CrowdStrike is hiring an Incident Response Analyst as a DoD SkillBridge/CSP internship (remote, USA). The role supports the Incident Response lifecycle—triage, investigation, live response, containment, escalation—and includes detection development, log/IDS/SIEM workflows, and reporting. Eligibility is restricted to qualifying U.S. Active Duty service members within their final SkillBridge period; the role is not eligible for direct hire. US citizens and lawful permanent residents (green card holders) only. Full-time (40 hours/week) SkillBridge participation under DoD orders.

Join Tenable's Professional Services as a Senior Security Consultant to onboard, configure and optimize Tenable Exposure Management solutions for clients. Requires 5+ years in IT/cybersecurity, experience with vulnerability scans, configuration audits, Tenable products (or equivalents), familiarity with Metasploit and OWASP, REST API/Python skills, and strong client-facing and communication abilities. Remote role based in the Netherlands with some client and office travel.

Senior Backend/Golang Engineer position (remote across Bolivia, Colombia, Costa Rica, Peru) requiring 5+ years experience to design, build and operate scalable microservice-based cybersecurity systems on GCP using Docker, Kubernetes, Pub/Sub/Kafka, NoSQL/RDBMS and CI/CD/GitOps practices. Advanced English required.

Hands-on senior security role responsible for end-to-end vulnerability management (discovery, scanning, prioritization, remediation tracking, verification), investigating and responding to incidents, consuming threat intelligence and threat hunting, developing detection use cases, supporting regulatory compliance audits (including CNBV/Ley Fintech), mentoring junior team members, and participating in an on-call rotation. Requires 5+ years in security operations, experience with vulnerability scanning platforms, EDR/SIEM, IaC, AWS, and professional fluency in English and Spanish.

Customer-facing Sales Engineer role focused on demonstrating CrowdStrike's endpoint security platform to federal/civilian customers. Responsibilities include articulating current security solution gaps, leading technical engagements, collaborating with sales/marketing/support/engineering, and presenting to diverse audiences including C-level. Requires strong endpoint/network security knowledge (AV, EDR, IR, forensics, SIEM, firewall, HIPS/IDS), OS experience (Windows/macOS/Linux), excellent communication skills, and a sales engineering background or 5+ years relevant experience. Ability to travel as required and pass government background/fingerprint checks.

Modern Health is hiring a Product Security Engineer (remote, US-based) to join the ProdSec team reporting to the Head of Security. Responsibilities include analyzing vulnerabilities in web and mobile apps, driving remediations with engineering teams, threat modeling, secure code reviews, deploying and managing security tooling (SAST, DAST, Hashicorp Vault), assessing cloud security, and integrating security across the SDLC. Role requires 2–4 years in product/application security or 1–3 years in security-focused software engineering. Immigration sponsorship is not available; the role cannot be performed in Hawaii and US-based employees outside Pacific Time must overlap hours with Pacific Time operating hours.

Join Ramp's security team to lead detection and response initiatives—improving logging, alerting, runbooks, triage, and automation for federal/public sector environments. Requires ~3–4 years IT/security experience (SOC/CERT/C/SIRT), experience with query-based log management (ELK, Datadog, Panther), and hands-on automation tooling; role expects in-person work at NYC HQ at least two days/week. Relocation support to NYC or SF is available as needed.

CrowdStrike is hiring a Senior Incident Response Consultant for Japan (remote/Tokyo) to lead technical incident response engagements, perform host and network forensics across Windows/macOS/Linux, conduct threat hunting and malware analysis, and produce written/verbal reports for stakeholders. The role requires high business-level Japanese, experience in incident response/forensics or related disciplines, ability to travel up to 30%, and proven communication and leadership skills.

Role focused on building and operating core attestation cloud services that validate NVIDIA platform integrity. Responsibilities include designing APIs and integrations, improving reliability and operational maturity (SLOs/SLIs, alerting, runbooks), implementing appraisal and verification workflows, and mentoring engineers. Requires BS/MS or equivalent, 12+ years experience in large-scale distributed systems/cloud services with at least 3 years in security/attestation, proficiency in Go or Java, and hands-on experience with Kubernetes, major cloud providers, CI/CD, and observability tools.

