GitHub is hiring a Staff Software Engineer for its Identity Core team to design, implement, and support enterprise-focused identity and authorization services. The role requires technical leadership, large-scale system architecture experience (distributed systems/microservices/cloud), hands-on software development across several languages, on-call participation, and collaboration with cross-functional partners.

This SkillBridge (DoD CSP) Internship is a full-time, fixed-term position for members of the U.S. Armed Forces within their final 180 days of active duty. The Intelligence Analyst will support Falcon Intel Recon customers by triaging findings, guiding customers on intel, serving as an interface to CrowdStrike intelligence and engineering teams, and driving process improvements. The role emphasizes cyber threat intelligence, dark/deep web knowledge, customer-facing communication, and use of AI and APIs to enhance intelligence delivery.

Conduct cloud-focused Red Team/Blue Team (CRTBT) engagements including adversary emulation against customer environments, collaborate with customers and CrowdStrike Blue teams for threat hunting and incident response, manage engagements from kickoff through report delivery, and develop automation and tooling to support operations. Requires 5+ years in cybersecurity, 2–3 years in red team consulting or MSSP roles, cloud platform experience (AWS, Azure, GCP, Microsoft Entra ID/M365), scripting/automation skills, and client-facing consulting experience.

Work on designing and implementing robust, high-performance Rust services and libraries powering trading, payments, and crypto integrations. Collaborate on distributed systems architecture, apply technologies like RPC and Kafka, prioritize security and reliability, and take end-to-end ownership of revenue-critical systems. Requires 3+ years of software engineering experience and proficiency in asynchronous/networked Rust development.

Lead the Security Lab's developer advocacy strategy to engage security researchers, open source maintainers, and enterprise developers. Produce technical content (blog posts, tutorials, talks, CTFs), represent the Lab at conferences, and influence product teams on security tooling such as CodeQL, Dependabot, secret scanning, and AI-assisted vulnerability detection.

Join the Security Architecture (InfoSec) team to own end-to-end security telemetry ingestion into Elasticsearch (cloud audit logs, identity/SaaS activity, endpoint/asset data), operate Elastic on Kubernetes (ECK), manage clusters, ILM, CCS and capacity, implement infrastructure as code with Terraform, deploy jobs with Kubernetes/Helm, build Python ingestion scripts, and use AI automation to reduce toil. Eligibility for DoD IL4+ cloud environments is required.

Remote Senior Manager, GRC responsible for maturing Virta's information security compliance program, scaling GRC automation (Vanta), managing HIPAA/HITRUST/SOC 2 frameworks, coordinating audits, supporting Sales on RFPs and security questionnaires, running vendor risk and policy governance, and delivering security awareness and training. Requires 7+ years in Cybersecurity GRC/IT auditing with 2+ years leading programs or teams in regulated environments.

CrowdStrike is hiring an Analyst I for the Falcon Complete team to detect, respond to, and remediate incidents across Windows, Mac, and Linux platforms. Responsibilities include malware analysis, forensic and network analysis, developing detection and countermeasure processes, and producing customer-facing communications. This Canadian-based role expects a 4x10 schedule (including one weekend day), hybrid work on site, and offers a stated Canadian base salary range of CAD 90,000–135,000 per year.

Extreme Networks seeks a Senior Product Manager to define the architecture, governance, and roadmap for Identity & Access Management across Extreme Platform ONE. The role requires ownership of identity architecture and governance, agent-enabled identity models, enterprise identity capabilities (provisioning, token lifecycle, audit trails, API scoping), cross-functional coordination, and customer discovery. Required: 7+ years in product management for enterprise SaaS/platforms, deep IAM expertise (OAuth2, SAML, OIDC, RBAC/ABAC), and experience with security/compliance frameworks.

Seek a Senior IT Engineer for the Device Infrastructure Services team to lead large-scale device infrastructure projects, manage cloud-based Apple MDM (Iru), apply IaC and CI/CD to device management, design automation (including LLM/agentic components), implement device trust and endpoint compliance, run third-party patching workflows, and participate in on-call rotations. Requires 5+ years technical IT experience with 2+ years in IT engineering/systems administration focused on cloud-first endpoint management.

