Senior Staff Security Engineer owning the roadmap for an AI-driven vulnerability scanning, triage, and automated remediation platform. Requires 8+ years in security engineering with deep cloud/container expertise, offensive security experience, and proficiency in Python/Go/Rust.
Application Security Engineer partnering with engineering teams to embed security into the SDLC, triage SAST/SCA findings, provide remediation guidance on OWASP issues, maintain security docs/playbooks, support governance/audits, and integrate GenAI tools while building AI governance guardrails.
Senior Security Engineer responsible for security reviews, triaging reports, implementing security code, and penetration testing across Brave browser and Search. Requires 5+ years security engineering experience, C++ proficiency, web security knowledge, and AWS infrastructure experience.
Red Team Engineer on Anthropic's Safeguards team performing adversarial testing and full kill-chain attacks on AI products to uncover vulnerabilities, jailbreaks, and novel abuse vectors before malicious exploitation. Requires strong pen-testing, red teaming, and LLM-specific security experience.
Lead GameChanger's Information Security and IT Operations as Director. Own multi-year security strategy, lead multidisciplinary teams across product security, cloud/AI security, SecOps, GRC, and internal tech support. Partner with executive leadership and parent company DSG while building security culture. Requires 10+ years security experience including people management.
Lead a remote Security Detection & Response team at Apollo.io. Hands-on manager responsible for detection engineering, incident response, Panther content, Python automation, AI triage workflows, and cross-functional security improvements in a cloud/SaaS environment. Requires 5+ years security engineering experience and 2+ years people management.
Own and evolve Confluent's internal access management program with focus on machine/workload identity, S2S auth, non-human identities, and AI agent controls. Set the Access Management Standard, own metrics/reporting/OKRs, and drive governance, risk reduction, and cross-functional execution for least-privilege outcomes.
Senior/Staff Infrastructure Security Engineer building self-service security platforms, automating DevSecOps workflows, and designing high-scale security data pipelines and IaC guardrails in a greenfield cloud-native environment at an AI healthcare company. Requires 8+ years software engineering experience with deep cloud and IaC expertise.
IAM Engineer responsible for implementing and improving identity and access management tooling (Okta, ConductorOne, Terraform) with RBAC/ABAC/JIT controls. Requires 2+ years experience in IAM infrastructure, scripting, and IGA platforms in a fast-paced crypto environment.
Technical lead performing advanced offensive security work including full-stack pentesting, red team operations, custom exploit development, AI/LLM red teaming, and bug bounty management. Requires 7-10 years experience, deep expertise in MITRE ATT&CK and OWASP, and proficiency with industry tools and scripting.
Build automation, tooling, and secure software systems as part of Pinterest's Corporate Security team. Integrate security into development lifecycles, improve threat detection/remediation, and leverage AI while maintaining critical verification and ownership.
Lead design and management of Identity and Access Management systems using Okta and ConductorOne. Focus on SSO integrations, provisioning, access reviews, least privilege enforcement, and automation for a rapidly growing health platform.
Staff Security Software Engineer leading AI red teaming, adversarial testing, architecture reviews, and security tooling development for Databricks' AI/ML platform (Genie, Model Serving, RAG, agents). Requires 7+ years in offensive/AI security, expertise in 2+ AI security domains, Python proficiency, and cloud security knowledge.
Staff Security Software Engineer leading architecture, standards, and development of AI security tooling, threat detection, and red-teaming platforms at Databricks. Requires 7-10 years security engineering experience, expert Python skills, and deep AI/ML security expertise.
Security Engineer partnering with engineering to implement and improve security controls across AWS infrastructure and applications. Lead technical customer security reviews, enhance monitoring/detection, support SOC 2/ISO compliance, and integrate security into CI/CD pipelines. Requires 3+ years experience in security engineering.
Senior Privacy Engineer building and operating privacy-by-design systems, APIs, and controls for data governance, minimization, and ML pipelines at an AI lending platform. Requires 5+ years software engineering experience and background in privacy/security domains.
Senior Security Automation Engineer building centralized security telemetry, universal identity provisioning, and agentic risk engines to enable continuous compliance, self-healing controls, and real-time risk visibility at ClickHouse. Requires strong IAM/IGA and automation experience with Python, JS/TS, or Go.
Serve as the primary contact for customer security questionnaires, contract redlining, and Trust Center management using AI tools. Requires 2-4 years in GRC/Security Operations, knowledge of SOC2/ISO/NIST/GDPR/CCPA, and strong communication skills.
