hands-on manual secure code review (Go, Python, JavaScript/TypeScript), threat modeling (STRIDE), API and browser security expertise, experience with cloud providers (GCP, Azure, AWS) and AppSec tools (SAST/DAST/CSPM/DSPM/ASPM), and building automation and tooling to find and remediate defects.

Architect, design, and implement Okta IAM solutions including SSO, MFA, provisioning (SCIM/JIT), Okta Workflows, REST APIs and Terraform. Requires 5+ years IT experience, 3+ years Okta experience, and current residence in US Central Time. Typical starting salary range $94,300–$149,200 USD/year.

GitHub is hiring a Staff Software Engineer for the Enterprise AI Governance team (US remote). The role involves designing, prototyping, implementing, and operating highly available, secure backend services and APIs that provide enterprise controls for Copilot (policy enforcement, auditing, configuration management). Responsibilities include technical leadership, system design, CI/CD, on-call participation, collaboration with product and security teams, and driving operational excellence. Salary range listed: USD 140,400–372,300 per year.

Develop new technology within Falco, Sysdig OSS and related libraries; contribute to and possibly maintain open source projects; help users, fix bugs, make releases and implement automation; engage with the community via Slack/GitHub, speak at conferences (e.g., KubeCon), and write technical blogs. Requires ~5 years as a software engineer in cloud-native or security domains and strong programming and collaboration skills.

NVIDIA seeks a senior engineer for the Hardware IP Security team to build secure-by-default workflows, create training and policies, perform threat modeling (STRIDE-style), secure Linux on-prem/cloud infrastructure, and investigate security incidents. Requires 8+ years' experience and strong cross-team collaboration and leadership.

Work on Falco, OSS Sysdig, their libraries and open source projects: contribute/maintain code, fix bugs, perform releases and automation, and engage with the community (Slack, GitHub, conferences, blogs). Role expects ~5 years' software engineering experience in cloud-native or security domains and demonstrated open source contributions. Location is flexible with Spain and Serbia explicitly listed.

Work on reverse-engineering complex antibot and fingerprinting systems across JavaScript VMs, WASM, and obfuscated code. Build automation, deobfuscation pipelines, tooling, and AI-assisted workflows to turn manual investigations into repeatable, scalable processes. Collaborate with engineering teams to integrate tooling into the browser/automation stack and mentor others.

Work focuses on reversing JavaScript VMs, WASM, and obfuscated code to produce reusable tooling, automated investigations, and intelligence for AI systems. Requires strong JavaScript/Node.js and Python skills, reverse-engineering and debugging experience (static/dynamic/concolic analysis), and familiarity with network-debugging tools and browser fingerprinting/antibot techniques.

Provide Tier-3 support and day-to-day operations for enterprise network infrastructure at the customer site (Cisco, Juniper, Palo Alto, Fortinet). Responsibilities include advanced troubleshooting, routing and switching, firewall and wireless support, NAC (Aruba ClearPass/Cisco ISE), configuration changes, monitoring, OS upgrades/patching, certificate management, security hardening, IP address management, vendor coordination, and reporting. Role requires 24x5 rotational onsite availability and 24x7 standby for critical incidents.

The Senior Data Security Architect will translate data governance and privacy requirements into technical controls, own tooling such as data discovery/classification and DLP, and partner with Product, Engineering, Legal, and system owners to secure data across its lifecycle. Requires 8+ years of experience in security engineering, data security, or data architecture and experience enforcing regulatory and privacy requirements at scale.

Join the CCIP Protocol team to design and maintain backend services that enable secure, low-latency cross-chain transactions. Responsibilities include improving protocol reliability for EVM chains, optimizing RPC and performance, developing tooling for incident response, and contributing to protocol security and architecture. Requires backend engineering experience (Go, Rust, or TypeScript), distributed systems design, and production reliability focus.

Lead and grow the founding engineering team across harness/platform engineering, security research, and evaluation. Own delivery of the Find, Validate, and Patch roadmap, collaborate with evaluation, security, and platform leadership, and communicate engineering status. Requires 12+ years in software engineering and 5+ years managing engineering teams.

Role involves developing datasets, models, MLOps, and safety tools to assess, quantify, and improve safety and inclusivity of multimodal LLMs (content safety, product security, robustness, ML fairness). Requires a Master's/PhD or equivalent and a minimum of 2+ years developing and deploying ML models in production with hands-on Python and frameworks like PyTorch or Keras.

Chromatic seeks a Senior DevOps Engineer to own and improve cloud infrastructure and security across its AWS-based rendering platform. The role requires 5+ years deploying and operating containerized applications, strong IaC experience with Terraform, CI/CD familiarity (CircleCI, GitHub Actions), networking and cloud security knowledge, and participation in on-call incident response. Position is fully remote for candidates based in the mainland US or Canada.

Responsible for identity lifecycle management (joiner/mover/leaver), provisioning and revoking user access, administering privileged accounts, performing credential reconciliations, and supporting periodic access review and certification campaigns. The role also maintains operational records, monitors provisioning SLAs and metrics, and provides evidence and remediation support for audits and compliance.

Responsible for IAM governance including policies, RACI, JML, access provisioning, recertification, privileged access frameworks, evidence management, risk tracking, and KRI/KPI reporting. Requires 5+ years in IAM, IT risk, cybersecurity governance or technology controls; experience with RBAC, PAM, access certification and governance frameworks. CISM/CRISC preferred and experience in financial or highly regulated environments is a plus.

Serves as the primary control assurance function within the IAM operating model, validating IAM control design and operating effectiveness, driving control monitoring and testing, assessing access governance (JML, PAM, access certification), managing control exceptions and remediation, and supporting audits and regulatory examinations. Requires 3+ years in IAM controls, IT risk/audit, or cybersecurity compliance; preferred certifications include CRISC, CISM, or ISO 27001 Lead Auditor.

Lead architecture and implementation of core Elasticsearch security features, including authentication, authorization (RBAC/ABAC), tenant and data isolation, cryptographic solutions, and performance optimization in distributed systems. Collaborate with product and InfoSec teams on vulnerability management, leverage AI-assisted tools to accelerate development and triage, and mentor other engineers. Requires deep Java/JVM knowledge, concurrency and distributed systems security experience, and familiarity with identity protocols (OAuth 2.0, SAML).

Lead architecture, design, and implementation of major security components in the Elasticsearch core engine, including authentication, authorization (scalable RBAC/ABAC), token validation, and data isolation. Optimize security performance for distributed systems, apply cryptographic solutions, drive vulnerability management with InfoSec, and mentor other engineers. Role lists a CAD base salary range and is based in Canada.

CrowdStrike seeks a Senior Analyst for Falcon Complete to monitor and analyze security alerts, perform incident handling across Windows/macOS/Linux, conduct malware and network forensic analysis, perform remote remediation, improve detection and triage processes, mentor junior analysts, and produce customer-facing communications. Relevant technical skills and incident response/forensics experience are emphasized.