Director-level role reporting to the CISO to build and lead a security engineering function across the code-to-cloud lifecycle. Responsibilities include setting technical direction, hiring and developing senior engineers, owning roadmap, standards, and budget, integrating AI/agentic tooling into security delivery, partnering with product, and engaging executives and customers. Requires 7+ years in security or software engineering (4+ years leading engineers) and technical foundations in cloud/Kubernetes security, infrastructure-as-code, CI/CD, and compliance (ISO 27001, ISO 27701, SOC 2). Location: Flexible - USA. Salary range provided: 186,000–256,000 USD/year.

Lead technical analyst role in CrowdStrike's Falcon Complete virtual SOC. Responsibilities include mentoring and coaching analysts, monitoring and analysing security alerts, incident handling and remediation, forensic and malware analysis, improving detection and triage processes, and serving as technical escalation for high-severity incidents. Degree preferred but relevant experience acceptable.

CrowdStrike seeks a remote Security Advisor I for Falcon Complete to assess customer Falcon environments, provide remediation recommendations, document and resolve customer issues per SLAs, partner with internal teams, and support threat detection and incident response. Requires 2+ years in a cybersecurity-focused role, experience with Windows/Linux/macOS, customer-facing communication skills, and relevant security certifications.

CrowdStrike is hiring a remote Security Advisor II for the Falcon Complete service. The role is customer-facing and focuses on assessing customers' Falcon environments, recommending and documenting remediation, supporting incident detection and response, and coordinating with internal teams. Requires 3+ years in a cybersecurity-focused role, experience with Windows/Linux/macOS, threat detection and incident response, relevant certifications, and US citizenship or green card. US base salary range stated: $100,000–$155,000 per year.

Remote senior individual-contributor role supporting CrowdStrike's cloud security portfolio (CNAPP, CSPM, CWPP, CIEM, ASPM). Responsibilities include competitive analysis, win/loss analysis, deal support, go-to-market and product strategy recommendations, and presenting findings to field and senior leadership. Requires minimum 5 years in cloud security (including hands-on AWS and either GCP or Azure) and experience translating technical analysis into field-actionable guidance.

CrowdStrike is hiring an Analyst I for the Falcon Complete virtual security operations center to detect, contain and remediate incidents across Windows, macOS and Linux. Responsibilities include incident handling, malware (static/dynamic) and forensic analysis, network analysis, development of countermeasures and customer-facing written/verbal communications. Candidates must be US citizens or permanent residents, be willing to work a 4x10 schedule (including a weekend day) and a hybrid on-site schedule, and have relevant technical background (degree preferred or equivalent experience). Base salary range for U.S. candidates is $85,000–$120,000 per year.

Twilio is hiring a Staff Engineer, Security Engineering Partners to bridge security and engineering teams by designing and implementing scalable security solutions, leading security reviews, driving risk reduction, and mentoring engineers. Required: 8+ years in security engineering (application/cloud/product security), threat modeling, experience using LLMs in security solutions, strong software development skills (Python required; Go/Java a plus), CI/CD and IaC familiarity, and working knowledge of containers and AWS. Role is remote for candidates based in Canada (Ontario, British Columbia or Alberta) and may require occasional travel.

Manage four teams (~18 engineers) across Java, JavaScript/Go, Python, and PHP to set technical direction and operational standards for CVE analysis, vulnerability assessment, and patch backporting. Own delivery, SLA compliance, tooling and workflow consistency (CI/CD, dependency management), hiring, onboarding, and career development. Requires 6+ years hands-on multi-language development experience, 3+ years engineering leadership, and upper-intermediate English.

Hands-on contract role (100% remote) to design, build and implement security-focused platform capabilities for a cloud-native payments system. Responsibilities include implementing API security, cryptographic controls, AI governance, software supply chain security, CI/CD automation and observability using technologies such as Go, Kubernetes, AWS/GCP/Azure, CockroachDB, NATS, Vault, Terraform and SecDevOps practices. Contractors must be based in one of the listed European countries; all contractors start their first day in-office to collect equipment.

Lead identity engineering efforts including Okta integrations (Workday master), SSO/SCIM for enterprise apps, AWS identity architecture, PBAC with OPA/Rego, and lifecycle management for non-human identities and AI agents in a HIPAA-regulated environment. Mentor engineers, produce runbooks, and raise identity/security maturity.

