Hybrid role based in Colombia for a Senior Go Backend Engineer (7+ years). Responsible for designing and implementing high-performance backend systems and cloud-native microservices for cybersecurity platforms using Go; building CI/CD pipelines, observability, and monitoring; collaborating across teams and mentoring junior engineers. Required skills include Go, microservices, REST/gRPC, Kafka or Google Pub/Sub, Docker/Kubernetes, preferably GCP, CI/CD/GitOps, testing practices, and database experience.

Encora seeks a Senior Go Backend Engineer (Perú, hybrid) to design, develop, and maintain high-performance backend systems for cybersecurity platforms. Requires 7+ years in backend engineering and distributed systems, strong Go experience, microservices, REST/gRPC, messaging (Kafka or Google Pub/Sub), Docker/Kubernetes, preferably GCP, and familiarity with CI/CD, GitOps, and observability. Responsibilities include leading technical projects and mentoring engineers.

Responsible for designing, developing, and maintaining high-performance backend systems in Go for cybersecurity platforms. Role includes architecting microservices, implementing CI/CD and observability, working with Docker/Kubernetes and cloud (preferably GCP), mentoring engineers, and applying testing and DevOps/GitOps practices. Location: Costa Rica, hybrid.

Lead design, development, and maintenance of high-performance backend systems for cybersecurity using Golang. Responsibilities include architecting microservices, building CI/CD and observability, working with Docker/Kubernetes and cloud platforms (preferably GCP), and mentoring junior engineers; requires 7+ years backend engineering experience.

Twilio seeks a GSOC Operator to maintain situational awareness across internal and external physical events worldwide. Responsibilities include monitoring access control and surveillance systems, OSINT and travel-safety tools, performing incident intake and triage, dispatching security or emergency resources, executing mass notifications, maintaining incident documentation, and participating in post-incident reviews. Role requires 3+ years GSOC experience and availability for variable 8–10 hour shifts including weekends and holidays; approximately 10% travel is anticipated.

VGS is hiring an Application Security Intern to assist security and engineering teams with application and API security reviews, validating findings from SAST/DAST and dependency/container scans, threat modeling, manual web/API testing (access control, auth, input validation, secrets), and improving secure SDLC processes and tooling. Candidates should be pursuing a relevant degree or have equivalent experience, understand OWASP Top 10 and secure coding, be able to read code (Java, Python, JavaScript, or Go), and be familiar with Git and development workflows. Role is remote-first, $20/hr, and requires legal authorization to work in the United States; hiring is limited to specified US states.

Olo is hiring a Senior Security Engineer (Blue Team) to lead detection and response, conduct vulnerability assessments, manage incident response, and mentor other engineers. The fully remote UK role requires 5+ years in security engineering and operations with experience in SIEM, IDS/DLP/FIM, AWS security, IaC tools (Terraform/Ansible/CloudFormation), automation/scripting, and security architecture.

As a Staff Backend Engineer on the SSCS Add-On team, you will define architecture and lead implementation for software supply chain security features across GitLab (package policy enforcement, provenance generation, artifact signing, SLSA v2/v3 capabilities, and integrations with Sigstore). The role emphasizes backend system design, security, performance, technical proposals/RFCs, cross-team collaboration, code review, and mentoring; required technologies and concepts include Ruby on Rails, Go, CI/CD, dependency management, SLSA, and Sigstore components (Cosign, Fulcio, Rekor).

Remote role (India) on a small founding team to design and implement backend features—primarily in Ruby on Rails—covering policy enforcement, Sigstore/Cosign integrations, GraphQL/REST APIs, and integrations with GitLab's security policy framework. Requires production Ruby on Rails experience, PostgreSQL and Redis knowledge, familiarity with software supply chain security concepts (SLSA, SBOM, artifact signing), and willingness to work with Go and maintain RSpec/integration test coverage.

CrowdStrike is hiring a Senior Platform Professional Services Consultant to plan, deploy, tune and support AI/ML-driven detection and response using the Falcon platform. The role requires ~8 years of IT deployment or customer-facing experience, strong AI/ML and cybersecurity knowledge, scripting/API skills, cross-platform OS expertise, and up to 5% travel (US-based, remote).

