Individual-contributor Staff role responsible for designing, building, and maintaining secure CI/CD pipelines and implementing software supply chain security controls (SBOMs, Sigstore, SLSA). Requires deep hands-on experience with Kubernetes, cloud platforms (GCP/AWS), container security, and proficiency in Go or Python. Minimum 7+ years experience.

Senior individual-contributor role focused on securing Chainguard's products and pipelines: design and maintain secure CI/CD with security gates, implement supply chain controls (signing, SBOMs, SLSA/Sigstore), harden Kubernetes workloads and cloud IAM on GCP/AWS, and drive adoption of baseline security standards and tooling.

Mattermost is hiring a Senior Security Engineer to lead security and IT projects, detect/investigate/remediate incidents using SIEM, EDR, and SOAR, conduct threat hunting with a Zero Trust approach, administer IAM and security monitoring, and assess AI-enabled risk. Requires 3+ years hands-on security engineering/incident response experience, familiarity with SIEM/EDR/SOAR, cloud security (AWS/GCP/Azure), Linux and Kubernetes/Docker, IAM, and managing Microsoft 365/Google Workspace tenants. Posted salary range: €62,000–€82,000 EUR.

Lead design and implementation of security tooling, harden cloud and IT infrastructure, detect/investigate/remediate incidents using SIEM/EDR/SOAR, conduct threat hunting with a Zero Trust approach, administer IAM and security monitoring, collaborate with Engineering on AI-related risks, and contribute to policies and incident response. Requires 3+ years relevant experience.

Lead model development and MLOps for GenAI Security at Reddit: define problems, assemble and label datasets, build ETL and training pipelines, train and evaluate deep learning models (transformers, embeddings, sequence models), deploy and monitor production models, and partner with cross-functional teams. Requires 5+ years of production ML/deep learning experience and hands-on use of frameworks such as PyTorch or TensorFlow.

Operate and maintain Palo Alto, Fortinet, and Cisco firewalls, secure web gateways, and VPN architectures; manage HA clusters, dynamic routing (BGP/OSPF), NAT/policy objects, and perform packet-level troubleshooting. Integrate security platforms with SIEM/SOAR, identity, PKI and endpoint telemetry; tune IDS/IPS, URL filtering, malware defenses, and drive governance, audits (e.g., MAS TRM), runbooks, automation (Ansible/Terraform) and incident response.

Virta Health is hiring a Cloud Security Engineer to build and mature application security across GCP and Kubernetes environments. Responsibilities include threat modeling, vulnerability management (SAST/DAST/IAST), IAM and network security improvements, IaC (Terraform) automation, and embedding security practices into the SDLC. Role is remote-first (US-based) with listed compensation.

Reddit is hiring a Staff Product Security Engineer to lead design and delivery of secure frameworks, paved paths, and workflow-native controls (including for AI-assisted development) to prevent vulnerabilities before production. Responsibilities include building guardrails and library-level controls, driving product security reviews, and improving vulnerability discovery and remediation pipelines. Requirements include 8+ years in software engineering/product/application security (with at least 2 years at staff scope), proficiency in one or more languages (Go, Python, JS/TS), and experience with CI/CD, developer-facing platforms, and vulnerability management. Base salary range (US): $217,000–$303,900 USD/year.

Join Arize AI as a DevSecOps Engineer to design guardrails for agentic AI, secure TypeScript/Node.js codebases, integrate SAST/DAST/SCA/secret and IaC scanning into CI workflows, threat-model LLM and agent features, and lead incident response. Requires 4+ years in DevSecOps/application/platform security and practical experience with TypeScript, cloud infrastructure, containers, Kubernetes, and CI/IaC tooling.

Embed with the Desktop engineering team to own security posture for Docker Desktop. Responsibilities include threat modeling, security design and code reviews (Go), vulnerability triage and CVE handling, liaising with central security, improving container runtime and identity security (OCI, runc, containerd), and maintaining security documentation and runbooks. Remote-first role with potential on-call rotation.

Hands-on senior role in Professional Services delivering cloud security assessments (primarily AWS and Azure), building detection and alerting in cloud-native and third-party platforms, automating assessment tasks, and running client engagements across the JAPAC region. The role requires demonstrable experience in cloud platforms and detection engineering, strong Python and query skills (KQL/SPL), excellent English communication, and 10+ years of work experience. Additional languages (Mandarin, Japanese, Hindi, Thai) are a strong advantage.

