Lead Sysdig's assurance function from a technical, customer-facing perspective. Own ISO 27001/27701 and SOC 2 Type II certification lifecycle, design and implement continuous controls monitoring and control automation, build AI assurance aligned to ISO 42001/NIST AI RMF/EU AI Act, manage high-consequence customer engagements and third-party AI risk, and enable field teams to answer security questions without escalation.

Senior leadership role to run Sysdig Threat Research end-to-end: set the AI security research agenda, lead a small hands-on team of researchers and engineers, own detection content and the detection platform, publish original research (CVE, campaigns, talks), and partner with Product and Marketing. Requires 10+ years in security research/detection engineering, published AI security work, hands-on tooling and analysis, and deep knowledge of Linux, containers, Kubernetes, and cloud internals.

Own and operate core identity and authorization systems protecting Replit's web product, Agent, enterprise controls, and internal services. Responsibilities include designing authorization interfaces and policy, operating Security Token Service and workload identity (OAuth token exchange, JWT/OIDC, SPIFFE/SPIRE, mTLS), threat-modeling delegation and cross-tenant risks, leading migrations and SLO ownership, and partnering with product and infra teams. Tech stack examples: TypeScript, Go, Rust, Postgres, gRPC/Protobuf, Kubernetes, Envoy.

Seeking a CyberArk Architect to design and lead an enterprise-scale Privileged Access Management migration and merger consolidation (vault migration v12.2→v14.2), identity federation (Entra ID via SAML/OIDC), and large-scale application onboarding (250+ applications). Role includes migration/runbook design, credential provider strategy, MFA migration (e.g. RSA SecurID → Entra MFA), ensuring TSA compliance and audit evidence, and mentoring senior engineers. 3+ month rolling contract in the UK; requires 10+ years IAM experience and 5+ years in CyberArk PAM architecture.

Work on Reddit's IAM team to design, build, and operate highly performant and scalable backend services for authentication and authorization. Collaborate cross-functionally with product, security, client engineering, and backend teams. Role expects 3+ years of experience building distributed backend systems and proficiency in general-purpose languages (preferably Go) and cloud infrastructure (Kubernetes, CI/CD, AWS/GCP).

Hands-on Principal Cyber Security Engineer at NVIDIA responsible for architecting and building agent identity/security features (credential brokering, token exchange, workload identity, lifecycle management), prototyping solutions, delivering APIs/CLI/tools, and partnering with Enterprise Security and platform teams. Requires a Bachelor's/Master's or equivalent and 15+ years of relevant engineering or security experience. Base salary range listed as 240,000 USD - 379,500 USD.

Fastly is hiring a Senior/Staff Software Engineer for the Security Products group to develop and operate backend systems (primarily in Go) for edge security products. The role requires 6+ years of enterprise software experience, deep knowledge of HTTP and related networking protocols, strong Linux and scripting skills, and availability during core US business hours including on-call rotation. The position is remote and open to candidates in North America.

Role leads Product Security and Security Operations, setting strategy and operating plans, embedding security in the SDLC, driving detection engineering and incident response, guiding high-severity investigations and remediation, and managing budgets and security vendors. Requires leadership experience and deep technical knowledge across application security, detection engineering, cloud security, and incident response.

Role owns the end-to-end technical strategy for Identity & Access Management (human, AI agent, service/workload identities) and sets architecture and standards across multiple pods and hundreds of consuming teams. Responsibilities include driving adoption and migration for 700+ systems, defining shared primitives for authentication/authorization/provisioning/governance, translating audit and regulatory requirements (UAR, SOX, SOC 2) into automated controls and evidence, designing data models and tooling to answer access questions, and mentoring senior engineers. Required: 12+ years software engineering experience, senior technical leadership across multi-team platforms, production Go experience, distributed systems design on AWS, and fluency in identity protocols (OAuth 2.0, OIDC, SAML, SCIM).

Manage fraud and abuse incident response (investigation, mitigation, remediation) including acting as incident commander, developing runbooks and response plans, and driving cross-functional improvements. Leverage Python, SQL, log analysis, threat intelligence, and automated response workflows to neutralize threats and scale detection and response capabilities.

