Individual contributor in IT Engineering (Cyber Resiliency) owning managed AI platform governance and administration across Anthropic and OpenAI, API key and secrets hygiene, SSO/SCIM provisioning, MCP server and agentic AI tooling development (Python/TypeScript), prompt-injection and data-leakage mitigation, and building financial/usage dashboards and anomaly detection for AI spend.

Join Coinbase's Insider Threat team to own complex insider threat investigations end-to-end, prioritize and analyze alerts across SIEM/UBA/DLP/endpoint detection, refine detection logic and automation, and partner with Security, Legal, HR, and business teams. Position is remote for US-based candidates; annual base salary range listed: $167,280–$196,800 USD.

Join Coinbase's Insider Threat team to triage alerts, conduct end-to-end investigations, collect evidence, interview employees, and coordinate with Security, Legal, HR, and business teams. Requires 2+ years in insider threat, security operations, investigations, fraud detection, or related roles with hands-on experience using SIEM, UBA, DLP, endpoint detection, and log analysis. Annual base salary range: $135,320–$159,200 USD.

The role is a technical sales position focused on demonstrating and articulating CrowdStrike’s endpoint and network security capabilities to prospects and customers. Requires security expertise (AV, EDR, SIEM, incident response, forensics), a sales engineering background or 5+ years relevant experience, English and German fluency, and the ability to travel as required.

Role focused on engineering the data backbone for infrastructure security: ingestion and transformation pipelines, data lake/lakehouse architecture, analytics for posture scoring and detection, and securing the data layer (encryption, RBAC/ABAC, audit). Requires 15+ years building production data systems; strong software engineering skills (Python/Go/Scala/SQL). Salary range stated: 272,000–431,250 USD/year.

Remote (United States) staff-level role within Infrastructure Security – Identity & Access Management. Responsible for architecture, design reviews, multi-quarter platform evolution, leading IDP migrations and privileged access work, ensuring reliability and operational maturity, mentoring senior engineers, and reducing incidents via systemic fixes. Minimum stated experience paths include as little as 3+ years (per listed qualification options). Preferred experience includes identity directories/IDPs (Okta, Entra ID/Azure AD), OAuth/OIDC/SAML/SCIM, major cloud environments (AWS/Azure/GCP), and building programmatic/agent-consumable APIs. Listed base salary range: USD 140,400–372,300 / year.

Mozilla is hiring a Senior Software Engineer for the Privacy Team to implement privacy-improving, anti-tracking features and data sanitization in the Firefox web browser, and to make architectural improvements to Gecko. The role involves writing performant C++, JavaScript and Rust code, working asynchronously with a distributed team. Requires a bachelor's degree or equivalent and at least 4 years' experience with C++ and Rust, strong memory-safety and multi-threaded architecture skills. Bonus experience includes browser engines, ML pipelines, Python, SQL and statistical modeling.

Mid-level individual contributor responsible for building and extending platform services that handle federated identity, authentication flows, and authorization enforcement across MeridianLink products. Role requires hands-on experience with OAuth 2.0, OIDC, SAML, JWT, backend service development in Python or .NET, API/integration patterns (REST, event-driven), multi-tenant considerations, observability, and active use of AI-assisted development tools. Expected to participate in on-call rotations, write tests, mentor junior engineers, and support product teams integrating with the identity platform.

Join Stripe's Security Analytics Infrastructure team to build and support SIEM, SOAR, EDR, server observability, threat intel and AI infrastructure. Role requires 5+ years of software engineering experience, significant cybersecurity experience, and experience applying AI tooling; Go and Python are preferred.

Technical owner for Audit Logging, SIEM Integration, and Unified Security Visibility across DigitalOcean's cloud platform. Role includes defining the multi-year roadmap, architecting fault-tolerant Go-based telemetry and streaming pipelines, designing SIEM integrations and customer-facing dashboards, and leading/mentoring engineers. Requires 10+ years software engineering experience with 4+ years in audit logging/security telemetry or high-throughput data pipelines; experience with Kafka/Flink, Kubernetes, Terraform, and compliance frameworks is emphasized.

