Own the architecture of the static analysis program model and the pipeline that turns source code into findings, set technical direction for AI-assisted tooling and agent safety/guardrails, and measure detection quality against benchmark applications. Works across Rust, Go, and Ruby, leads high-scope initiatives from design through delivery, mentors engineers, participates in on-call rotations, and stays current with program analysis and security research.

Work as a Senior Backend Engineer on GitLab’s Code Security team to design and ship analyzers that combine deterministic and AI-driven detection, implement manifest/lockfile/SBOM parsing and dependency analysis, and contribute to automated remediation that produces dependency update merge requests. Role emphasizes production coding (Go/Rust/Ruby/Python), vulnerability detection (CWE/OWASP), LLM tooling, CI/CD/Docker, and participation in on-call rotations. A US base salary range is listed for residents of the United States.

Remote (USA) senior engineering role within Security Platform Engineering owning public and internal certificate management systems. Requires 5+ years building highly available distributed systems, deep PKI and applied cryptography expertise, experience with HSMs/cloud KMS, and extensive systems programming (Golang/Java/C++/Rust). Role includes technical leadership, architecture, and cross-functional coordination on regulatory and cryptographic initiatives.

Lead and manage PCI DSS assessments, gap analyses, and readiness reviews; evaluate design and effectiveness of cardholder data security controls, review evidence and deliverables, guide remediation, manage client relationships and engagement economics, and supervise staff. Requires PCI QSA certification, 6–9 years relevant experience, bachelor’s in a related field; CISA/CISSP/CISM/CRISC/ISO 27001 credentials and P2PE experience preferred.

Frazier & Deeter seeks an Advisory Manager to lead PCI DSS assessments, gap analyses, and readiness reviews; evaluate cardholder data environment controls; produce and finalize compliance reports; manage engagement budgets, staffing and timelines; and coach and develop staff. Requires 6+ years in IT audit/cybersecurity/risk advisory or PCI DSS assessments and PCI QSA certification; other security certifications preferred.

Frazier & Deeter seeks an Advisory Manager in Atlanta to lead PCI DSS assessments, gap analyses, and readiness reviews; evaluate design and effectiveness of cardholder data security controls; oversee evidence review and remediation planning; manage engagement budgets, staffing and delivery; and supervise and develop staff. Requires 6+ years relevant experience and PCI QSA certification (CISA/CISSP/CISM/CRISC/ISO 27001 Lead Auditor preferred).

Lead Cybersecurity Specialist (Lima, hybrid; in-office ~3 days/week). Lead defense and incident response, manage CyberSOC services and SIEM platforms, integrate log sources and detection use cases, manage cloud security (Azure, GCP), coordinate vulnerability identification and remediation, evaluate security posture, engage with vendors and stakeholders, and produce executive reports. Minimum 5 years' experience and leadership experience in security operations.

Senior technical leadership role owning domain-level solutions, cross-cutting features, and architecture across multiple teams. Responsibilities include architecting scalable, secure cloud-native systems, developing shared libraries/APIs, leading testing and observability strategies, resolving performance issues, and mentoring engineers. Required: 12+ years software development, strong experience with Java, JavaScript (React/Redux or Angular), Spring, REST, Docker, AWS, PostgreSQL/SQL Server/T-SQL, NoSQL, CI/CD and observability tools. Salary range provided in INR.

Senior individual contributor responsible for building and running technology governance across cyber risk, IT controls, change and incident management, and business continuity. Owns control inventory, audit and assurance programs (SOC 2, ISO 27001, SOX ITGC, PCI), risk registers, escalation, and use of automation for evidence and remediation tracking. Remote-eligible within the United States.

CrowdStrike seeks a Senior Product Security Engineer to join a growing team remotely in Canada. The role centers on deep analysis of endpoint products (especially Linux/C/C++), threat modeling, source code review, vulnerability hunting and working with product engineers to fix issues. Requires 10+ years engineering experience, strong Linux internals knowledge, and familiarity with containerization, virtualization, concurrency and security testing; Rust/Go, reverse engineering and debugging tools are bonuses. Salary range provided: 115,000–165,000 CAD/year.

Owner of the security architecture and implementation for Bits Code, working cross-functionally to identify risks, build threat models (including prompt injection), and design mitigations. Requires ~5+ years experience or a relevant degree, experience securing systems across trust boundaries, operating full-stack systems at scale, and shipping secure software while participating in on-call operations.

Chainguard is hiring a Senior Product Security Engineer to design, build, and maintain secure CI/CD pipelines with security gates; implement software supply chain controls (signed artifacts, SBOMs, SLSA, Sigstore/Cosign); and lead security architecture and threat modeling for Kubernetes workloads on GCP and AWS. Requires 5+ years of relevant engineering/security experience and strong hands-on skills in Go or Python, Kubernetes hardening, cloud IAM/secrets, container security, and CI/CD tooling.

Design and implement Golang/Python microservices and data pipelines for risk intelligence and exposure management. Work with streaming and batch frameworks (Spark, Flink, Kafka), cloud platforms (AWS preferred; Azure/GCP), databases (Cassandra, graph DBs), and ensure operational reliability; mentor engineers and drive architecture.

Owner of corporate security areas including Mac fleet management (Jamf), Okta-based IAM, Google Workspace and SaaS security configurations, security monitoring and investigation, malware response, vendor assessments, and security awareness and AI security programs. Partners with People, Legal, and Infrastructure on provisioning/offboarding and lifecycle automation.

Deliver installations, migrations, training, and advisory services for public sector customers using GitLab (single-node to highly available architectures). Use infrastructure/configuration-as-code tools (Terraform, Ansible, Packer, Puppet, Chef), lead migrations to GitLab SaaS or self-managed, coordinate with project/engagement managers, mentor other engineers, and relay field feedback to product/engineering. Must be a United States citizen with active TS/SCI clearance; occasional travel to SCIF sites. US salary range $136,080–$230,040 (base, annual).

Lead insider risk investigations end-to-end, perform digital and hardware forensics with litigation-ready documentation, provide executive protection and travel security, and help mature insider risk, forensics, and physical security programs. Requires 7+ years of relevant experience and willingness to travel, including internationally.

Join the internal security team to design, test, and deploy detections as code (KQL) via GitOps; perform hypothesis-driven threat hunts across cloud, SaaS, identity, endpoint, and infrastructure; participate in incident response (initial 6–12 months); and maintain security log flows and telemetry pipelines (including Cribl Stream). Requires 5+ years in security operations with hands-on detection engineering, KQL, Python, SIEM and log pipeline experience.

Founding member of a Professional Services Security Assurance team responsible for leading customer engagements to perform architecture and design reviews, threat modeling, secure code reviews, penetration testing, and cloud/AI security assessments. The role includes developing assessment methodologies, security tooling, and delivering actionable remediation guidance to technical and executive stakeholders.

Lead the design and delivery of core security features in Elasticsearch, including authentication, authorization (scalable RBAC/ABAC), tenant isolation, cryptographic solutions, and performance optimization for distributed systems. Collaborate with engineering and product leaders, drive vulnerability management (including AI-assisted triage), and mentor other engineers.

The role owns Google Cloud infrastructure, Cloudflare configuration (CDN, WAF, DNS, edge security), IAM and secrets posture, CI/CD pipelines, Terraform-managed infrastructure, monitoring and incident response, and supports security for an authentication service. Requires 5+ years of DevOps/SRE or cloud infrastructure experience with security responsibilities and fluency in English. Remote (100%) and must be based in Latin America.