Staff-level GRC role responsible for advancing the Information Security Management System (ISMS), supporting ISO 27001 and SOC 2 Type 2 audits (scope, evidence, interviews, findings), driving security policy creation and review cycles, tracking remediation, and partnering with engineering, legal, privacy, and other teams. Requires ~5 years of information security/GRC experience and hands-on involvement with ISO 27001 and SOC 2.

Staff-level Security GRC Engineer responsible for ISMS maintenance (SoA, risk treatment plans, MRMs), supporting ISO 27001 and SOC 2 Type 2 audit execution and readiness, leading security policy program, tracking remediation, partnering with engineering, legal, privacy and product teams, and advising security leadership. Requires ~5 years in information security/GRC and hands-on ISO 27001 and SOC 2 experience.

Role in Mozilla's Governance, Risk & Compliance team to maintain the ISMS (SoA, risk treatment plans, management review), support ISO 27001 and SOC 2 Type 2 audits (scope, evidence, auditor interviews), lead policy program, track remediation, and partner with Engineering, IT, Legal, Privacy and People. Requires ~5 years' experience in information security/GRC and hands-on ISO 27001 and SOC 2 involvement.

Responsible for maintaining and maturing Mozilla's ISMS (SoA, risk treatment, Management Review), supporting ISO 27001 and SOC 2 Type 2 audit execution and readiness, leading the security policy program, tracking gaps and remediation, and partnering across Engineering, Legal, Privacy, People and product teams. Role requires ~5 years' experience in information security/GRC with hands-on involvement in ISO 27001 and SOC 2 audits.

Role within Mozilla's Governance, Risk & Compliance function to maintain and advance the ISMS (SoA, risk treatment plans, MRM), support ISO 27001 and SOC 2 Type 2 audits, lead policy creation and review cycles, track remediation, and partner with engineering, IT, legal, privacy and product teams. Requires ~5 years' experience in information security/GRC, deep familiarity with ISO 27001 and SOC 2, policy authorship, audit readiness and cross-functional collaboration.

Role within Mozilla's Security GRC function to maintain the ISMS (SoA, risk treatment plans, Management Review Meetings), support ISO 27001 and SOC 2 Type 2 audits (scope, evidence, auditor interactions), lead policy creation and review cycles, track gaps and remediation, support internal audits, and partner with engineering, legal, privacy, and product teams. Requires ~5 years of information security/GRC/compliance experience and deep familiarity with ISO 27001 and SOC 2.

Senior IT Systems/Platform Engineer role focused on building code-first automation and operating Zyte's internal SaaS ecosystem (CRM, billing, support, collaboration, HR, engineering tools). Responsibilities include scripting (Python/Go/Bash/Node), API-driven integrations (REST/GraphQL/OAuth/webhooks), cloud operations (GCP/AWS), identity and security (SSO/SAML/SCIM, MDM, Zero Trust), introducing AI/LLM workflows, and supporting compliance (ISO 27001, SOC2, GDPR). Remote, worldwide.

Lead a globally distributed engineering team responsible for endpoint visibility, prevention, and on-device ML in Elastic Defend. Role requires hands-on background in OS internals, reverse engineering, and malware analysis, plus experience mentoring senior engineers, owning roadmaps, directing ML model work, and representing the team externally (research, talks, customer engagement).

Remote (United States) role reporting to the CISO to build and operate detection and response capabilities. Responsibilities include incident investigation and containment, forensic analysis, hypothesis-driven threat hunts, reviewing MSSP/MDR escalations, improving detection coverage, and maintaining operational runbooks. Requires 7+ years in cybersecurity operations/incident response with hands-on experience in cloud and endpoint tooling.

Lead Vulnerability Commander at Salesforce responsible for responding to the most critical vulnerabilities across Commercial and GovCloud environments. Role duties include engaging engineering owners to drive fixes to closure (with 24-hour expectations), tracking SLA adherence, escalating risks to leadership, running retrospectives to prevent recurrence, partnering with Threat Intelligence and Product Security, and building playbooks and automation. Requires U.S. citizenship and 8+ years of relevant experience.

