Twilio is hiring an Emerging Fraud Researcher to identify novel fraud behaviors on its communications network (voice, messaging, email) using AI tools and large-scale data analysis. Responsibilities include researching emerging fraud trends, collaborating with data scientists to build detection models, stress testing the network, conducting investigations and root cause analysis, and developing proactive mitigation strategies. Role is remote within the US (not eligible in CA, CT, NJ, NY, PA, WA), may require occasional travel, and lists annual pay ranges that vary by location.

CrowdStrike seeks a Senior Analyst on the Platform Professional Services (Gold Standard) team to perform incident handling, malware and forensic analysis, remediation, and to develop security content and automations across CrowdStrike modules. The role involves working across Windows, Mac, and Linux, using EDR/SIEM and related tools, providing customer-facing consulting, and contributing thought leadership.

Join DigitalOcean's Secure Design team to perform threat modeling and security risk assessments, provide remediation guidance, mentor engineering teams, and build automation and tooling to scale product security practices. The role focuses on secure architecture across infrastructure, application, people, and process.

Join DigitalOcean's Secure Design team to perform threat models and security risk assessments, provide hands-on remediation guidance, cultivate a security culture, build security tooling and automation, and collaborate with product and security teams. Preferred experience includes guiding secure architecture design, threat modeling, and knowledge of supply chain security and languages like Go, JavaScript, Rust, or C.

Join Elastic's Prism team to design and implement reliable, performant systems that turn security data into a trustworthy picture of users, hosts, and services. Responsibilities include end-to-end ownership of small-to-medium projects, data modeling, background tasks, APIs, profiling and optimizing queries, writing TypeScript/React and Node.js code, building telemetry and tests, and collaborating across Elastic Security, Kibana, and Elasticsearch teams. Typical starting salary range: €87,300–€138,100 EUR per year.

Join the Prism team to design and deliver scalable, performant systems that transform security data into entities and risk signals. Responsibilities include owning projects end-to-end (data modeling, background tasks, APIs), optimizing queries and performance, writing TypeScript/React and Node.js services, building telemetry and tests, and collaborating with product, design, and other Elastic teams. Experience with Elasticsearch, Kibana, SIEM/UEBA, and AI-assisted development is noted as a bonus.

Lead technical work on the Prism team to design, implement, and operate systems that convert security data into reliable entity views and risk scores. Responsibilities include data modeling, background tasks, APIs, performance profiling and optimization, writing TypeScript/React and Node.js code, building telemetry and tests, and collaborating across Elastic Security, Kibana, and Elasticsearch teams.

Join the Prism team to design and ship scalable, correct, and performant systems that turn security data into a trustworthy picture of users, hosts, and services. Responsibilities include data modeling, background tasks, APIs, performance optimization, telemetry and tests. Required: several years building production software and strong TypeScript/JavaScript skills (React, Node.js). Familiarity with Kibana, Elasticsearch, SIEM/UEBA, and performance profiling are listed as bonuses.

CrowdStrike seeks a junior technical analyst to detect, contain, and remediate incidents across Windows, macOS, and Linux in a virtual SOC. Responsibilities include incident handling, forensic and malware analysis, network log analysis, remediation planning, scripting/programming, and producing written and verbal reports. Role is US-only (citizens and green card holders), hybrid in St. Louis with a 4x10 schedule including weekend coverage.

CrowdStrike seeks a Senior Intrusion Analyst for its OverWatch team (West region, PST availability) to perform endpoint- and cloud-focused intrusion analysis, threat hunting, and incident investigation using Falcon data and logging platforms (LogScale, Splunk, Kibana). The role involves communicating findings to customers, conducting research to improve detections, and collaborating with internal teams. Requires experience in endpoint security, operating systems, logging/querying, and practical knowledge of current threats; bachelor's degree or equivalent experience.

Lead engineering of Chainguard's shared malware scanning platform: scan orchestration, verdict storage, APIs, and production operations. Collaborate with Product Security to turn threat research into production detections, scale static and AI-assisted analysis across artifacts, and build measurement, feedback, and customer-facing APIs. Strong Go/backend experience and production ownership expected.

