CrowdStrike is hiring a Vulnerability Detection Engineer for the Exposure Management Content team to research, develop and deliver host and network vulnerability assessment detections, build detection pipelines and validation workflows, and collaborate across product and engineering teams. Requires minimum 5 years' experience, scripting/programming (Python/Perl/Go), familiarity with vulnerability management and experience leveraging AI for detection and analysis. Role is hybrid (2-3 days/week onsite in Sunnyvale, CA).

Join GitBook as a Security Engineer to embed security across the development lifecycle, own initiatives from concept to production, build safeguards and tooling to protect users and infrastructure, strengthen the company's security posture for enterprise customers, identify and mitigate abusive or harmful content, and define internal security standards while mentoring engineers.

Join MetaMask's application security team to embed security across the software development lifecycle. Responsibilities include threat modeling, security design reviews, vulnerability assessment and triage (including bug bounty reports), code fixes, developing security automation and AI tooling, and collaborating with distributed engineering teams. Familiarity with blockchain/Ethereum, crypto wallets, and JavaScript-based stacks (Node.js, React, React Native) is required.

Join CrowdStrike's Product Security team to perform technical security assessments, design and deploy tooling and controls for software build pipelines (including signing), harden open source usage and system configurations, monitor for vulnerabilities/anomalies, and lead cross-cutting security initiatives. Required skills include Linux/Unix administration, scripting (shell, Python, Go, JavaScript), CI/CD tools (e.g., Jenkins, Argo CD), TLS/PKI/signing knowledge, system hardening, and experience with monitoring/log aggregation and cloud platforms. Position is remote for U.S. candidates; listed U.S. base salary range is $120k–$180k/year.

Hiring a software engineer to develop backend services and tooling across Fraud, User & Identity Management, and Identity. Responsibilities include detection and prevention systems, enforcement actions (locks, freezes), protections against account takeover, observability, and partnering with fraud, security, product, and data teams to reduce loss and improve account security.

Founding management role for the SSCS (Software Supply Chain Security) Add-On: guide a backend engineering team building features such as dependency enforcement, build provenance, malicious package detection, and artifact signing. Responsibilities include driving delivery to GA milestones, hiring and developing engineers, coordinating roadmap and cross-team dependencies, and improving engineering quality in a distributed, asynchronous environment.

Responsible for leading complex IT and security audits covering cloud platforms (AWS, GCP), application security, IAM, vendor risk, and blockchain-related products (wallets, cold storage); synthesizing findings for executive and board audiences; driving remediation strategy; and mentoring audit team members. Requires 8+ years' relevant experience and professional certifications (e.g., CISA, CISSP, CIA, CISM).

CrowdStrike seeks a Senior Intelligence Analyst for the Global Threat Analysis Cell to monitor and analyze PRC-linked intrusion activity, track adversary campaigns and TTPs using CrowdStrike telemetry and open sources, produce short and long-form intelligence reports, collaborate across teams, support customer briefings, and contribute to tool/automation efforts. Requires 2+ years in threat intelligence, knowledge of PRC geopolitics, and experience with analytic tradecraft; US-based remote role with a listed U.S. base salary range of $85,000–$120,000 per year.

Hands-on SRE role leading design and implementation of cloud security solutions across AWS, Azure, and GCP, building automation, monitoring, and security tooling (CSPM, IAM, runtime security). Requires 6+ years of SRE or infrastructure engineering experience with a strong security focus and experience with IaC (Terraform/CloudFormation), programming (Golang or similar), Linux, and networking. Role can be based in Austin, New York City, San Francisco, Seattle (hybrid) or fully remote within Eastern or Central time zones.

Join MongoDB's Infrastructure Security team (within SRE) to design and implement scalable security primitives and services protecting compute, networking, and identity across AWS, Azure, and GCP. Work includes Linux security mechanisms, Kubernetes and eBPF-based runtime policies, CSPM and vulnerability management tooling, CI/CD and Terraform integration, monitoring/logging pipelines, and leading end-to-end projects. Role expects 5+ years experience and proficiency in one or more languages (Java, Go, Rust, Python, C/C++).

