Mozilla is hiring a Senior Security Engineer (SecOps) to monitor and mitigate attacks, act as incident commander, design alerts/playbooks/automations, conduct threat hunting, and manage threat-intelligence workflows. Requires 5+ years in incident response or SOC/PSIRT/CSIRT roles, strong SIEM (Splunk/ELK/BigQuery) and EDR experience, familiarity with SOAR (Tines, Splunk SOAR), cloud platform experience (GCP/AWS/Heroku/Azure), and participation in an on-call rotation.

Mozilla is hiring a Senior Security Engineer (Incident Responder) to identify and respond to security incidents at global scale, act as incident commander, build alerts/playbooks/automations, conduct threat hunting, and work on-cloud and endpoint telemetry. Requires 5+ years of relevant incident response/SOC experience and proficiency with SIEM (Splunk preferred), EDR, and SOAR platforms.

Puesto híbrido basado en Lima (Miraflores). Responsable de validar e implementar controles de seguridad, identificar brechas, coordinar planes de remediación, monitorear KPIs/KRIs, y participar en proyectos como pruebas de penetración, respuesta a incidentes, SOC y seguridad cloud. Requiere experiencia en gestión de vulnerabilidades, IAM, SIEM/SOAR, cloud (Azure/AWS/GCP), frameworks como NIST, y scripting básico.

Join Discord's Application Security team to design and ship full-stack, user-facing security solutions protecting user accounts. Responsibilities include strengthening session security and authentication, operating security-critical authentication services, partnering with product teams to deploy account security tools, researching new authentication capabilities, and building automation and security controls. Requires 5+ years securing production applications and 3+ years programming experience in languages such as Python, Go, Java, or Rust.

Seeking a Senior AI Security Engineer with 5+ years of experience in security engineering, application security, AI/ML engineering, or security architecture. Responsibilities include leading security reviews and mitigations for AI/LLM systems, assessing AI-specific risks (e.g., prompt injection, data exposure, model/data supply chain), building evaluation and automation tooling (Python), and working with modern AI stacks and at least one major cloud platform (AWS, GCP, or Azure). Familiarity with AI security/governance frameworks and experience in red teaming, production deployments, or security operations is preferred.

Oddball seeks a Security Engineer to work with DevSecOps to harden AWS cloud environments, automate CI/CD and IaC, manage and close POAM findings, conduct Security Impact Analyses, and support maintaining federal ATOs (FISMA/NIST 800-53). Role is fully remote and requires authorization to work in the United States.

Hands-on engineering role to implement tracing and explainability primitives for multi-agent LLM workflows, integrate and extend open-source observability/evaluation frameworks, build CI evaluation checks and red-team tests, and partner with product and security teams. Requires 3+ years' software engineering experience and production Python work; experience with LLM systems and cloud (Azure/AWS) is expected.

Truelogic seeks a Senior Data Scientist to join a client's core AI team to curate datasets, train and fine-tune transformer-based NLP models, develop NER and classifiers, and design evaluation pipelines for AI security (sensitive-data exposure, unsafe content, adversarial prompts). The role requires 4+ years' experience, strong Python and ML framework skills, and works remotely (position listed in Santo Domingo).

Hands-on Senior Data Scientist role on a core AI team building and fine-tuning transformer-based models and NER/classifiers for real-time risk detection in AI interactions. Responsibilities include dataset curation and augmentation, model training and evaluation, inference optimization, and moving models to production. Requires 4+ years of experience, strong Python skills, and experience with PyTorch/TensorFlow, Hugging Face, and NLP techniques.

The Home Depot is hiring a Senior Systems/Endpoint Security Engineer to develop, maintain, and support enterprise endpoint platforms (examples: Tanium, SCCM/MECM, Intune, BigFix) across Windows, macOS, and Linux. Responsibilities include automation, patch and software deployment, vulnerability remediation, monitoring, troubleshooting, on-call support, and partnering with architecture and security teams. Requires 3+ years of relevant engineering experience. Posted pay range: $120,000 - $160,000 per year (listed for specified U.S. locations).

