Senior Security Operations Engineer drives security projects, scales detection/response, manages vulnerability remediation, and threat hunts in cloud environments. Requires 8+ years experience with AWS/Azure security tools, containers, automation, and on-call rotations.
Application Security Intern supports security reviews, threat modeling, and testing for services and APIs handling sensitive payment data. Partners with engineering to improve secure SDLC practices and tooling; requires foundational app sec knowledge and coding ability in languages like Java, Python, or Go.
Designs and builds security tools and frameworks in Rust, C++, Python for AI/ML, compilers, and low-level systems. Contributes to open-source, performs code reviews, and communicates findings via blogs and presentations.
Build scalable systems and data pipelines for security observability, enhancing detection, forensics, and compliance. Requires strong engineering in Python/Golang, Terraform, Azure, and data pipelines with a generalist SRE mindset.
Cloud Security Engineer secures AWS and Kubernetes infrastructure using Terraform IaC, conducts threat modeling and audits, embeds security in CI/CD pipelines, and ensures compliance with standards like SOC 2 and HIPAA. Requires 5+ years experience with AWS and Kubernetes security expertise.
Integrates security into product design, conducts threat modeling and risk assessments, manages secure development pipelines, and triages vulnerabilities. Requires 5+ years in app security, Kubernetes expertise, and strong collaboration with engineering teams.
Leads the security organization, defines long-term strategy to protect health data and enable AI innovation, builds scalable security architecture, and partners with engineering/data science on secure-by-design practices. Requires healthcare security experience, AWS/cloud expertise, and SOC 2 leadership.
Senior Security Engineer builds software solutions and tools to mitigate risks, conducts security reviews and threat modeling, and leads incident response while mentoring teams to elevate organizational security maturity.
Builds and maintains production-grade security services, tools, and workflows like vulnerability management orchestration to secure developer and consumer products at scale. Partners with product engineers on secure development practices and incident response; requires 2+ years experience architecting secure, scalable systems.
Senior Security Operations Engineer owns SOC operations using Google SecOps and SentinelOne, builds detection rules and SOAR playbooks, manages incident response and vulnerability remediation, and provides technical leadership to analysts. Requires 6+ years in security operations with hands-on SIEM/EDR experience.
Security Engineer specializing in product security designs and implements AWS security controls, performs vulnerability assessments, integrates security into DevOps, and mentors engineers to protect cloud, mobile core, and app infrastructure. Requires 5+ years experience with 3+ in AWS.
Designs, implements, and manages security controls focused on detection and response in AWS environments. Runs detection tooling, automates security tasks, mentors team, and integrates security into business initiatives. Requires 7+ years experience with 3+ in detection/response.
Maintains US government compliance certifications like GovRAMP and FedRAMP, conducts risk assessments using NIST/CIS, builds documentation, and automates compliance tooling for cloud environments and CI/CD pipelines. Requires experience in regulated industries and compliance tools like Vanta.
Owns end-to-end execution of GRC programs including SOC 1/2, PCI DSS, and ISO 27001 audits, control design, risk assessments, and vendor management. Partners with engineering to implement technical controls and documentation for scalable compliance in fintech.
Handles security incidents, develops detection and response processes, maintains logging platforms, and automates risk mitigation for cloud services. Requires experience in incident response, threat modeling, cloud security, and programming in Golang/Python.
Secures enterprise applications, integrations, data flows, and AI-adjacent use cases through security design reviews, risk assessment, and defining secure requirements. Partners with IT, Engineering, and stakeholders to enable scalable security practices. Requires 7+ years in security engineering.
Leads design and implementation of backend services and security tool integrations (EDR, SIEM, identity) for detection platform. Requires backend expertise in TypeScript/Node.js, distributed systems, security concepts, and technical leadership.
Cloud Security Engineer leads secure cloud configurations in AWS (primary), Azure, and GCP, owning governance, IAM, vulnerability management, and secure-by-default patterns for engineering teams. Requires 5+ years experience with deep AWS security expertise and Terraform proficiency.
Designs and builds scalable security controls and services for MongoDB Atlas multi-cloud infrastructure using Linux mechanisms, Kubernetes, and eBPF. Requires 5+ years experience in software/SRE with security focus, proficiency in systems programming, and cloud platforms.
Leads architecture and implementation of planet-scale security services like authN/Z, proxies, and key management for OpenAI's GPU clusters, multi-cloud infra, and AI models. Requires expertise in secure distributed systems, cloud platforms, and cross-team leadership.
Principal Security Engineer leads security for OpenAI's infrastructure including GPU clusters, multi-cloud, datacenters, and Kubernetes. Drives strategy, builds controls against advanced threats, and mentors teams with deep cloud and on-prem expertise.