Build and improve detection alerts, automation, logging pipelines, and internal tooling to identify and respond to security threats at Pinterest. Requires strong incident response, SIEM, threat hunting, and scripting skills in cloud environments, plus demonstrated responsible use of AI.
Senior Application Security Engineer embedded with product and engineering teams at Monarch, a personal finance platform. Conduct AppSec reviews, SAST/DAST, vulnerability management, and AI security for LLM features on Django/Python stack. Requires 5+ years in security engineering with Python and web security expertise.
Lead security operations for a Connected TV advertising platform, including monitoring, incident response, threat hunting, automation, and embedding security into cloud infrastructure and DevOps workflows. Requires 5+ years SecOps experience, SIEM expertise, cloud security (AWS/GCP), scripting, and knowledge of security frameworks.
Lead MNTN's security operations including threat detection, incident response, vulnerability management, and cloud security. Build and mature the security program in a cloud-first SaaS environment while partnering with engineering, leadership, and compliance teams.
Senior Red Team Engineer performing security assessments, vulnerability discovery, and tool development across Snowflake's cloud environments. Requires 4+ years in offensive security, cloud knowledge (AWS/GCP/Azure), and coding in languages like Python or Go; 6+ years and community contributions preferred.
Senior Security Engineer on the Red Team performing offensive security, adversarial testing, and red team operations against GenAI/LLM systems, deepfake defenses, cloud infrastructure, and SaaS products. Requires 3+ years of hands-on pen testing/red team experience plus demonstrable GenAI attack experience.
Lead and mature GitLab's security compliance function, overseeing certifications (SOC 2, ISO 27001, FedRAMP), driving automation/AI improvements, and partnering cross-functionally to integrate GRC into business and technical processes. Requires deep frameworks expertise, team leadership, and risk-based mindset.
Senior Security Engineer responsible for threat modeling and securing Reddit's AI-powered products, LLMs, and agentic workflows. Build reusable security primitives, guardrails, scanners, and platform controls while partnering with AI product teams. Requires 5+ years in application/product security plus familiarity with LLM/agent risks.
Senior Security Engineer owning risk identification, threat modeling, vulnerability management, and secure architecture projects. Partners with engineering to build security culture and tools while minimizing operational friction. Requires independent ownership, software development experience, and strong collaboration skills.
Lead customer trust programs, security governance, metrics, and awareness at GitLab. Oversee contract reviews, questionnaires, policy development, and cross-functional partnerships to reduce sales friction and demonstrate security posture.
Staff Software Engineer on the IAM team designing, delivering, and supporting digital identity, authentication, and access systems. Requires 10+ years backend experience, deep IAM expertise, and proficiency in Go/Python/Java/TypeScript.
Product Security Engineer driving threat modeling, secure code review, open-source security, SDLC tooling, and bug bounty management for Vercel's web platform built on Next.js and Node.js. Requires 5+ years securing web products with strong JavaScript/Node.js and cloud security expertise.
Security Engineer building and hardening cloud-native security controls, infrastructure-as-code, and CI/CD pipelines for a scalable platform. Requires 8+ years in infrastructure/platform security and deep expertise in AWS/GCP and Kubernetes.
Lead end-to-end product security for consumer products, digital platform, and hardware devices. Drive threat modeling, penetration testing, PSIRT operations, and AI security guardrails in a regulated financial services environment.
Principal-level network architect to design, expand, and commercialize private connectivity, cloud interconnect, and transport services. Own edge deployments, carrier negotiations, and product packaging for a fully remote infrastructure role.
Senior Security Engineer partnering with Head of Security to build and scale security program for DeFi systems. Owns threat modeling, AppSec tooling, detection operations, vulnerability triage, and AI-driven automation across product, infrastructure, and operations.
Own IAM strategy and architecture across corporate and production environments. Migrate Okta to Terraform, enforce least-privilege access, and drive automation for provisioning and device management.
Entry-level Information Security Analyst supporting security assurance operations, customer questionnaires, and compliance activities for a healthcare intelligence company. Bachelor's degree or equivalent required; cybersecurity background helpful but not mandatory.
Staff engineer on the security and privacy team responsible for security reviews, triaging reports, designing privacy-preserving protocols, and implementing new security features across Brave browser and Search.
Senior individual contributor anchoring security operations. Owns complex SecOps work end-to-end: threat hunting, IR/forensics, vuln management, attack surface management, and AI-assisted detection engineering in a HIPAA-regulated environment.