Responsible for the architecture, scale, and reliability of Chainguard's malware scanner platform (scan orchestration, verdict storage, APIs). Partner with Product Security to productionize detections, build measurement and feedback pipelines, operate the scanner in production, and deliver customer-facing APIs for investigation and policy management. Role emphasizes backend and production-infrastructure experience (strong Go or equivalent), high-throughput event-driven systems, observability, and operational ownership.

Hiring a senior engineering leader to build and run Infrastructure Security Engineering for EDA clusters, translating enterprise security intent into scalable controls for large, long‑running, performance‑sensitive workloads. Requires 12+ years building and operating production infrastructure (networks, compute clusters, storage) with 5+ years managing engineering teams, deep networking and hyperscaler experience, and hands‑on experience securing performance‑sensitive environments.

Contract role at 66degrees responsible for AI/ML security operations, incident response, playbook development, detection engineering, and AI governance. Tasks include securing generative AI systems and LLMs, developing mitigations for prompt injection, model poisoning, data exfiltration, and adversarial attacks, and collaborating with IT and AI/ML teams. Employer cannot sponsor or transfer visas.

Hands-on offensive security researcher role responsible for creating detection rules (primarily OpenGrep), researching new vulnerability and malware classes, building proof-of-concept attacks, designing evaluation harnesses and benchmarks, and collaborating with engineering and platform teams to ship and maintain detection capabilities. Requires 8+ years of offensive/application security research experience, strong JavaScript knowledge (Python a plus), deep web app pentesting and detection-writing experience, and familiarity with cloud-native platforms and CI/CD security. Role is based in the United States with a hybrid schedule (twice weekly in the Austin office).

Join CrowdStrike's Intelligence Automation team to design, prototype, implement, deploy and maintain large-scale distributed systems that support intelligence analysts and researchers. Responsibilities include building processing pipelines, data storage and presentation layers, maintaining new and legacy systems, gathering requirements from internal customers, and operating production services. Technologies referenced include Go, Python, Linux, containers, SQL/NoSQL databases, cloud platforms (AWS/GCP) and AI tooling. Role is remote with distributed team collaboration expected.

Join CrowdStrike's OverWatch team as a remote Intrusion Analyst based in the United Kingdom. Responsibilities include hunting and analyzing intrusions using Falcon endpoint telemetry and other CrowdStrike products, leveraging network/host intrusion analysis, digital forensics and cyber threat intelligence, researching detections, and communicating findings to customers. Required experience includes demonstrated intrusion analysis, forensics or threat intelligence work, endpoint telemetry usage, understanding of nation-state TTPs, OS expertise, and experience applying AI technologies to improve workflows.

Chess.com is hiring a remote Security Engineer to lead vulnerability management (including Bug Bounty triage), conduct threat modeling, manage incident response, review pentest and SIEM findings, tune WAF and security systems, evaluate security tools, and advise engineering teams. Requires a minimum of 3+ years of professional web application security experience and strong written English communication.

As Risk Manager (UK - Remote), you will run and improve the information security risk management lifecycle, maintain risk registers and treatment plans, define risk appetite and KRIs, coordinate audit and customer assurance inputs, oversee third-party risk, and drive governance, reporting, and remediation tracking across the organisation.

Swimlane is hiring a Senior Security Solutions Engineer in India to translate SOC and MSP operating models into customer-agnostic Turbine playbooks, components, apps, and dashboards for the Swimlane Marketplace. The role requires 7+ years in software development, solutions architecture, or security automation with hands-on SOC or MSP/MSSP workflow experience, proficiency in Python and JavaScript, JSON/API integrations, and prior work on SOAR platforms. Responsibilities include data normalization (OCSF/TEDS), connector and API integrations across SIEM/EDR/identity/ticketing/cloud tools, packaging/versioning content, and owning docs and tests.