Lead the Abuse Research Group (threat intelligence analysts, fraud researchers, detection engineers) at Stripe: set and execute the research agenda across threat actor tracking, fraud investigation, merchant ecosystem defense, and detection pipelines; operationalize findings into production detection rules and automated responses; coordinate with Risk, Trust & Safety, Fraud Platform, Security Engineering and external stakeholders; hire, coach, and develop technical team members. Minimum 10+ years leading security/research teams.

Lead a team of four across application security, IT operations, and compliance to define strategy, run SOC 2 Type 2 audit cycles, embed security-by-default practices, scale IT for a globally distributed remote company, and represent security and compliance to enterprise customers and leadership. Requires 7+ years in security/IT/GRC and at least 3 years managing teams.

Fastly is hiring a Senior Security Technical Account Manager (TAM) to support enterprise customers across North America. The role is remote in the US, requires 8+ years in customer-facing technical roles, and focuses on application and web security (WAF, bot mitigation, DDoS, API security), networking fundamentals (HTTP, DNS, TLS, BGP), cloud/CDN environments, automation/scripting, and cross-functional advocacy to drive security outcomes and escalations. Occasional travel is expected.

NVIDIA is hiring a Senior Software Engineer to develop and operate the Unified Access Management (UAM) platform, a policy-as-code system enforcing access control across cloud services. The role involves designing, coding, deploying features, integrating UAM with other services, and participating in on-call support. Required: BS/MS or equivalent, and 5+ years' experience (noted in ML/AI areas), with expert knowledge of AWS, Kubernetes, and GitOps and familiarity with ACL/RBAC/ABAC authorization strategies.

The Cybersecurity Analyst II (Secure Solutions Enablement) will track and drive remediation of security findings, monitor compliance across security controls (including cloud and application security), host capability reviews with product teams, and deliver regular metrics and reports to leadership. Requires 2+ years of cybersecurity/IT risk or IT compliance experience and strong verbal and written communication; role is remote (Texas virtual) and the posted pay range is $90,000–$130,000 for specified US locations.

Lead design, implementation, and operation of foundational authentication and authorization capabilities (OAuth, OpenID Connect, JWTs, sessions, 2FA, passkeys, device-aware auth). Build and run low-latency Go/gRPC services with strong observability and SLOs, partner with product/security/fraud/infrastructure, and mentor engineers. Requires 8+ years backend experience. Annual base salary range: $218,025–$256,500 USD.

Join the Emerging Threats and Security Validation team to research and analyse malware across the attack lifecycle, reverse engineer malicious files and exploits, validate and improve detection coverage, and partner with engineering, threat research, red team and ML teams to translate findings into product improvements. Requires a Bachelor's/Master's in Computer Science or related field and 4+ years of threat research/malware analysis experience.

Remote Staff Engineer role responsible for designing and building scalable automation and reliability pipelines for KernelCare (live Linux kernel patching). Requires strong Linux background, backend Python experience, comfort reading C, system design, production-grade implementation and ongoing ownership of product components. Role combines ~70% engineering and ~30% technical product ownership and expects regular use of AI-assisted development tools.

Encora is hiring a Cybersecurity Engineer in Singapore. Requires at least 5 years of relevant cybersecurity experience and hands-on experience with tools such as Tenable Nessus, Prisma Cloud, SonarQube, and NexusIQ. Responsibilities/competencies include security testing (penetration testing, source code review, vulnerability scanning), vulnerability management and risk assessment, secure coding and remediation, and familiarity with OWASP Top 10 and CI/CD/DevSecOps concepts. Relevant certifications (CISSP, CCSP, CRT, OSCP) are listed as advantageous.

Lead and mentor a team of analysts, scientists, and researchers focused on identifying abuse vectors and adversarial patterns, define a strategic research roadmap, collaborate with ML and cross-functional partners to drive automated countermeasures, and improve incident response and operational automation. Requires Trust & Safety experience and fluency in SQL and/or Python.