Senior Security Engineer responsible for identifying infrastructure and product risks, defining remediation roadmaps, and building scalable secure engineering systems. Requires 5+ years in security engineering and strong IaC and code review experience.
Senior Software Engineer on the Core Cryptography team building and operating Tier-0 cryptographic infrastructure including MPC systems that secure 99% of customer assets. Requires 5+ years building highly available distributed systems and experience with applied cryptography, KMS/HSMs, and systems languages (Golang-heavy).
Lead security, compliance, and IT functions including SOC 2, ISO 27001, privacy, risk management, and external industry presence. Requires 7+ years in security/compliance/IT with direct experience leading compliance programs.
Design and deliver physical security technology architecture for AI data centers, establishing standards for access control, surveillance, and monitoring systems across global infrastructure. Requires 15+ years in physical security systems architecture and hands-on implementation experience.
Monitor physical security systems, open-source threat intelligence, and travel safety tools to maintain situational awareness and respond to global incidents impacting employee safety and business operations.
Senior Security Engineer owning data security infrastructure including classification, masking, encryption, and AI data pipelines. Hands-on builder who defines and executes the data protection roadmap.
Lead security operations and threat detection engineering for a remote-first telemetry platform company. Design detection logic, manage incidents, and optimize SIEM/EDR tooling.
Principal Architect defining end-to-end architecture for a multi-tenant cloud-native SaaS data platform. Sets vision across cloud infrastructure, data streaming, AI/ML integration, security, and developer experience while mentoring senior engineers and influencing C-suite decisions.
Security Engineer contributing to application security assessments, vulnerability discovery, and custom tooling development. Owns components of client engagements and drives findings from discovery through delivery.
Lead privacy engineering projects protecting user data across search, browser, and AI features. Own major privacy components, participate in audits, and mentor engineers using Go, Node.js, Python, or Perl.
Lead privacy engineering initiatives across private browsing, search, and agentic products. Own complex privacy projects from definition to delivery, evolve review processes, and grow privacy engineering talent.
Product Security Engineer embedding into engineering workflows to conduct architecture reviews, threat modeling, and penetration testing coordination while serving as GCP security SME. Requires 5-7 years experience and strong GCP and Python skills.
Senior Staff Security Engineer owning the roadmap for an AI-driven vulnerability scanning, triage, and automated remediation platform. Requires 8+ years in security engineering with deep cloud/container expertise, offensive security experience, and proficiency in Python/Go/Rust.
Application Security Engineer partnering with engineering teams to embed security into the SDLC, triage SAST/SCA findings, provide remediation guidance on OWASP issues, maintain security docs/playbooks, support governance/audits, and integrate GenAI tools while building AI governance guardrails.
Senior Security Engineer responsible for security reviews, triaging reports, implementing security code, and penetration testing across Brave browser and Search. Requires 5+ years security engineering experience, C++ proficiency, web security knowledge, and AWS infrastructure experience.
Red Team Engineer on Anthropic's Safeguards team performing adversarial testing and full kill-chain attacks on AI products to uncover vulnerabilities, jailbreaks, and novel abuse vectors before malicious exploitation. Requires strong pen-testing, red teaming, and LLM-specific security experience.
Lead GameChanger's Information Security and IT Operations as Director. Own multi-year security strategy, lead multidisciplinary teams across product security, cloud/AI security, SecOps, GRC, and internal tech support. Partner with executive leadership and parent company DSG while building security culture. Requires 10+ years security experience including people management.
Lead a remote Security Detection & Response team at Apollo.io. Hands-on manager responsible for detection engineering, incident response, Panther content, Python automation, AI triage workflows, and cross-functional security improvements in a cloud/SaaS environment. Requires 5+ years security engineering experience and 2+ years people management.
Own and evolve Confluent's internal access management program with focus on machine/workload identity, S2S auth, non-human identities, and AI agent controls. Set the Access Management Standard, own metrics/reporting/OKRs, and drive governance, risk reduction, and cross-functional execution for least-privilege outcomes.
Senior/Staff Infrastructure Security Engineer building self-service security platforms, automating DevSecOps workflows, and designing high-scale security data pipelines and IaC guardrails in a greenfield cloud-native environment at an AI healthcare company. Requires 8+ years software engineering experience with deep cloud and IaC expertise.
Get a push notification when a new job matches your saved alert criteria.