Fully remote senior backend engineer position on Reddit's IAM team. Requires 5+ years building large-scale distributed backend systems and at least 2 years in security-sensitive domains. Responsibilities include designing and shipping authentication/authorization services, improving performance and scalability, and mentoring other engineers. Technologies and concepts mentioned include OAuth2, OIDC, SAML, RBAC/ABAC/ReBAC, Go, Kubernetes, CI/CD, AWS/GCP.

The GRC Manager will own Mattermost's compliance posture end-to-end (federal readiness and commercial certifications), lead certification and surveillance cycles (CMMC, NIST, ISO 27001, SOC 2), operate risk and third-party vendor risk programs, apply GRC engineering and AI for continuous controls monitoring and automation, coordinate external audits, maintain compliance artifacts, manage customer security assurance, and grow the GRC team. Role requires U.S. citizenship and location in the United States.

Contract role focused on managing AI information security operations and engineering, including incident response, playbook development for AI/ML threats (prompt injection, model poisoning, adversarial attacks), securing LLMs and generative AI systems, contributing to AI governance, and collaborating with IT and AI/ML teams. Requires 5+ years in information security operations and 2+ years in AI/ML security.

Lead and grow a security engineering team responsible for application security, cloud security on AWS, and security for AI/LLM systems. Drive secure SDLC practices, operate SAST/DAST/SCA tooling, perform threat modeling (including agentic AI risks), define cloud security standards (IAM, API security, secrets, containers), and deliver evidence-based architectural fixes. Serve as the technical bridge between Product Engineering and Security Operations and influence remediation priorities and roadmaps.

The Director of Engineering, Security Factory will set the engineering vision and roadmap across nine distributed teams building proprietary security scanners, AI/ML detection engines, agentic remediation flows, and supporting security foundations. The role includes leading managers and engineers, driving architecture and delivery decisions, partnering with product management, and representing the group in cross-functional and customer-facing contexts within a remote, async-first organization.

Role involves designing and executing red team operations against GenAI systems, LLM pipelines, RAG architectures, autonomous agents, SaaS products, web applications, and cloud environments (AWS/GCP). Responsibilities include adversarial testing (prompt injection, jailbreaking, model extraction, training-data poisoning), deepfake and voice synthesis attacks, penetration tests, SAST/DAST in CI/CD, threat modeling, security code and architecture reviews, and building automation for offensive workflows. Must have 3+ years of penetration testing/red team experience, hands-on GenAI/LLM attack experience, deepfake/audio spoofing experience, offensive tooling proficiency, and Python scripting skills.

Role responsible for supporting security pillars within Salesforce Government Cloud including continuous monitoring, advisory, incident response, accreditation and security documentation. Requires at least 4 years' experience in information security/cybersecurity, experience with AWS/Azure/GCP government cloud environments, knowledge of FedRAMP and DoD SRG, and the ability to work with federal authorization bodies and stakeholders. U.S. citizenship (no dual citizenship) and ability to complete federal background screening are required. Typical base salary range listed: $117,200–$176,700 annually.

Join CrowdStrike's Falcon Complete Managed Detection and Response team to enable and support security analysts with specialized threat response expertise. Responsibilities include emerging threat research, detection enablement across Endpoint/Identity/Cloud/NG-SIEM, incident investigation support, knowledge-base development, and collaboration with threat intelligence and detection engineering. Requires a minimum of 5 years in a response or research-focused security role (with at least 3 years supporting IR/SOC/MDR), experience with EDR/SIEM telemetry, scripting (Python/PowerShell), automation, and use of AI/automation tooling.

Pre-sales Security Engineer supporting Tenable One and enterprise customers from technical demonstrations through PoC/PoV completion. Role involves solution architecture, advising on security best practices and compliance (CIS, NIST, ISO), engaging stakeholders from engineers to CISOs, and collaborating with product and engineering. Requires 3–5 years in a technical sales or solution architecture role and willingness to travel as needed.

Join STRIKE as the engineering counterpart to threat research to own the research-to-production pipeline, build and extend threat intelligence platform components, produce detection content (YARA, Sigma, STIX), and ship production systems that may include language-model-backed workflows. Requires 5+ years engineering experience with threat intel or detection engineering and hands-on experience with Python and TypeScript/Node.