Remote (Canada) senior Research Engineer on STRIKE responsible for owning the research-to-production pipeline: building detection content (YARA, Sigma, STIX), platform components (distribution servers, sandbox orchestration, ingestion), schema and standards adoption (STIX 2.1, TAXII 2.1), and production LLM integrations with retrieval and eval harnesses. Requires 5+ years hands-on engineering experience with threat intelligence or detection engineering, production Python and TypeScript/Node development, cloud (AWS), data pipelines, and practical experience with STIX/TAXII/MISP and detection tooling. SecurityScorecard does not provide immigration sponsorship for this position.

SecurityScorecard seeks a Senior Research Engineer for its STRIKE Threat Intelligence team to own the research-to-production path: turning findings into detection rules, distributed feeds, scoring inputs, and platform APIs. The role requires 5+ years hands-on engineering with prior experience building production systems that consume or emit threat intel, strong skills in Python and TypeScript/Node, familiarity with STIX/TAXII/MISP/MITRE ATT&CK, practical experience with YARA/Sigma and LLM-backed systems, and experience with cloud, containers, and CI/CD.

Join STRIKE to own the path from threat research outputs to production artifacts (detections, distributed feeds, APIs). The role requires building and extending platform components (sandbox orchestration, ingestion, distribution, rules engines), producing detection content (YARA, Sigma, STIX), operating ML-backed workflows with eval harnesses and schema validation, and coordinating delivery with product and platform teams. Requires 5+ years engineering experience with threat intel or detection engineering and production experience with Python and TypeScript/Node.

Join STRIKE as the engineering counterpart to threat research, owning delivery from research outputs (malware findings, indicators, behavioral patterns) to production artifacts (detection rules, distributed feeds, schemas, APIs). Requires 5+ years hands-on engineering experience with threat intel systems, production use of Python and TypeScript/Node, cloud (AWS), STIX/TAXII knowledge, detection tooling (YARA, Sigma), and experience shipping systems that use language models.

Join STRIKE to own the path from threat research output to production artifacts (detection rules, distributed feeds, scoring inputs). The role requires hands-on engineering across platform components (ingestion, sandboxing, distribution), detection content (YARA, Sigma, STIX), applied language-model production systems, and cross-functional delivery with researchers and product teams.

Join STRIKE as the engineering counterpart to threat research, owning delivery from research outputs (malware findings, indicators, behavioral patterns) to production artifacts (detection rules, distributed feeds, schema-constrained outputs). Requires 5+ years engineering experience with threat intel or detection engineering, production experience with STIX/TAXII and detection tooling (YARA, Sigma), strong Python and TypeScript/Node skills, cloud and pipeline experience (AWS, containers, CI/CD), and experience shipping systems that use language models.

Join STRIKE as the engineering counterpart to threat researchers: own the pipeline from research output to production artifacts (detection rules, distributed feeds, scoring inputs, APIs). Build and maintain platform components (ingest, distribution, sandbox orchestration, agent runtimes), author detection content (YARA, Sigma, STIX), and deploy model-informed workflows with schema validation and evaluation harnesses. Requires 5+ years engineering experience with production threat-intel systems, production Python and TypeScript/Node skills, and working knowledge of STIX/TAXII/MISP/ATT&CK. No immigration sponsorship provided for this position.

Onsite mid-level Security Engineer role in Hermosillo, Mexico. Requires 3–5 years' experience in security operations, cloud security, and incident response with hands-on use of AWS, SIEM, CrowdStrike Falcon/EDR, IDS/IPS, Docker/Kubernetes, scripting (Python/Bash), and vulnerability management. Responsibilities include monitoring and responding to security alerts, incident investigations, log analysis, and collaborating with cross-functional teams.

Lead technical direction and implementation of Grafana’s authentication systems, owning large-scale, low-latency, multi-tenant services implemented primarily in Go. The role includes cross-team coordination, mentoring senior engineers, driving identity protocol standards, and representing Grafana at external events. Position is remote-first and explicitly available to candidates in the UK, Germany, Spain, Ireland, and Sweden.