IAM Engineer responsible for implementing and improving identity and access management tooling (Okta, ConductorOne, Terraform) with RBAC/ABAC/JIT controls. Requires 2+ years experience in IAM infrastructure, scripting, and IGA platforms in a fast-paced crypto environment.
Technical lead performing advanced offensive security work including full-stack pentesting, red team operations, custom exploit development, AI/LLM red teaming, and bug bounty management. Requires 7-10 years experience, deep expertise in MITRE ATT&CK and OWASP, and proficiency with industry tools and scripting.
Build automation, tooling, and secure software systems as part of Pinterest's Corporate Security team. Integrate security into development lifecycles, improve threat detection/remediation, and leverage AI while maintaining critical verification and ownership.
Lead design and management of Identity and Access Management systems using Okta and ConductorOne. Focus on SSO integrations, provisioning, access reviews, least privilege enforcement, and automation for a rapidly growing health platform.
Staff Security Software Engineer leading AI red teaming, adversarial testing, architecture reviews, and security tooling development for Databricks' AI/ML platform (Genie, Model Serving, RAG, agents). Requires 7+ years in offensive/AI security, expertise in 2+ AI security domains, Python proficiency, and cloud security knowledge.
Staff Security Software Engineer leading architecture, standards, and development of AI security tooling, threat detection, and red-teaming platforms at Databricks. Requires 7-10 years security engineering experience, expert Python skills, and deep AI/ML security expertise.
Security Engineer partnering with engineering to implement and improve security controls across AWS infrastructure and applications. Lead technical customer security reviews, enhance monitoring/detection, support SOC 2/ISO compliance, and integrate security into CI/CD pipelines. Requires 3+ years experience in security engineering.
Senior Privacy Engineer building and operating privacy-by-design systems, APIs, and controls for data governance, minimization, and ML pipelines at an AI lending platform. Requires 5+ years software engineering experience and background in privacy/security domains.
Senior Security Automation Engineer building centralized security telemetry, universal identity provisioning, and agentic risk engines to enable continuous compliance, self-healing controls, and real-time risk visibility at ClickHouse. Requires strong IAM/IGA and automation experience with Python, JS/TS, or Go.
Serve as the primary contact for customer security questionnaires, contract redlining, and Trust Center management using AI tools. Requires 2-4 years in GRC/Security Operations, knowledge of SOC2/ISO/NIST/GDPR/CCPA, and strong communication skills.
Build and improve detection alerts, automation, logging pipelines, and internal tooling to identify and respond to security threats at Pinterest. Requires strong incident response, SIEM, threat hunting, and scripting skills in cloud environments, plus demonstrated responsible use of AI.
Senior Application Security Engineer embedded with product and engineering teams at Monarch, a personal finance platform. Conduct AppSec reviews, SAST/DAST, vulnerability management, and AI security for LLM features on Django/Python stack. Requires 5+ years in security engineering with Python and web security expertise.
Lead security operations for a Connected TV advertising platform, including monitoring, incident response, threat hunting, automation, and embedding security into cloud infrastructure and DevOps workflows. Requires 5+ years SecOps experience, SIEM expertise, cloud security (AWS/GCP), scripting, and knowledge of security frameworks.
Lead MNTN's security operations including threat detection, incident response, vulnerability management, and cloud security. Build and mature the security program in a cloud-first SaaS environment while partnering with engineering, leadership, and compliance teams.
Senior Red Team Engineer performing security assessments, vulnerability discovery, and tool development across Snowflake's cloud environments. Requires 4+ years in offensive security, cloud knowledge (AWS/GCP/Azure), and coding in languages like Python or Go; 6+ years and community contributions preferred.
Senior Security Engineer on the Red Team performing offensive security, adversarial testing, and red team operations against GenAI/LLM systems, deepfake defenses, cloud infrastructure, and SaaS products. Requires 3+ years of hands-on pen testing/red team experience plus demonstrable GenAI attack experience.
Lead and mature GitLab's security compliance function, overseeing certifications (SOC 2, ISO 27001, FedRAMP), driving automation/AI improvements, and partnering cross-functionally to integrate GRC into business and technical processes. Requires deep frameworks expertise, team leadership, and risk-based mindset.
Senior Security Engineer responsible for threat modeling and securing Reddit's AI-powered products, LLMs, and agentic workflows. Build reusable security primitives, guardrails, scanners, and platform controls while partnering with AI product teams. Requires 5+ years in application/product security plus familiarity with LLM/agent risks.
Senior Security Engineer owning risk identification, threat modeling, vulnerability management, and secure architecture projects. Partners with engineering to build security culture and tools while minimizing operational friction. Requires independent ownership, software development experience, and strong collaboration skills.