Individual contributor role responsible for designing, building, testing, and operating cloud services and workflows that support Passport and authentication systems. Requires working with Go and Python, AWS and GCP services (e.g., Kinesis, DynamoDB, S3), and familiarity with containerization, CI/CD, observability, and security; minimum 2 years' software engineering experience.

CrowdStrike is hiring a Platform Professional Services Senior Consultant to lead customer engagements for deployment, configuration, optimization, and operational support of the CrowdStrike Falcon platform and related applications. Responsibilities include technical implementation, troubleshooting, scripting using Falcon APIs, integrating CrowdStrike with customer tools, supporting Incident Response and Compromise Assessment teams, and delivering workshops. Role is remote for US candidates, may require up to 25% travel, and lists a U.S. base salary range of $100,000–$155,000 per year.

Lead the FedRAMP Moderate authorization end-to-end: maintain and defend the SSP, run continuous monitoring and annual 3PAO assessments, manage POA&M lifecycle, coordinate remediation with engineering, automate evidence collection and reporting (including AI-assisted workflows), and serve as primary federal point of contact. Requires 5+ years in information security with at least 3 years in a dedicated FedRAMP ISSO/ISSE role and strong familiarity with NIST SP 800-53 Rev 5. Remote (US-based).

Remote‑US role to serve as Cribl’s appointed FSO of record with DCSA: manage FCL sponsorship and NISS, oversee cleared personnel in DISS/NBIS, guide eApp processing, deliver required briefings, maintain DD Form 254s, conduct self-inspections and prepare for DCSA reviews, and partner with cross-functional teams on facility and compliance controls. Requires U.S. citizenship and an active Secret clearance (ability to obtain Top Secret) and 7+ years of industrial- or personnel-security experience including 3+ years as an appointed FSO or Assistant FSO.

Join the Proactive Threat team to simulate adversary TTPs, conduct penetration tests across web, API, mobile, cloud (AWS/GCP/Azure), and internal infrastructure, lead red team operations, collaborate with detection and incident response teams, and design automation and tooling. Minimum 5+ years in offensive security or related fields and strong programming skills (Python, Go) required.

Owner of the post-sales customer journey for an automated compliance platform, responsible for onboarding, implementation, adoption, audit readiness, and customer health. Requires hands-on GRC/security compliance experience and customer-facing SaaS implementation experience, with familiarity in frameworks such as SOC 2, ISO 27001, HIPAA, and GDPR.

Join GitLab as a Staff Product Security Architect within Security Platforms and Architecture to lead security architecture and design for strategic initiatives, act as Security Owner for high-priority risks, build prototypes, codify reusable security artifacts, conduct architecture reviews, and mentor engineers. Role is remote and listed locations include Canada, Israel, Poland, United Kingdom, and United States. A US base salary range is provided for residents of the United States.

The role focuses on building automated discovery and lifecycle workflows for non-human identities (service accounts, API tokens, cloud roles, CI/CD identities, AI agents), integrating with IAM/PAM, secrets management, PKI, and ITSM platforms, and supporting threat detection and incident response. Minimum 3 years' experience; candidate must be legally permitted to work in the United States. Pay range listed: $120,000–$160,000 (annual, per posting for specified US locations).

The role involves triaging incoming bug bounty and vulnerability reports, validating findings, assessing severity (CVE/CVSS/CWE/OWASP), coordinating with PSIRT engineers and product teams, preparing CVE-related information, and drafting customer-facing communications. The position is remote across North America with preference for Pacific Time coverage and is suited to early-career candidates with foundational security knowledge and bug bounty or vulnerability-disclosure experience.

Responsible for operating the risk register and posture engine (register, evidence, audit ops) using Drata; running critical control monitoring and automation; coordinating ISO 27001 and SOC 2 audits, customer questionnaires, and external testing (red team, pentest); maintaining ISMS and security policy library; and reporting residual risk and exceptions. Qualifications call for hands-on GRC experience, audit coordination, strong written work, stakeholder management, and certifications such as CISA or ISO 27001 Lead Implementer/Auditor. Applications from France, Italy, and Germany are excluded. US pay range: $150,000–$206,000 USD (year).