Work on ACE to design, prototype, and deploy API- and product-level controls (rate-limiting, auth checks, input validation, pre-debit holds), run experiments/A-B tests to measure risk vs conversion, build automated regression and attack-simulation suites, and hand off mature controls to product teams. Requires 3+ years in security/software/anti-abuse engineering and strong development skills (Python/Go/Java, SQL).

Docker is hiring a Senior Security Engineer (Offensive Security) to run penetration tests, adversary-emulation exercises, threat modeling, and exploit development across product, cloud (AWS/GCP/Azure), and containerized environments. The role requires 3+ years in security engineering with hands-on offensive experience, development experience in Python or Golang, expertise in authentication/authorization and Zero Trust, and familiarity with offensive tooling (e.g., Burp Suite, OWASP). This remote-first position is open to candidates in the United States and Canada; Docker does not offer visa sponsorship for this role.

DigiCert is hiring a Trust Operations Analyst to analyze security threats, perform in-depth log analysis, manage security alerts and tickets per SLAs, and participate in incident response. The role involves configuring and maintaining security systems (SIEM, EDR, WAF, vulnerability management), supporting compliance/audit activities, and collaborating with teams to improve security posture. Requires 3+ years in IT or a related technical discipline and willingness to obtain CISSP if not already certified.

Lead development, execution, and maintenance of FedRAMP certification and compliance plans for cloud and SaaS products. Coordinate cross-functional teams (product, security, cloud, engineering), manage milestones and risks, provide technical guidance on federal security requirements, and leverage AI tools to accelerate compliance processes. Requires a bachelor’s/master’s (or equivalent), 5+ years in cloud/SaaS program management for certification/compliance, and proven FedRAMP authorization experience.

Join Stripe's Abuse Research Group to lead hypothesis-driven threat hunting, apply and extend the FT3 fraud taxonomy, and build agentic testing and simulation workflows. The role requires 5+ years of threat intelligence/hunting or incident response experience, strong Python and SQL skills, and hands-on log analysis and digital forensics experience.

Join GitLab’s Security Incident Response Team to lead detection and response efforts (Sunday–Wednesday shifts) for GitLab.com and the company. The role focuses on incident handling from detection through containment and recovery, automating security processes, maintaining runbooks and documentation, conducting post-incident RCA, and collaborating across teams to improve detection and response capabilities. Experience with SIEM/logging, cloud platforms (GCP/AWS), and Python or willingness to learn is expected.

Hands-on technical lead responsible for designing benchmark datasets, building judges and evaluation harnesses, running standing scorecards, investigating failures, and publishing results. Role includes leading and mentoring researchers and engineers, coordinating expert labeling, defining evaluation methodology and collaborating with engineering, product and threat research teams.

Primer is hiring a Security Engineer to build, tune and maintain detections in their SIEM (Elastic preferred) and AWS environment, own an investigation queue (triage, investigate, escalate, resolve), create runbooks and automations (Python and no-code tools), and support audit-ready controls for compliance frameworks (e.g., SOC 2, PCI DSS). The role includes infrastructure-as-code (Terraform), joining an on-call rotation, and contributing to detection automation and response.

Remote staff security researcher role focused on identifying, validating, and remediating novel and systemic vulnerabilities in GitLab's DevSecOps platform, including AI agents and workflows. Requires 7+ years in security research or offensive roles, hands-on exploit development, proficiency with one or more of Ruby, Go, Python, TypeScript, or Rust, and experience with AI attack vectors. Position reports to the Senior Manager of Application Security; US base salary range listed.

Lead and conduct advanced security research and penetration testing across GitLab's platform and AI/agent surfaces, develop testing methodologies and tooling, validate vulnerabilities with proof-of-concept exploits, drive class-level remediations, mentor others, and coordinate cross-functional remediation. Role expects 10+ years' relevant experience and proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust. US base salary range listed: $203,200–$275,000 USD (for US residents).