Senior Software Development Engineer on the CTIO team responsible for designing and delivering core features of the CrowdStrike Falcon Host sensor for Windows. Role requires deep knowledge of C/C++, Windows OS internals and driver development, debugging memory corruption and performance issues, cross-platform collaboration (Windows/macOS/Linux), and experience working in Agile teams with distributed stakeholders.

Serve as the technical point of contact for enterprise accounts and account managers, architect solutions using the Elastic Stack, enable sales and partners, deliver demos and presentations at events, and convey customer feedback to engineering. Requires proven technical presales experience, strong customer and stakeholder engagement, and willingness to travel ~30% within region and occasionally internationally.

Lead and develop a team of four TPRM analysts to manage end-to-end vendor risk lifecycle (onboarding, assessment, reassessment, offboarding). Drive automation and AI integrations (ServiceNow TPRM), define and enforce cybersecurity vendor policies and controls aligned with frameworks (NIST, ISO 27001, SOC 2, FAIR), partner with procurement/legal/IT/security, support audits, and report KPIs to senior leadership. Requires 10+ years in TPRM/GRC or related risk disciplines and 3+ years of people management experience.

Responsible for end-to-end physical security including selecting and deploying cloud-based ACS and VMS, conducting site risk assessments and hardening, authoring emergency plans, leading tabletop exercises, and delivering executive protection/threat assessments. Requires 8+ years building corporate physical security programs and experience with SOC2/PCI-DSS/ISO 27001 physical controls.

Reddit is hiring a Senior Security Engineer (AI Security) to review and threat-model AI-powered features and agentic workflows, design detection and prevention controls (guardrails, scanners, sandboxes, policy checks), and build reusable security tooling. The role requires 5+ years of product/application/security engineering experience and hands-on work with backend services, security automation, cloud-native systems, and familiarity with AI/LLM risks.

Senior Manager responsible for expanding and operating GitLab's security certification portfolio (ISO 27001/17/18, ISO 42001, SOC 2, PCI, TiSAX, Cyber Essentials, FedRAMP), driving automation and AI-enabled compliance workflows (compliance-as-code, policy-as-code), overseeing audits and third-party assessors, and partnering with Security, Legal, IT, Product, and Engineering. Role requires US citizenship.

The Cybersecurity Operations Architect will drive architecture and strategy for cybersecurity operations, perform security architecture reviews, lead detection engineering and log pipeline design, and advance AI-augmented security operations. Requires 5+ years in security operations and multi-cloud platform experience (AWS, Azure, GCP, OCI) and 2+ years working with AI tooling. Posted salary range: 191,600–249,000 (annual).

Senior Product Security Engineer based in Brazil (CLT). Responsibilities include integrating and operating SAST, DAST, SCA, CNAPP and WAF tooling in CI/CD pipelines; building and maintaining security automation and agentic/LLM-assisted tooling; conducting vulnerability identification, triage, remediation and retesting; securing cloud-native applications (Docker, Kubernetes, public cloud); and partnering with engineering teams to embed security across the SDLC. Role expects 4+ years across security domains and hands-on experience with languages such as Python, .NET, or TypeScript.

The Detection and Response Manager oversees 24/7 SOC operations, incident response execution, SIEM detection tuning, threat intelligence integration, playbook/SOP maintenance, and readiness exercises. The role includes people management responsibilities (staffing, coaching, performance), coordination with internal and external stakeholders during incidents, and continuous improvement of detection and response capabilities. Position may be eligible for remote work in select geographic locations; base salary range $100,100–$223,080 per year.

Hands-on Red Team role focused on executing real-world adversary simulations, identifying and chaining high-impact vulnerabilities, and validating prevention, detection, and response capabilities. Collaborates with Detection & Response, Incident Response, and engineering teams; produces technical findings and remediation guidance; contributes to tooling and mentors junior engineers. Base salary range listed: $148,500–$223,900 per year.

The Falcon Complete Security Advisor assesses customers' Falcon environments against CrowdStrike standards, provides remediation recommendations, documents and resolves customer issues per SLAs, and partners with internal teams to troubleshoot technical issues. Requires 2+ years in a cybersecurity-focused role, experience with threat detection and incident response, proficiency with Windows/Linux/macOS, and relevant cybersecurity certifications.