Join the Safety Platform team to build and operate critical safety infrastructure and services used to protect millions of Discord users. Responsibilities include designing and delivering backend systems, collaborating with Trust & Safety and ML teams, participating in on-call rotations, and maintaining high quality through code reviews and mentorship. Requires 5+ years of experience in backend services, strong programming skills (Python, Rust, or TypeScript), and experience with distributed systems and cloud platforms (GCP/AWS).

Responsible for designing and implementing security automation, APIs, and frameworks used across Product Security; building scalable systems for software supply chain security, AI-enabled vulnerability discovery, telemetry and monitoring; owning SRE excellence for mission-critical security services. Requires experience with Golang/Python/TypeScript, CI/CD, containers, config management (Ansible/Chef/Salt/Puppet), ElasticSearch/relational/graph databases, incident response/security operations, cloud (AWS/GCP) and Linux.

The Head of Data Ops & Systems will lead DA's internal technology and data function (acting as Data Protection Officer), owning systems strategy, integration, data architecture, quality and governance, vendor relationships, cybersecurity oversight, and leading a technical team to ensure reliable, well-integrated systems across the organisation. Role is based in Ireland and requires the right to work in Ireland (no visa sponsorship).

Remote-based in the United States, this deputy CISO role requires 10+ years in cybersecurity (including 3+ years in senior leadership) to drive security strategy, compliance (PCI, SOC 2, ISO 27001, DORA, FedRAMP), incident response, AppSec, cloud/SaaS security, IAM, and customer-facing security activities. The role involves cross-functional partnership, vendor evaluation, and regular travel (~once every 1–2 months).

Seeking a senior/staff-level SecOps Automation Engineer to architect and implement a new incident response automation function from scratch. Responsibilities include designing and building SOAR playbooks, integrating security tools via APIs, tuning high-fidelity SIEM alerts, leveraging Python and AI/LLM tools, and partnering with stakeholders on DLP and escalation processes. Remote role based in Santo Domingo (Dominican Republic) with a U.S.-based nearshore employer.

Truelogic seeks a senior/staff-level SecOps Automation Engineer to architect and implement a new incident response automation function from scratch. Responsibilities include designing SOAR workflows and playbooks (Torq, Tines or similar), tuning SIEM detections, integrating security tools via APIs, leveraging Python and AI/LLM tools to automate workflows, and collaborating on DLP controls and incident escalation. Role is 100% remote and focused on building automated, high-fidelity security operations.

Seek a senior/staff-level SecOps Automation Engineer to design and scale a new incident response automation function from scratch. Responsibilities include building SOAR workflows and playbooks (Torq/Tines preferred), tuning SIEM detections, integrating security tools via APIs, leveraging Python and AI/LLM tools to accelerate automation, and partnering with stakeholders on DLP and escalation pathways.

Remote senior/staff-level SecOps Automation Engineer role to architect and implement a new incident response automation function, design SOAR workflows and playbooks (Torq/Tines preferred), tune SIEM detections, integrate security tools via APIs, and leverage Python and AI/LLM tools to modernize security operations. Based in São Paulo, Brazil (remote).

Remote senior or staff-level SecOps Automation Engineer role focused on architecting an incident response automation program from scratch: building SOAR playbooks (Torq/Tines preferred), tuning SIEM detections, integrating security tools via APIs, using Python and AI/LLM to automate workflows, and partnering with stakeholders on DLP and incident escalation.

Puesto híbrido (Miraflores) para ejecutar evaluaciones de riesgos de seguridad y ciberseguridad, cuantificar riesgos con metodologías (FAIR, ISO 27005, ISO 31000, NIST), definir controles, gestionar vulnerabilidades y reportar KPIs. Requiere título en carreras afines, más de 5 años de experiencia, conocimiento en Cloud/On‑premise/OT/IoT, frameworks (ISO 27001, NIST) y nivel de inglés intermedio.