Hightouch is hiring an Application Security Lead (remote, North America) to be the company's first dedicated security hire and own application security end-to-end. Responsibilities include threat modeling distributed systems, securing multi-tenant platforms and sub-tenant access control, hardening internet-facing APIs (rate limiting and abuse detection), and extending security for multi-region/multi-cloud and data residency. The role is hands-on in the codebase and includes running security programs such as bug bounty and pentest engagements. Stated salary range: $180,000–$400,000 USD per year.

Mattermost is hiring a Senior Security Engineer to design and implement security tooling, harden cloud and IT infrastructure, detect/investigate/remediate incidents, administer IAM and security monitoring, and assess AI-enabled risks. Requires 3+ years in security engineering/incident response, experience with SIEM/EDR/SOAR, cloud security (AWS/GCP/Azure), Linux and Kubernetes/Docker, IAM, and Microsoft 365/Google Workspace management. Role is fully remote and based in the United Kingdom.

As a Staff Infrastructure Security Engineer you will define architectural patterns, reference implementations, and security automation for GitLab’s public cloud infrastructure and container platforms. The role requires leading cross-team security initiatives, conducting threat modeling and security reviews, applying AI to security workflows, and mentoring engineers. Required expertise includes cloud security (AWS/GCP/Azure), Kubernetes, infrastructure-as-code tooling, multiple programming languages (Go, Python, Ruby), and familiarity with security frameworks such as FedRAMP, ISO 27001, SOC 2, and PCI-DSS.

Hands-on senior engineer responsible for architecting and implementing high-availability, low-latency IAM services in Go; building OIDC/SAML SSO integrations; evolving a policy engine (Rego/OPA) for advanced permissions; operating Kubernetes deployments and modern eventing pipelines; and mentoring junior engineers. Requires 5+ years of software engineering experience and strong identity, distributed systems, and cloud-native expertise.

Senior Software Engineer (IC3) responsible for designing and developing high-availability, low-latency authentication and authorization services in Go; implementing OIDC/SAML SSO integrations; evolving a policy engine (Rego/OPA) for advanced authorization; operating services on Kubernetes; and mentoring engineers. Requires 5+ years software engineering experience and strong identity, distributed systems, and cloud-native skills. Role is listed as remote.

Lead Replit's vulnerability response program: intake, triage, reproduce and severity-score findings, coordinate remediation with Engineering/SecOps/SRE/Cloud teams, manage bug bounty and disclosure (HackerOne preferred), coordinate CVEs and public advisories, and support compliance evidence (SOC 2, ISO 27001). Role is full-time based in Foster City, CA with an in-office requirement three days per week.

Remote (U.S.) senior consultant role on the Platform Professional Services team focused on Falcon Next-Gen SIEM. Responsibilities include advising customers, demonstrating NG-SIEM capabilities, operationalizing SIEM within customer environments, expanding use cases, and providing product feedback. Requires 2+ years working with SIEM/log management and SOAR, intermediate (3+ years) cloud (AWS/GCP/Azure) and IT security experience, scripting/integration skills (Python, PowerShell, JavaScript, YAML, REST API, Go, Cribl, Postman), experience with AI-assisted development/integrations, and occasional travel (<25%). Salary range provided: $115,000–$160,000/year.

Twilio is hiring a Global Security Operations Center (GSOC) Operator to maintain situational awareness of physical security and travel-related events across Twilio’s footprint. Responsibilities include monitoring ACS/IDS/VMS and open-source feeds, performing incident intake and triage, dispatching/coordination with emergency responders, mass notifications, travel review, and participating in post-incident reviews. Role requires 3+ years GSOC experience, OSINT and physical security systems familiarity, shift availability, and English proficiency. Approximately 10% travel is anticipated.

Olo is hiring a Senior Security Engineer (Blue Team) to lead detection and response, conduct vulnerability assessments, manage incident response, and mentor other engineers. The fully remote UK role requires 5+ years in security engineering and operations with experience in SIEM, IDS/DLP/FIM, AWS security, IaC tools (Terraform/Ansible/CloudFormation), automation/scripting, and security architecture.