KernelCare (CloudLinux) seeks experienced Kernel Developers to produce and maintain Linux kernel patches focused on security (CVE fixes) and functionality. Responsibilities include updating kernels with security fixes, supporting existing functionality, implementing features, and optionally creating Python/Bash automation for testing. Required skills: strong C, Linux kernel subsystems knowledge, GDB/debugging, Git, scripting, and English (upper-intermediate+). Fully remote with flexible hours; benefits include paid vacation, medical insurance compensation, education budget, and other perks.

OpenZeppelin seeks a Lead Blockchain Security Developer for a multi-year Canton engagement. Responsibilities include owning the OpenZeppelin Contracts Library for Daml, leading technical design and implementation of year‑1 Reference Implementations (privacy-preserving DEX, lending, cross-chain stablecoin settlement, confidential auction launchpad), coordinating with Digital Asset and ChainSafe, and collaborating with auditors. Requirements include production Daml fluency, 3+ years UTXO-based protocol development, 3+ years DeFi engineering, demonstrable security/auditing experience, library/SDK API design experience, cross-chain interoperability exposure, and an AI-native workflow.

Replit is hiring a mid-level AppSec Vulnerability Management Engineer to bridge security, compliance, and engineering. Responsibilities include periodic application scanning and triage, maintaining audit-ready remediation evidence for frameworks (SOC 2, ISO 27001, PCI-DSS), owning the SBOM and advancing supply-chain security (SLSA), integrating and tuning security tooling in CI/CD, and assisting incident response with real-time countermeasures. Requires ~5 years of relevant experience, software development background, and code literacy in JavaScript/TypeScript, Python, and Go. This is a full-time role based in the Foster City, CA office with in-office days Monday, Wednesday, and Friday.

Kraken is hiring a Staff (Senior) Security Architect within Kraken Security Labs to design, review, and verify security architecture across a heterogeneous environment. Responsibilities include conducting security assessments and audits, advising blockchain teams, and working hands-on on topics spanning infrastructure security, cryptography, web3, Rust projects, and AI security. Familiarity with OWASP/NIST and strong collaboration and communication skills are expected.

Kraken seeks a hands-on Staff Security Architect for Kraken Security Labs to design and review security architectures, conduct assessments and audits, and provide expertise across blockchain, cryptography, web3, Rust, infrastructure, and emerging AI product security. The role involves deep technical consulting and collaboration with engineering teams across the company.

Responsable de liderar defensa y respuesta a incidentes, gestionar servicios CyberSOC y plataformas SIEM, evaluar postura de seguridad con marcos NIST y SOC-CMM, integrar fuentes de monitoreo y casos de uso, gestionar vulnerabilidades y actividades de remediación, participar en licitaciones y gestión de proveedores, y elaborar informes ejecutivos. Requiere más de 5 años de experiencia en operaciones de seguridad ofensiva/defensiva y SOC.

Quora seeks a Detection & CorpSec Engineer to develop and operate SIEM and detection capabilities across corporate and production environments, perform end-to-end incident investigations (including malware analysis and exfiltration assessment), deploy canary tokens and early warning mechanisms, and partner with IT to enforce device and access controls (endpoint protection, identity management, Zero-Trust VPN). Role requires 5+ years in security/detection engineering and strong Python and EDR experience. Remote from the United States or Canada; coordination hours require availability during Pacific Time daytime hours.

Work on securing large-scale Linux and AI cluster infrastructure including incident response, disaster recovery, system hardening, security controls, governance, and audit readiness. Requires strong C/C++ skills, Linux kernel hardening (SELinux/AppArmor), eBPF, experience securing large-scale Linux and HPC environments, and demonstrated incident response expertise. BS in a relevant field or equivalent and 8+ years of relevant experience.

CrowdStrike seeks a Third Party Risk Management (TPRM) Analyst to develop and operate the TPRM program, conduct vendor security risk assessments across the vendor lifecycle, manage findings and remediation, produce reporting/dashboards, collaborate with procurement/legal/privacy/IT, and drive automation using GRC tooling. Experience with GRC/TPRM platforms, vendor control frameworks (SOC, ISO, NIST, CSA-CCM, GDPR, PCI-DSS), and continuous monitoring tools is emphasized. U.S. base salary range: $85,000–$120,000 per year.

