Lead design and development of low-level Linux instrumentation and runtime security capabilities (eBPF, kernel internals) for Datadog Security products. Drive end-to-end delivery, testing, and cross-team collaboration while providing technical leadership and mentoring.

Lead design and development of security agent capabilities powering runtime threat detection and workload protection across Datadog Security products. Work includes building eBPF-based monitoring, kernel-level instrumentation, performance-sensitive systems, and large-scale data collection, and partnering with cross-functional teams to deliver platform capabilities.

Lead and grow a specialized engineering team responsible for authentication, sign-in, and identity verification services. Provide technical leadership, drive delivery and roadmaps, operate services in production, recruit and coach engineers, and collaborate with cross-functional partners. Role is remote within the United States and Canada and requires willingness to travel for in-person engagement.

Role involves designing and maintaining secure CI/CD pipelines with security gates, hardening Kubernetes-based workloads on GCP and AWS, implementing supply chain security controls (SBOMs, provenance, signing), and driving baseline security standards and tooling adoption.

Chainguard seeks a Senior Product Security Engineer to design, build, and maintain secure CI/CD pipelines and harden cloud-native products running on GCP and AWS. The role requires strong hands-on experience with Kubernetes, container security, supply chain tools (Sigstore, SLSA, SBOMs), and production-grade coding in Go or Python.

Individual-contributor (Staff) Product Security Engineer based in the United Kingdom (remote). Responsibilities include designing and maintaining secure CI/CD pipelines, implementing software supply chain security (SBOMs, Sigstore/Cosign, SLSA), hardening Kubernetes workloads and container images, defining baseline security standards, and operationalising cloud-native security tooling across GCP and AWS. Requires 7+ years of relevant software/security engineering experience and strong proficiency in Go or Python.

Elastic seeks a Senior Solutions Architect focused on security/SIEM to design next-generation security solutions using Elastic Security and AI, deliver proof-of-value projects, and support consultative pre-sales activities. The role requires 5+ years in enterprise pre-sales, deep SIEM and SOC experience, forensic and threat-mitigation background, strong presentation and RFI/RFP skills, fluency in German and English, and travel of 30–50%.

Lead Coinbase's Internal Audit security coverage across IAM, threat detection, incident response, security architecture, cryptography/key management, vulnerability and application security, cloud security, and crypto-native controls. Manage and develop a team while personally owning high-complexity audits, produce risk-prioritized reports for executive leadership and the Board, and drive adoption of security analytics and AI tooling. Salary range provided: $201,365–$236,900 USD base per year.

Primer is hiring a hands-on Security Engineer to be the second hire in the security function, owning product/AppSec work including threat modelling and security reviews, building automation and tooling, coordinating penetration tests and remediation, supporting recurring SOC2 and PCI compliance activities, and partnering closely with Cloud, Infra and engineering teams. Remote-first role supporting candidates in the listed countries.

Responsible for building and extending federated identity and authorization platform services (OAuth2/OIDC/SAML/JWT), integrating with FusionAuth, and delivering backend services in C# and Python. Works on multi-tenant API design, supports product teams' integrations, and contributes to AI-native delivery and platform capabilities that support cross-product functionality.

Technical owner for Audit Logging, SIEM Integration, and Unified Security Visibility across DigitalOcean's cloud platform. Role includes defining the multi-year roadmap, architecting fault-tolerant Go-based telemetry and streaming pipelines, designing SIEM integrations and customer-facing dashboards, and leading/mentoring engineers. Requires 10+ years software engineering experience with 4+ years in audit logging/security telemetry or high-throughput data pipelines; experience with Kafka/Flink, Kubernetes, Terraform, and compliance frameworks is emphasized.

Sardine seeks a Deputy Chief Information Security Officer to help define and execute security strategy, prioritize high-risk areas, support compliance (PCI, SOC 2, ISO 27001, DORA, FedRAMP readiness), lead incident response, and engage with customers and auditors. Requires 10+ years in cybersecurity (including 3+ years in senior leadership), strong AppSec and cloud security experience, and US authorization to work without sponsorship.

Join CrowdStrike Intelligence Advanced Research Team to perform vulnerability research and exploit development, analyze vendor patches and large file collections, reverse engineer malware and payloads, develop automated collection/analysis tools (Python preferred), leverage GenAI/LLMs in workflows, collaborate cross-team, and publish research. Requires 4+ years in information security and proficiency in English.

Own the architecture and multi-quarter roadmap for Docker Hardened Images (DHI); define standards and conventions for hardened images and Helm charts; drive container supply chain security (SBOM, Sigstore, SLSA, attestation); mentor senior engineers; represent Docker in enterprise engagements and upstream OSS communities; participate in paid on-call rotation.

WhiteTech seeks a remote PHP Developer with 4+ years of commercial PHP experience and hands-on SEON integration. The role focuses on building fraud detection/prevention flows, risk scoring and decision logic, orchestration within complex systems, and integrating SEON beyond simple API calls. Required skills include REST APIs/webhooks, asynchronous processing, queues, transactional consistency, idempotency, observability, SQL, and experience with Symfony or another modern PHP framework. Candidates across Europe (including listed non-EEA countries) and those able to work within CET are welcome to apply.

Full-time, mid-level Infrastructure Vulnerability Management Engineer role responsible for continuous infrastructure scanning and triage, CSPM/KSPM/DSPM ownership, IaC security in CI/CD, container and VM vulnerability lifecycle management, compliance-driven tracking (e.g., SOC 2, ISO 27001, PCI-DSS), incident response support, and executive reporting. Requires about 5 years of relevant experience and strong multi-cloud experience (deep GCP expertise preferred). Role is based in Foster City, CA with in-office days Monday, Wednesday, and Friday.

Full-time, on-site (Foster City, CA; in-office M/W/F) Engineering Manager role to create Replit's anti-abuse program from 0-to-1. Responsibilities include threat modeling, designing progressive verification and identity/KYC infrastructure, shipping detection and enforcement systems (rules engines, ML risk scoring, reputation), defining metrics and data pipelines, hiring and growing a small team, and operating cross-functionally with Support, Legal, Security, Infrastructure, and Growth. Requires 6+ years engineering experience and 2+ years managing teams.

NerdWallet is hiring a Security Software Engineer focused on AI and automation to design and implement LLM-driven systems, RAG pipelines, automated code review, and integrations with engineering tooling. The role requires ~3+ years of software or security engineering experience, hands-on work with backend services (Python or Go), cloud and distributed systems, and knowledge of application and AI-specific security risks.

Join NerdWallet as a Security Software Engineer (AI & Automation) to design and implement AI-powered security systems (LLMs, RAG, multi-agent), automation for vulnerability analysis and secure code review, integrations with developer tools, and scalable backend and data pipelines. Responsibilities include threat modeling, improving SSDLC, incident response support, and partnering across engineering teams. Role is remote within Canada (except Quebec) and requires 3+ years of software or security engineering experience and strong Python or Go skills.

Role requires 7+ years' experience in information security risk and compliance within the Indian financial sector. Accountabilities include acting as primary liaison with Indian regulators (e.g., RBI, CERT‑IN), owning compliance with RBI Master Directions and data localisation requirements, leading regulatory audits (including RBI SAR), defining local security standards, and reporting to senior leadership. Certifications such as CISM, CISA or CRISC are strongly preferred.