Lead customer trust programs, security governance, metrics, and awareness at GitLab. Oversee contract reviews, questionnaires, policy development, and cross-functional partnerships to reduce sales friction and demonstrate security posture.
Staff Software Engineer on the IAM team designing, delivering, and supporting digital identity, authentication, and access systems. Requires 10+ years backend experience, deep IAM expertise, and proficiency in Go/Python/Java/TypeScript.
Product Security Engineer driving threat modeling, secure code review, open-source security, SDLC tooling, and bug bounty management for Vercel's web platform built on Next.js and Node.js. Requires 5+ years securing web products with strong JavaScript/Node.js and cloud security expertise.
Security Engineer building and hardening cloud-native security controls, infrastructure-as-code, and CI/CD pipelines for a scalable platform. Requires 8+ years in infrastructure/platform security and deep expertise in AWS/GCP and Kubernetes.
Lead end-to-end product security for consumer products, digital platform, and hardware devices. Drive threat modeling, penetration testing, PSIRT operations, and AI security guardrails in a regulated financial services environment.
Principal-level network architect to design, expand, and commercialize private connectivity, cloud interconnect, and transport services. Own edge deployments, carrier negotiations, and product packaging for a fully remote infrastructure role.
Senior Security Engineer partnering with Head of Security to build and scale security program for DeFi systems. Owns threat modeling, AppSec tooling, detection operations, vulnerability triage, and AI-driven automation across product, infrastructure, and operations.
Own IAM strategy and architecture across corporate and production environments. Migrate Okta to Terraform, enforce least-privilege access, and drive automation for provisioning and device management.
Entry-level Information Security Analyst supporting security assurance operations, customer questionnaires, and compliance activities for a healthcare intelligence company. Bachelor's degree or equivalent required; cybersecurity background helpful but not mandatory.
Staff engineer on the security and privacy team responsible for security reviews, triaging reports, designing privacy-preserving protocols, and implementing new security features across Brave browser and Search.
Senior individual contributor anchoring security operations. Owns complex SecOps work end-to-end: threat hunting, IR/forensics, vuln management, attack surface management, and AI-assisted detection engineering in a HIPAA-regulated environment.
Senior Security Engineer responsible for identifying infrastructure and product risks, defining remediation roadmaps, and building scalable secure engineering systems. Requires 5+ years in security engineering and strong IaC and code review experience.
Senior Software Engineer on the Core Cryptography team building and operating Tier-0 cryptographic infrastructure including MPC systems that secure 99% of customer assets. Requires 5+ years building highly available distributed systems and experience with applied cryptography, KMS/HSMs, and systems languages (Golang-heavy).
Lead security, compliance, and IT functions including SOC 2, ISO 27001, privacy, risk management, and external industry presence. Requires 7+ years in security/compliance/IT with direct experience leading compliance programs.
Design and deliver physical security technology architecture for AI data centers, establishing standards for access control, surveillance, and monitoring systems across global infrastructure. Requires 15+ years in physical security systems architecture and hands-on implementation experience.
Monitor physical security systems, open-source threat intelligence, and travel safety tools to maintain situational awareness and respond to global incidents impacting employee safety and business operations.
Senior Security Engineer owning data security infrastructure including classification, masking, encryption, and AI data pipelines. Hands-on builder who defines and executes the data protection roadmap.
Lead security operations and threat detection engineering for a remote-first telemetry platform company. Design detection logic, manage incidents, and optimize SIEM/EDR tooling.
Principal Architect defining end-to-end architecture for a multi-tenant cloud-native SaaS data platform. Sets vision across cloud infrastructure, data streaming, AI/ML integration, security, and developer experience while mentoring senior engineers and influencing C-suite decisions.
Security Engineer contributing to application security assessments, vulnerability discovery, and custom tooling development. Owns components of client engagements and drives findings from discovery through delivery.
Lead privacy engineering projects protecting user data across search, browser, and AI features. Own major privacy components, participate in audits, and mentor engineers using Go, Node.js, Python, or Perl.
Lead privacy engineering initiatives across private browsing, search, and agentic products. Own complex privacy projects from definition to delivery, evolve review processes, and grow privacy engineering talent.
Product Security Engineer embedding into engineering workflows to conduct architecture reviews, threat modeling, and penetration testing coordination while serving as GCP security SME. Requires 5-7 years experience and strong GCP and Python skills.