NVIDIA seeks a Senior Embedded Architect Manager to research, design, and implement hardware and software security solutions for networking products. The role requires 12+ years of experience with IO interfaces (I2C, I3C, SPI, UART, USB, PCIe), low-level firmware and languages (Verilog, Python/Perl, ARM assembly, C/C++), and experience with boot architecture, RISC-V, root-of-trust, and hardware security primitives.

Remote (United States) Product Security Engineer III at GitHub responsible for designing, building, and maintaining security tooling and automation (static analysis pipelines, secret scanning, dependency analysis, supply chain defenses, CI/CD integrations). Requires programming experience (Ruby, Go, Python), experience building security tooling, and a minimum of 1+ year up to 5+ years depending on qualifications. Salary range USD 107,700–285,900/year.

Customer-facing senior technical role partnering with Sales to lead discovery, solution design, pilots, and rollouts for Firefox Enterprise in secure, regulated enterprise environments across DACH. Requires 7+ years' experience in solutions/sales/security engineering, strong enterprise security and deployment skills (GPO/MDM, SSO/MFA, PKI, SIEM, etc.), excellent communication, English fluency and native-level German.

Senior Solutions Engineer (DACH) for Firefox Enterprise responsible for partnering with sales to design, validate, and deploy Firefox Enterprise across Germany, Austria, and Switzerland. Requires 7+ years in solutions/sales/architecture roles, native-level German and strong English, and hands-on expertise in enterprise security, IAM, policy management, PKI, SSO/MFA, SIEM/DLP/CASB, GPO/MDM, and Kubernetes/Helm.

Replit seeks a GRC Engineer to lead the technical architecture of its GRC program, moving workflows toward compliance-as-code and automated evidence collection. Responsibilities include partnering with engineering, legal, and sales teams; operating the cybersecurity risk register; managing SOC 2 and ISO 27001 posture; automating controls and third-party risk assessment; and engaging with external auditors. Requires 8+ years in GRC or information security and experience with cloud (GCP/AWS) and GRC automation tools.

Own end-to-end production and maintenance of Docker Hardened Images (packages, images, Helm charts). Responsibilities include authoring and maintaining build definitions, adapting Helm charts for hardened deployments, tracking upstream releases, triaging and remediating vulnerabilities, writing Go-based integration tests and validators, improving automation and quality gates, engaging with upstream maintainers, and participating in paid on-call rotation. Remote-first position with hiring in Canada and the United States; compensation ranges provided per country in the posting.

Fastly is hiring a Threat Detection Analyst for its Customer Security Operations Center (APAC) to monitor and analyze customer activity, identify application-layer attacks (including bot attacks and account takeover), manage WAF content, and support escalated security cases. The role is shift-based in a 24x7 team, requires strong application security and SOC experience, scripting and system administration skills, fluent English, and Japanese language ability.

NVIDIA seeks a Senior AI Security Researcher with 12+ years' experience to develop methods, tools, evaluations, and prototypes that reveal and mitigate failures in frontier AI models, agentic systems, and AI-enabled products. The role requires hands-on implementation in Python and modern ML tooling, collaboration with engineering and security teams, and translating research into practical mitigations and benchmarks.

Seeking a Senior Android Engineer (based in EMEA) with 5+ years' Android experience to develop and evolve Fingerprint's Android SDKs and demo apps, implement detection signals, optimize performance, and collaborate with product, backend, and data teams. Strong emphasis on mobile security, Kotlin, Jetpack Compose, and experience building native Android SDKs; company is fully remote and does not sponsor visas.

Udacity (an Accenture company) seeks external contractors to serve as Cybersecurity Technical Mentors delivering 1:1 sessions, technical deep-dives, and group Q&A. Requires 5+ years relevant experience and strong cybersecurity skills (network, application, system security; threat detection; incident response; familiarity with SIEM/IDS/IPS and security frameworks). Role is remote and targets candidates across US, Canada, Europe, MENA, India and APAC timezones.

Lead technical, individual-contributor role to design, build, and maintain secure CI/CD pipelines and enforce supply chain security (SBOMs, SLSA, Sigstore/Cosign). Requires hands-on Kubernetes production experience, practical GCP and/or AWS security expertise (IAM, workload identity, secrets), proficiency in Go or Python, and experience securing container images and cloud-native configurations.