NVIDIA is hiring a Software Security Architect for DRIVE OS to define and review secure architectures for mixed-criticality, multi-tenant automotive platforms. The role requires threat modeling, OS and platform security expertise (Android, Linux, QNX), virtualization, ARM SoC familiarity, and 12+ years of experience. Knowledge of automotive safety/security standards (ISO/SAE 21434, ISO 26262) and secure development practices is emphasized.

Responsible for implementing and maintaining mobile app hardening (RASP, code obfuscation, root/jailbreak detection), enforcing certificate pinning and secure TLS, preventing leaks of sensitive data, securing use of Android Keystore and iOS Keychain, delivering reusable mobile security components (biometric login, secure storage, device attestation), and performing regular pentesting and reverse-engineering using tools like Frida, Ghidra, and MobSF. Requires deep knowledge of Android (Kotlin/Java) and iOS (Swift/Obj-C) internals and familiarity with OWASP MASVS.

Lead API security efforts including detection and exploitation of business-logic vulnerabilities (BOLA/IDOR, mass assignment), design and validation of OAuth2/OIDC/JWT authentication and authorization schemes, scripting automated attacks against API gateways to test rate limiting and fraud rules, and working with platform teams to harden gateways (Kong, Azure API Gateway). Requires strong Python scripting and experience with REST and GraphQL security and tools such as Postman, Burp Suite, and 42Crunch.

Senior (principal) role to architect security for APIs, API gateways, microservices (mTLS/service auth), CIAM (OAuth2/OIDC/FAPI, MFA, biometrics), supply-chain integrations, threat modeling and secure SDLC, field-level encryption and privacy engineering (GDPR/CCPA), and mobile/cloud/container/AI security. Requires 8+ years, ability to read code (Java/Kotlin/React/Node.js), and strong banking/fintech experience (payment gateways, ledgers, wallets).

Lead the application security function for banking/fintech features including threat modeling, manual code audits, and architecting SAST/DAST/SCA in CI/CD. Requires 5+ years in application security, proficiency in at least one core language (Java/Spring Boot, Node.js, or Go), strong knowledge of OWASP Top 10 and SANS Top 25, and experience integrating security tools (e.g., Jenkins, GitHub Actions).

SearchApi seeks an experienced engineer to own the browser stack: patch browser engines (Chromium/Firefox) in C++, maintain per-OS fingerprint profiles, eliminate automation-detection signals (navigator, WebGL, canvas, audio, fonts, Client Hints, CDP leaks), and build tooling and tests to prevent regressions. The role requires deep reverse-engineering skills, familiarity with large browser build systems, and proven contributions to browser-engine patches or stealth tooling.

The role owns the product strategy and roadmap for internal IT systems and services within the CISO organization. Responsibilities include managing product lifecycle from definition through release, driving integrations with internal and external systems, stakeholder and vendor management, testing (including UAT), data management and SQL-based analysis. Qualifications include multiple experience/education-based options (minimum explicitly listed as 1+ year in program management/business systems implementation in one alternative).

Join DuckDuckGo's Privacy Functional Team to lead and own major components of privacy technology, design systems to protect user privacy, build features for Tracker Radar, and participate in privacy reviews and audits. Role is remote (many listed countries), includes mentoring responsibilities, requires occasional travel (~2 times/year), and offers $178,500 USD annual compensation plus stock options.

DuckDuckGo seeks a Privacy Engineering Director to own complex privacy initiatives end-to-end, build privacy triage/review processes and automation, and grow privacy engineers. Requires 10+ years leading privacy reviews/audits and 4+ years privacy engineering leadership. Role is remote across many countries; compensation listed at $243,800 USD/year. Candidates must be willing to travel ~2x/year.

Senior technical presales role focused on Elastic products (search, security, observability). Responsibilities include acting as technical point of contact for accounts, architecting solutions, enabling partners and sales, presenting at events, and shaping product feedback. Role requires travel (~30% regional and occasional international).

Hands-on professional services role responsible for planning, deploying, configuring and supporting CrowdStrike Falcon AI-powered detection and response. Requires deep knowledge of AI/ML in cybersecurity, endpoint technologies (Windows, Linux, Mac), security tooling (EDR, SIEM), scripting/APIs, cloud platforms, and experience delivering customer deployments and operational support (travel up to 25%).

Remote senior consultant role in Platform Operations within CrowdStrike Services responsible for planning, deploying, implementing and operating the CrowdStrike Falcon platform and related applications. Requires 5+ years of IT deployment experience, strong knowledge of Windows/Linux/Mac, scripting/APIs, endpoint security and excellent communication in Spanish and English. Up to 25% travel.

Responsible for planning, deploying, configuring, tuning and supporting CrowdStrike Falcon AI/ML detection and response capabilities for customers. Tasks include optimizing AI-driven detection models, developing automation playbooks, scripting with Falcon APIs, assisting incident response and threat hunting, and delivering customer workshops. Role is remote (Mexico) with up to 25% travel and requires 8 years of I/T deployment or end-user experience and bilingual English/Spanish proficiency.

The Senior AI Security Engineer secures LLM-enabled applications, RAG systems, inference pipelines, and agentic workflows by performing threat modeling, security reviews, vulnerability analysis, and AI-focused red team testing. The role builds security automation and evaluation harnesses, drives mitigations with engineering teams, and serves as an AI security incident SME. Requires 5+ years relevant experience and proficiency with Python, modern AI stacks, and at least one major cloud platform.

Fastly is hiring a Threat Detection Analyst for the APAC CSOC (Japanese-speaking), remote based in Tokyo. The role involves 24x7 SOC shifts, monitoring and analyzing customer activity, responding to application-layer attacks (including bot attacks and account takeover), WAF administration, supporting agent integrations, scripting/troubleshooting, and producing customer-facing reports and security content. The role requires fluency in English and Japanese language capability; travel to the US and internationally is required.

Join Fastly's Customer Security Operations Center to monitor and analyze customer activity, triage application-layer attacks (e.g., account takeover, bot attacks), manage WAF content, and provide escalated security support. Role requires SOC experience, application security knowledge, scripting and system administration skills, Japanese and English communication, and shift availability; travel to the US and internationally may be required.

Join Fastly's Customer Security Operations Center to monitor and analyze customer activity, detect account-takeover and bot attacks, administer WAFs, handle escalations, create security content and reports, and contribute to product and process improvements. Role requires SOC experience, strong application security knowledge, scripting and system administration skills, fluent English, and Japanese-speaking capability. Position is remote based in Tokyo with shift work and international travel as required.

Senior advisory role serving as the bridge between Salesforce security capabilities and enterprise CISOs/InfoSec leaders. Requires 15+ years of cybersecurity leadership, experience with AI governance and enterprise security frameworks (NIST, SOX, DORA, NYDFS), and involves ~30–40% travel, technical deal support, thought leadership, and internal product feedback.

nuHarbor seeks a Senior Security Analyst to lead complex SOC investigations from alert through root-cause analysis, correlate SIEM/EDR/identity telemetry, drive incident response, mentor analysts, and improve detection and automation. Requires a Bachelor's plus 5 years of cybersecurity experience (or 2 years with certifications), hands-on experience with SIEM/EDR/tools listed, Sunday–Thursday availability, and U.S. work authorization. Anticipated base salary: $110,000–$135,000/year.

Staff Software Engineer on Datadog's Security Agent team responsible for architecting and implementing eBPF-based monitoring, kernel-level instrumentation, and performance-sensitive agent features to enable runtime threat detection, workload protection, and related cloud security capabilities. Role includes technical leadership, cross-team collaboration, testing methodology improvements, and ownership of feature delivery across products.