The Senior Data Security Architect will translate data governance and privacy requirements into technical controls, own tooling such as data discovery/classification and DLP, and partner with Product, Engineering, Legal, and system owners to secure data across its lifecycle. Requires 8+ years of experience in security engineering, data security, or data architecture and experience enforcing regulatory and privacy requirements at scale.

Datadog is hiring a Staff Application Security Engineer to define AppSec frameworks and standards, build automation and observability, lead threat modeling and risk assessments for complex features, partner across security and engineering teams, and address security risks introduced by AI-powered features and agentic development practices. The role requires hands-on code review experience (Go preferred; Python or Rust acceptable), strong knowledge of OWASP Top 10, SAST/DAST, API security, and software supply chain security, plus the ability to influence engineering and executive stakeholders.

Twilio seeks a Senior Security Risk Analyst to operate and mature the One Twilio Risk Management program, working with Product and Engineering to identify and treat cyber risks, maintain risk registers and KRIs, develop analytics and predictive models, support audits, and deliver risk reports. Requires 5+ years in security-focused risk management and experience with frameworks such as NIST RMF, COSO, or ISO 31000.

Remote (Germany) role to manage Mozilla’s web bug bounty program, act as primary interface with external researchers and platforms (e.g., HackerOne), lead triage and technical validation across intake channels, drive end-to-end remediation with engineering teams, collaborate with the Security Incident Response Team, and perform targeted JavaScript and Python code reviews. Requires 3+ years in a security engineering role and experience with bug bounty operations and modern cloud platforms.

The role owns Mozilla’s web bug bounty program (strategy, KPIs, researcher relations), leads triage and technical validation across intake channels (HackerOne, Bugzilla, email), drives end-to-end vulnerability remediation with engineering teams, collaborates with the Security Incident Response Team on incidents and post-incident reviews, performs targeted code reviews (primarily JavaScript and Python), and develops or leverages tooling to improve triage and program insights. Requires 3+ years in a security engineering role and experience with cloud platforms.

Responsible for driving incident lifecycle management, facilitating and resolving security incidents, creating and tracking problem records, documenting root causes and no-repeat plans, following escalation and change compliance processes, and participating in event management. Requires minimum 8 years' work experience and typically a bachelor's degree; preferred ITIL v4 experience and 2+ years of leadership experience. Salary range listed: $120,000 - $190,000.

NVIDIA seeks an Evaluation/ML-Systems Engineer to design benchmarks, metrics, and protocols and build infrastructure tying results to the runs and code that produced them. Requires 5+ years in ML engineering or evaluation, strong Python engineering for shared infrastructure (experiment tracking and data pipelines), and experience designing statistically sound comparisons. Familiarity with security evaluation and measuring agent/LLM behavior is a plus. Base salary range: 152,000–241,500 USD/year.

NVIDIA seeks a Distinguished Engineer to found and lead the AI Safety & Security Engineering team, owning core harness architecture, baseline engineering standards, and the Find/Validate/Patch roadmap. The role requires mentoring founding engineers, bridging research to production, and strong experience (Bachelor's or equivalent and 18+ years) in architecting distributed systems, ML pipelines, or large-scale platforms. Base salary range: 320,000 USD - 488,750 USD.

Lead hiring, coaching, and delivery for the Find, Validate, and Patch engineering roadmap across harness/platform engineering, security research, and evaluation. Requires 12+ years in software engineering (including 5+ years managing teams) and technical depth in ML or systems architecture, security research, and building distributed or platform systems.

NVIDIA seeks a Security Research Engineer to develop validation and patching methods that confirm vulnerabilities are real, reachable, and safely fixed for internal targets. The role requires 12+ years of security research or software engineering experience and hands-on expertise in vulnerability research, fuzzing, program analysis, and secure development in C/C++/Python. Candidates should be able to produce traceable evidence and standards for correctness, regression avoidance, and revalidation.

Role focused on designing, implementing, and maintaining an agent harness and the systems to run and reproduce experiments for AI safety and security. Requires 5+ years software engineering experience, strong Python skills, familiarity with containerized environments and CI/CD, and experience with agent frameworks/ML infrastructure (NeMo experience is a plus). Base salary range: 152,000 USD - 241,500 USD.

Chromatic seeks a Senior DevOps Engineer to own and improve cloud infrastructure and security across its AWS-based rendering platform. The role requires 5+ years deploying and operating containerized applications, strong IaC experience with Terraform, CI/CD familiarity (CircleCI, GitHub Actions), networking and cloud security knowledge, and participation in on-call incident response. Position is fully remote for candidates based in the mainland US or Canada.

Lead, coach, and build a regional Security Specialist Sales Engineering team; own regional technical execution, hiring and onboarding, operations (resource allocation, KPIs), and collaborate with Sales, Product, Marketing, Enablement, and Support. Role requires 7+ years in Sales/ Solutions Engineering and 3+ years leading technical teams; background in security (e.g., CNAPP, AppSec, SIEM) and willingness to travel as needed. Estimated salary $150,000–$200,000 USD per year.

Responsible for identity lifecycle management (joiner/mover/leaver), provisioning and revoking user access, administering privileged accounts, performing credential reconciliations, and supporting periodic access review and certification campaigns. The role also maintains operational records, monitors provisioning SLAs and metrics, and provides evidence and remediation support for audits and compliance.

Responsible for IAM governance including policies, RACI, JML, access provisioning, recertification, privileged access frameworks, evidence management, risk tracking, and KRI/KPI reporting. Requires 5+ years in IAM, IT risk, cybersecurity governance or technology controls; experience with RBAC, PAM, access certification and governance frameworks. CISM/CRISC preferred and experience in financial or highly regulated environments is a plus.

Serves as the primary control assurance function within the IAM operating model, validating IAM control design and operating effectiveness, driving control monitoring and testing, assessing access governance (JML, PAM, access certification), managing control exceptions and remediation, and supporting audits and regulatory examinations. Requires 3+ years in IAM controls, IT risk/audit, or cybersecurity compliance; preferred certifications include CRISC, CISM, or ISO 27001 Lead Auditor.

Join the Elasticsearch Security team to contribute to architecture, design, and implementation of core security features (authentication, authorization, tenant isolation) in Elasticsearch. Responsibilities include designing scalable authorization systems, optimizing security performance in distributed environments, applying cryptographic solutions, and driving vulnerability management in collaboration with InfoSec. Role expects strong Java/JVM knowledge, concurrency and distributed-systems security experience, and familiarity with identity protocols such as OAuth 2.0 and SAML.

Join the Elasticsearch Security team to design and implement core security features (authentication, authorization, tenant isolation), optimize security performance in distributed environments, apply cryptographic solutions, and drive vulnerability management. Role emphasizes Java/JVM expertise, concurrency, distributed systems security, identity protocols (OAuth2/SAML), and collaboration across engineering and product teams. Location: Canada.

Lead architecture and implementation of core Elasticsearch security features, including authentication, authorization (RBAC/ABAC), tenant and data isolation, cryptographic solutions, and performance optimization in distributed systems. Collaborate with product and InfoSec teams on vulnerability management, leverage AI-assisted tools to accelerate development and triage, and mentor other engineers. Requires deep Java/JVM knowledge, concurrency and distributed systems security experience, and familiarity with identity protocols (OAuth 2.0, SAML).

Lead architecture, design, and implementation of major security components in the Elasticsearch core engine, including authentication, authorization (scalable RBAC/ABAC), token validation, and data isolation. Optimize security performance for distributed systems, apply cryptographic solutions, drive vulnerability management with InfoSec, and mentor other engineers. Role lists a CAD base salary range and is based in Canada.