Work as a senior security expert on endpoint products to perform source code review, threat modeling, kernel and application security testing, validate bug bounty reports, build automation/tools, and collaborate with product engineers. Requires 10+ years engineering experience and expertise in Linux, C/C++, system internals and related security practices.

Work as a senior application security engineer on product teams to find and fix design and implementation flaws, create and maintain threat models (including STRIDE), perform manual secure code reviews for Go, Python, and JavaScript/TypeScript apps, test API and browser security, build automation and tooling, and respond to bug bounty findings. Requires 10+ years in cybersecurity and experience with cloud and container environments (GCP, Azure, AWS) and commercial AppSec tool suites (SAST/DAST/CSPM/DSPM/ASPM).

CrowdStrike seeks an Application Security Engineer to join the Product Security team to find and fix security defects in web and cloud-native applications. Responsibilities include threat modeling (STRIDE), code review for Go/Python/Java apps, AppSec tooling (SAST/DAST/CSPM/DSPM/ASPM), responding to bug bounty reports, and building automation and tooling. Base salary range for U.S. candidates: $120,000 - $180,000 per year.

Join CrowdStrike OverWatch FedCloud as a Threat Hunter III to conduct proactive and active threat hunting across government cloud environments, analyze sophisticated adversary activity, develop detections, and contribute to threat intelligence and detection engineering. Role is 100% remote within the United States, requires strong English, experience with host/network intrusion analysis, digital forensics, malware analysis, familiarity with Windows/MacOS/Linux, programming/scripting (Python or Go), MITRE ATT&CK, and willingness to undergo government background checks and fingerprinting. Night shift schedule (Sat–Tue, 23:00–09:00 ET).

Playlist is hiring a Manager, Technical Program Management (Cyber Security) to lead and grow a team of Security and IT technical program managers, own the cyber and IT program portfolio, and establish operating rhythms for intake, prioritization, resourcing, and reporting. The role requires 6+ years in program management (including 2+ years managing people), experience running security or IT programs, strong technical aptitude, and familiarity with information security frameworks such as NIST, PCI-DSS, or HITRUST. Compensation range in the United States is listed as $131,000 to $175,000 base salary.

CrowdStrike Services is hiring a Platform Associate Resident Consultant to plan, deploy, configure and support the CrowdStrike Falcon platform and related integrations for customer environments. Responsibilities include customer technical advisory, implementation, troubleshooting, scripting with Falcon APIs, supporting incident response/forensics, and helping operationalize Falcon modules. Role is remote (US), may travel up to 25%, and lists a U.S. salary range of $70,000–$95,000/year.

Architect, design, and implement Okta IAM solutions including SSO, MFA, provisioning (SCIM/JIT), Okta Workflows, REST APIs and Terraform. Requires 5+ years IT experience, 3+ years Okta experience, and current residence in US Central Time. Typical starting salary range $94,300–$149,200 USD/year.

This Principal role on the Threat Research and Detection Engineering team involves designing and executing security tests for GenAI/LLM-backed products, investigating emerging multi-domain threat vectors, and producing detection content. The position requires hands-on experience with LLM tools and telemetry, detection engineering, threat research, and familiarity with Elastic Security and query languages (EQL/KQL/ESQL) is a plus.

Wikimedia Foundation seeks a Software Engineer III to develop and maintain tools for detecting and mitigating abuse across Wikimedia projects. The mostly-remote role prefers candidates in UTC–UTC+3, requires 1+ years' professional experience, and emphasizes PHP/JavaScript, relational databases, security principles, observability, and collaboration with product, design, and research teams. The listing includes a US salary range and lists multiple countries where hiring is currently supported.

Join Tide's Product Security Remediation Operations to validate and prioritise findings from tools (Wiz, Semgrep, CrowdStrike, EASM), automate remediation workflows in Seemplicity, verify fixes, build dashboards/reports, and work with engineering and IT teams to reduce risk and improve remediation SLAs. Role based in India (Delhi NCR) within a flexible working model.