CrowdStrike seeks a Senior Competitive Intelligence Analyst for Platform Security to lead competitive analysis and field-facing strategy. The role requires deep technical knowledge in cybersecurity (endpoint and cloud security), at least 5 years of relevant experience, collaboration with product, sales, enablement and marketing teams, deal support, and presenting findings to senior leadership. U.S. base salary range listed: $145,000–$220,000/year.

Role on LivePerson's AppSec team to manage and enhance application security tools (SAST, DAST, SCA), validate discovered vulnerabilities (manual review, Burp), perform application and infrastructure penetration tests, work with engineering to remediate issues, produce reports/metrics, and help maintain AppSec policies and training. Strong focus on cloud (GCP), web protocols and automation.

Serve as a technical authority and trusted advisor to sales, customers, and partners for Elastic's search and security solutions. The role emphasizes deep SIEM and SOC experience, advising on product positioning, enabling partners, developing technical collateral, engaging the community, and driving technical wins. Requires presales/solutions architecture experience and willingness to travel ~30% regionally and occasionally internationally.

Join CrowdStrike's Red Team R&D to maintain and develop infrastructure used for simulated adversary operations. Responsibilities include reactive and proactive infrastructure support for EMEA/META, Windows and Linux administration, cloud (AWS/Azure/GCP) management, IaC projects, security/compliance, scripting in Python and Bash, and documentation. Position is primarily remote with occasional in-person work at the Reading, UK office.

Twilio is hiring a Senior Software Engineer (remote in the US) to develop Stytch’s fraud detection and prevention products, primarily working on a Device Fingerprinting product to detect bots, manual abuse, and reverse-engineering. Requires 6+ years designing, building, and operating production systems, familiarity with C/C++ and modern programming languages, and ability to work on-call and travel occasionally.

Join Invicti's AI team to design and implement autonomous agent systems and LLM-powered features focused on agentic pentesting and AppSec. Work spans agent architectures, memory/RAG systems, MCP integrations with security and developer tools, prompt chains, and full-stack ownership from design through production. Required: 5+ years shipping production software, strong Python, experience with LLM apps/RAG/agentic AI, distributed systems, API design, and cloud-native architectures.

Lead and manage SOC 1 and SOC 2 examinations and support end-to-end SOX (ICFR) planning and execution. Own IT control assessments (ITGC/ITAC), control design and operating effectiveness testing, remediation, audit evidence collection, and documentation for cloud and hybrid environments while partnering with cross-functional teams and external auditors. Role requires 5+ years of external IT audit or technology risk experience and experience with cloud security controls and large-audit environments.

Fully remote Senior Analyst, Security Compliance responsible for leading SOC 1/2 examinations, supporting SOX 404/ICFR planning and testing, performing ITGC/ITAC assessments, managing remediation, and partnering with internal and external auditors across cloud and hybrid environments. Requires 5+ years of external IT audit or technology risk assurance experience and hands-on SOX/control testing expertise.

The Security Risk Lead will run targeted risk assessments, analyze risk data, own systems that track risk decisions and mitigations, oversee risk committees, design metrics/reporting for senior leadership, maintain core security policies/standards, and support third-party/vendor risk assessment. The role requests 6+ years of relevant experience and familiarity with frameworks such as NIST CSF, ISO 27001, PCI DSS, and OWASP. Preferred locations include San Francisco, New York, Denver, or remote within the United States or Canada.

Role involves designing, building, and maintaining security products and infrastructure at cloud scale: real-time detection engines (Apache Flink, Kafka), high-throughput security APIs and microservices (Go, Node.js), streaming analytics, and Kubernetes-based security solutions. Requires experience with distributed systems, cloud platforms (AWS/GCP/Azure), infrastructure-as-code (Terraform/Helm/Chef), and familiarity with security tooling (SIEM, WAF, IDS/IPS).

Responsible for designing, building, and maintaining security products and infrastructure: real-time detection engines (Apache Flink, Kafka), high-performance APIs and microservices (Go, Node.js), Kubernetes-based security solutions, and petabyte-scale data pipelines. Requires 5+ years of software engineering experience, strong Go and JavaScript skills, deep distributed systems and Kubernetes knowledge, and cloud experience (AWS/GCP/Azure). Role is listed as hybrid.