Lead multiple CMMC readiness and certification assessments end-to-end: own scope, budget, staffing, and delivery; review SSPs, POA&Ms, policies, configurations, and evidence against NIST SP 800-171/171A; advise executives on CUI/FCI scoping and remediation timelines; supervise and develop consultants; support business development and practice growth. Requires Bachelor's degree, 7-10 years relevant experience (minimum 7 years), CCP certification required, U.S. citizenship required.

Remote US-based Senior IAM/Identity Infrastructure Operations Engineer for CrowdStrike. Responsible for managing identity provider operations and application lifecycle in GovCloud (US-Gov-1/US-Gov-2), ensuring FedRAMP/DoD compliance, implementing security controls, automating repetitive tasks, developing monitoring/alerting, and providing tier 2/3 support including participation in on-call rotation. Requires 6+ years' relevant experience (Master's with 6-7 years or Bachelor's with 8-11 years). Salary range for US candidates: $125,000 - $180,000 per year.

Proofpoint seeks a Senior SOC Engineer to monitor and adjust detection systems, analyze threats, develop automation and tooling, and collaborate with engineering, support and technical teams. Required: ~5 years in anti-abuse/email deliverability/threat/security research, experience with email/mobile/DNS/messaging technologies, proficiency with Shell and Go (Perl/Python acceptable), SIEM tools (Splunk/Kibana), SQL, and strong English communication.

Join Missionforce Professional Services as an Integration Solution Architect to design and govern complex MuleSoft integration projects, define API-led connectivity and enterprise integration best practices, establish DevOps/CI-CD pipelines, and mentor delivery teams. Role requires 10+ years of IT experience (5+ years leading integration/solution architecture), hands-on MuleSoft experience, expertise in API lifecycle management, and U.S. citizenship (background investigation/security clearance required).

Manage and grow a Platform Security engineering team responsible for cloud security baselines, vulnerability management, software supply-chain protection, CI/CD security, and identity & access systems. Requires 3+ years managing engineers, experience securing large-scale systems, cloud experience (GCP, AWS, Cloudflare), programming experience (Python, Typescript, Rust). US base salary range $248,000–$310,000.

Invicti seeks a Staff Security Researcher (Europe-remote) to create and maintain detection rules (primarily OpenGrep), research novel vulnerabilities and malware (including AI/LLM attack vectors), extend language support in the analysis pipeline, build evaluation harnesses and benchmarks, triage findings, and mentor junior researchers. Requires 8+ years of offensive or application security research experience, strong JavaScript (required) and Python (preferred) skills, deep web-app pentesting and detection-writing experience, and familiarity with cloud-native platforms and CI/CD security.

Hands-on offensive security researcher role focused on building and maintaining DAST detection rules and detection engineering for web apps and APIs. Requires 5+ years in offensive/application security research, strong JavaScript (Python preferred), web pentesting experience (OWASP Top 10), familiarity with detection tools and CI/CD/cloud environments, and fluent English. Open to candidates residing anywhere in Europe (CET ±2).

Execute deep, manual and automated penetration tests across web apps, APIs, cloud/hybrid infrastructure (Kubernetes, Docker), identity/trust boundaries, and AI/LLM systems (including prompt injection). Scope engagements, perform exploitation and risk assessment, produce technical reports with remediation guidance, and collaborate with engineering, AppSec, and Detection & Response teams. Requires 2+ years of relevant experience.

Owner of the end-to-end security policy and standards lifecycle: drafting, review, approval, publication, attestation, exception management, and retirement. Monitor and map regulations and frameworks (e.g., EU AI Act, NIST AI RMF, SOC 2, ISO 27001/42001, FedRAMP, NIST CSF), drive measurements and remediation, support audits and customer requests, and implement automation/AI and Policy as Code. Requires 10+ years in security governance/GRC/IT risk and hands-on experience applying compliance frameworks in cloud/SaaS/DevSecOps environments.

Responsible for entity-level ICT security governance, risk assessments, control testing, business impact analyses, business continuity planning, incident response, audit preparation, and liaising with regulators (including VARA). Requires 7+ years' experience in information security governance, ICT risk management, or regulatory compliance in regulated financial services/virtual asset environments.

Role based in Luxembourg reporting to local Authorised Management and functionally to Tide's Chief Data and Technology Officer. Owns TPSA's ICT strategy and project roadmap, acts as service owner for the intra-group arrangement with Tide Platform Ltd, directs the outsourcing lifecycle across a third‑party estate, ensures DORA obligations are met (asset/classification, incident management, resilience testing, exit planning), sets first-line ICT security requirements (including AI governance), and leads ICT reporting and audits with the CSSF.