Principal-level role responsible for owning product security research: scanning the ecosystem for emerging threats in software supply chain and product security, translating findings into strategic risk mitigations, leading multi-quarter initiatives across product lines, partnering with engineering and executive leadership, mentoring teams, and representing Chainguard externally.

Lead Chainguard's product security research function end-to-end: identify emerging attack patterns (software supply chain and product security), translate findings into risk and roadmap guidance, design pragmatic mitigations, run multi-quarter initiatives to reduce risk, mentor teams, and represent the company externally. Remote-first role based in the United States. Listed base salary range $201,000–$226,000 USD.

CrowdStrike is hiring a Senior Cloud Security Architect to serve as the technical authority for its Google Cloud Platform environment. Responsibilities include architecting GCP security (IAM, Organization Policy, VPC Service Controls, Shared VPC), providing multi-cloud oversight (AWS/OCI), building "golden path" security patterns, integrating security into Jenkins-based CI/CD pipelines, and conducting threat models for cloud-native applications. Preferred technical expertise includes hands-on GCP security (Workload Identity, Cloud Armor, KMS), CI/CD/Jenkins, CSPM, API security, vulnerability scanning, automation (Python/Go/Bash), and Terraform/Infracost. Base salary range for U.S. candidates is $125,000–$180,000 per year.

Security Engineer, Cloud responsible for reviewing cloud deployments, designing and building security-focused infrastructure primitives, leading remediation across the stack, and partnering with infrastructure, data, and DevOps teams. Requires minimum 5 years building software and at least 3 years building in AWS with Terraform. Locations include New York (HQ), Miami, and remote in the US and Canada; relocation support to NYC or SF is noted.

Conduct cloud-focused adversary emulation (Red Team) engagements against customer environments while coordinating Blue Team threat hunting and incident response. Manage engagements end-to-end, develop scripting/automation and tooling for adversary emulation, and work with clients and mid-level executives. Requires 5+ years in cybersecurity, experience with AWS/Azure/GCP and Microsoft Entra ID/M365, and experience in red/purple team exercises.

Swimlane seeks a Solutions Engineer based in Riyadh with 5+ years' experience (Sales Engineering at a security vendor, SOC/IR experience, or both). Responsibilities include deploying/configuring the Swimlane platform during evaluations, delivering technical demos and POCs, responding to RFPs, supporting customer success and partner enablement, and liaising with Product and Engineering. Required skills include SOC/IR knowledge, Python, RESTful APIs, and experience with SIEM, firewalls, threat intel, and sandboxing.

Individual contributor role within CrowdStrike's Malware Research Center responsible for deep reverse engineering and malware analysis, architecting scalable automation and ML-enabled detection pipelines, mentoring researchers, collaborating with engineering/product teams to operationalize research, and producing technical documentation. Requires 12+ years experience and expertise in disassembly, binary analysis, multiple programming languages, OS internals, YARA, sandboxing, and threat intelligence tools.

Oddball is hiring a remote DevSecOps Engineer to support a federal CMS BDAMAX program impacting Medicare. Responsibilities include embedding security into CI/CD, automating security alert responses, managing infrastructure with Terraform, supporting audit readiness and compliance for regulated environments, and contributing to secure AI governance. Requires hands-on AWS (EKS/ECS/Fargate/EC2/S3/RDS), Kubernetes, Jenkins, Terraform, and familiarity with FISMA/FedRAMP. Applicants must be authorized to work in the United States.

Lead DoD Impact Level 5 (IL5) compliance and security accreditation efforts, own continuous monitoring and audit/certification processes, and translate regulatory requirements into actionable guidance while partnering with engineering, infrastructure, DevOps, legal, and leadership. Requires experience with DoD cloud security requirements, RMF, NIST 800-53, and FedRAMP High.

The AI Security Consultant will contribute to engagements to secure AI workloads, perform threat modeling, identify automation use cases, and help modernize cybersecurity programs. The role requires 2+ years of relevant experience (typical range 2–6 years), strong technical analysis and communication skills, and up to 30% travel to client sites.