Design and build core security primitives and services protecting MongoDB Atlas compute, networking, and identity across AWS, Azure, and GCP. Use Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups), Kubernetes, and eBPF; develop APIs, automation, and tooling for CSPM, vulnerability management, and monitoring/logging pipelines; integrate security into CI/CD and Terraform. Requires 5+ years in software/SRE/security engineering and proficiency in at least one language (Java, Golang, Rust, Python, or C/C++). Role based in NYC, Austin, Seattle, San Francisco or fully remote on East Coast business hours.

As a Senior Fullstack Engineer on the Identity Platform team, you'll design and evolve IAM and authorization systems (permissions, roles, policies, OAuth/JWT infrastructure, service-to-service auth) used by many teams. The role focuses on platform-level decisions around security, scalability, API design, SDKs/middleware, and developer-facing tooling to provide consistent access controls for Zapier's products and enterprise customers.

Veeva is hiring an Application Security Architect to provide subject-matter expertise and security guidance to product and IT engineering teams. Responsibilities include security architecture reviews, threat modeling, code analysis, implementing security best practices, and contributing to training. Requires deep knowledge of application security (OWASP Top 10), cloud platforms (AWS/Azure), SAST/DAST/SCA tools, encryption/key management, and 10+ years of experience.

As a Senior Go Developer based in Costa Rica, you will lead design and development of scalable backend services and cybersecurity intelligence capabilities using Golang. The role includes building microservices and APIs, developing CI/CD and observability practices, working with Docker, Kubernetes and cloud platforms (preferably GCP), using messaging systems like Kafka or Pub/Sub, and mentoring junior engineers. Requires 7+ years of backend and distributed systems experience.

Lead backend engineer role (7+ years) focused on building scalable microservices and APIs with Golang, operating in a cloud-native environment (preferably GCP). Responsibilities include developing CI/CD pipelines, containerization (Docker), orchestration (Kubernetes), working with messaging systems (Kafka/Pub/Sub), databases (relational and NoSQL), contributing to architecture, code reviews, and mentoring junior engineers.

Role requires building and supporting campus/data center network infrastructure, AWS networking, Cisco LAN/WAN/WiFi and Palo Alto firewalls; monitoring performance, incident response, root-cause analysis, and collaboration with security and engineering teams to develop a secure global network. Requires 7+ years' relevant experience. Approximately 15% travel; remote and based in India (Karnataka, Tamil Nadu, Telangana, Maharashtra, Delhi).

CrowdStrike seeks a senior analyst for its Falcon Complete virtual security operations center to monitor and analyze security alerts, handle incidents across Windows, macOS, and Linux, perform malware and forensic analysis, execute remote remediation, improve detection and triage processes, mentor junior analysts, and produce customer-facing communications. Relevant experience areas include incident response, computer forensics, malware analysis, network forensics, systems administration, and programming/scripting.

Senior Backend Engineer on the Pipeline Security team responsible for designing and implementing backend architecture, RBAC, GraphQL APIs, and Kubernetes/Helm deployments for GitLab's native Secrets Manager. Work primarily in Ruby on Rails with some Go, own features end-to-end (design through production), collaborate cross-functionally, and focus on CI/CD and software supply-chain security (SLSA).

Join 1Password’s Product Security team as a Senior Developer (Windows) to implement next-generation security features across platforms, develop secure shared libraries, resolve vulnerabilities, and promote secure coding. The role emphasizes Windows security (TPM/HSM, Windows Hello, BitLocker, Secure Boot, Credential Guard), Rust and FFI development, familiarity with cryptography and authentication protocols, cross-team collaboration, mentoring, and participation in occasional in-person events. USA and Canada compensation ranges are listed in the posting.

Remote (India) role to build scalable, productized security automation content (components, connectors, playbooks) for the Swimlane Turbine low-code platform. Requires a technology degree or equivalent experience, strong software/automation skills (Python and/or JavaScript), deep knowledge of SIEM/SOAR/EDR/vulnerability management/threat intelligence, and hands-on security operations experience. Involves integrating Agentic AI and LLMs, platform mastery, and cross-functional collaboration.