GitLab is hiring a Senior Security Risk Engineer (remote in Canada and the United States) to own third-party risk, security risk assessments, and remediation tracking. The role requires building and maintaining a risk register, driving remediation to closure, and creating automation and AI-enabled tooling (including AI risk management and assessments) to improve GRC workflows. Requires 5+ years in security risk management with experience in frameworks such as NIST RMF, NIST 800-39, or ISO 31000.

NVIDIA is hiring a Security Engineer for GPU system software to own vulnerability backlog, lead continuous security scanning/triage/remediation across kernel and firmware components, perform root-cause analysis, drive security reviews, and evaluate/develop security tooling (static analysis, dynamic analysis, fuzzing). Requires 5+ years industry software engineering experience, strong C and low-level driver experience, and knowledge of OS and computer architecture. Base salary ranges provided: 152,000–241,500 USD (Level 3) and 184,000–287,500 USD (Level 4).

Senior consulting architect role responsible for assessing customer requirements, designing Elastic-based observability/security solutions, implementing migrations/upgrades, performing technical audits and capacity planning, collaborating with engineering/product/sales, and mentoring consultants. Requires ~5+ years in consulting architecture or senior IT leadership and hands-on experience with Elastic or similar observability/APM tools and cloud/on-prem platforms.

Mozilla seeks a Senior Security Engineer (Incident Responder) to monitor and mitigate attacks across products and services. Responsibilities include incident command, designing alerts/playbooks/automation, threat hunting, and managing SIEM/EDR/SOAR tooling. Requires 5+ years of incident response or SOC/PSIRT/CSIRT experience and hands-on experience with SIEM (Splunk/ELK/BigQuery), EDR, SOAR (Tines/Splunk SOAR), and cloud platforms. Hiring range for Remote Spain: €58,000–€77,000 per year.

Mozilla is hiring a Senior Security Engineer (Incident Responder) to monitor and mitigate attacks across products and services. Responsibilities include leading incident response lifecycle as incident commander, designing alerts/playbooks/automation for 24/7 response, threat hunting, triage, and post-mortem activities. Requires 5+ years in security incident management or SOC/PSIRT/CSIRT experience and practical expertise with SIEM (e.g., Splunk, ELK, BigQuery), EDR tools, SOAR platforms (e.g., Tines, Splunk SOAR), and cloud environments (GCP, AWS, Azure, Heroku).

Monitor and mitigate security incidents across Mozilla products; act as incident commander, design and maintain alerts/playbooks/automation, conduct threat hunting and threat intelligence triage, and participate in on-call rotation. Requires 5+ years managing security incidents or SOC/PSIRT/CSIRT experience and expertise with SIEM (Splunk/ELK/BigQuery), EDR, SOAR (Tines/Splunk SOAR), and cloud platforms (GCP/AWS/Azure).

Mozilla is hiring a Senior Security Engineer (Incident Responder) to identify and respond to security incidents at scale, act as incident commander, design and maintain alerts, automated actions, playbooks and escalation workflows, conduct threat hunting, triage threat intelligence, and participate in a 24/7 on-call rotation. Required experience includes 5+ years in incident management or SOC/PSIRT/CSIRT roles and proficiency with SIEM (Splunk preferred), EDR, SOAR platforms, and cloud platforms (GCP, AWS, Azure, Heroku).

Mozilla is hiring a Senior Security Engineer / Incident Responder to monitor and mitigate attacks across Mozilla products and services. Responsibilities include acting as incident commander, maintaining alerts, automation, playbooks and escalation workflows, conducting threat hunting, triaging threat intelligence, and participating in a 24/7 on-call rotation. Requires 5+ years experience in incident management/SOC roles and proficiency with SIEM (Splunk preferred), EDR, SOAR, and cloud platforms. Salary range for Remote Sweden provided in posting.

Mozilla is hiring a Senior Security Engineer (SecOps) to monitor and mitigate security incidents, act as incident commander, develop alerts/automation/playbooks, conduct threat hunting and threat intelligence, and partner with stakeholders. Requires 5+ years of incident management or SOC/PSIRT/CSIRT experience and hands-on expertise with SIEM (e.g., Splunk, ELK, BigQuery), EDR, SOAR platforms, and cloud environments (GCP, AWS, Azure, Heroku).