Owns end-to-end security including application, cloud infrastructure, operational security, incident response, and compliance at a growth-stage security company. Ships production TypeScript, builds tooling, and drives security roadmap while fostering engineering culture.
Develops security features for Teleport's open core platform, focusing on application security, vulnerability fixes, and integrations like Device Trust and KMS storage. Requires Go or Rust, Linux systems engineering experience; cryptography a plus.
Enhance security of cloud infrastructure, protect patient data, and collaborate with engineering teams. Requires 4+ years infrastructure/cloud security experience, 3+ years AWS, IaC tools like Terraform, and Kubernetes/EKS expertise.
Security Engineer drives security improvements across Figma's AI, platform, product, and anti-abuse teams through assessments, tooling development, threat detection, and incident response. Requires 5+ years engineering experience, strong security judgment, and proficiency in a general-purpose language.
Security Engineer embeds security into development lifecycle, conducts threat modeling, builds automated scanning in AWS CI/CD pipelines, leads incident response, and implements compliance controls like ISO 27001. Requires 5+ years experience, AWS mastery, coding in C#/Python, and automation skills.
Senior Developer builds Windows security features using Rust and other languages, develops secure libraries, resolves vulnerabilities, and leads secure coding practices. Requires 4+ years experience in Windows security development and cryptography.
Build security tooling and enhancements to protect Pinterest's platform and users, focusing on secure development lifecycle, assessments, and AI threat mitigation. Requires 5+ years in application/product security and Python proficiency.
Staff-level AppSec engineer building secure coding practices and vulnerability management for a commerce platform. Requires 6+ years in application security with deep AWS and Python experience.
Leads security compliance and risk management projects, driving certifications like FedRAMP and PCI in a cloud-native environment. Requires 4+ years in security program management, cross-functional collaboration, and a bachelor's in CS or equivalent.
Senior Security Engineer owns security across infrastructure (GKE, GCP) and application stack, builds tooling/automation for secure-by-default development, leads threat modeling, red teaming, bug bounty, and incident response in a fast-paced startup. Requires 6+ years security engineering experience.
Security Engineer enhances AWS serverless infrastructure security, develops playbooks, improves compliance with SOC/HIPAA/HITRUST, and collaborates on secure CI/CD and app design. Requires 4+ years AWS experience and TypeScript proficiency.
Conduct manual penetration testing on web apps, APIs, networks, and iOS/Android mobile apps as part of a pentest team. Document findings, validate vulnerabilities, and focus on OWASP Top 10 for US-resident freelancers.
Performs manual penetration testing on web apps, APIs, networks, and iOS/Android mobile apps as part of a pentest team. Documents findings, validates vulnerabilities, and targets OWASP Top 10; not entry-level, freelance part-time role.
Senior Software Engineer building security features for Teleport's access platform, focusing on cryptography, networking, automation, AI agents, and detection/response using Go/Rust. Contributes to open-source code reviews, vulnerability hunting, and hardening defenses.
Leads SOC 1/2 and SOX compliance, manages IT controls audits, gap assessments, and remediation in a crypto/Web3 environment. Requires 5+ years external IT audit experience, Big 4 background preferred, strong cross-functional collaboration.
Four-month fellowship for researchers and engineers to conduct empirical AI security research, producing public outputs like papers. Requires strong technical background, Python fluency, and interest in AI safety; open to remote in US/UK/Canada.
Software engineer focused on security and privacy, improving Tailscale's security through feature development, audits, threat modeling, and spending 50% time writing code. Requires proficiency in Go or similar, security experience, and deep knowledge of vulnerabilities and cryptography.
Builds security controls across cloud, Kubernetes, networks, and CI/CD for Tailscale. Audits infrastructure, implements security features in Go/Terraform, and provides threat modeling expertise. Requires cloud security and infrastructure experience.
Leads Application Security practice performing code audits, vulnerability research, and secure design reviews. Hands-on leader managing team, P&L, client relationships; requires 10+ years security experience and proficiency in multiple languages.
Staff Software Engineer leading platform security initiatives, building secure IAM systems, cloud infrastructure baselines, and supply chain security tools. Requires 5+ years in production systems, software development in Python/Rust, and securing large-scale cloud environments.
Principal Engineer leads Authentication strategy at Databricks, crafting secure, scalable systems with 10+ years in data security, 15+ in distributed systems, and MS/PhD required. Mentors teams and drives executive decisions.
Principal Engineer leads Authentication strategy at Databricks, crafting secure, scalable systems with 15+ years in distributed systems and data security expertise. Requires MS/PhD, leadership, and experience in identity management and access control.
Product Security Engineer embeds security in Databricks' SDLC through threat modeling, design reviews, code audits, exploit development, and tool automation. Requires 2-4 years threat modeling experience and proficiency in Python/Java/Scala/JavaScript.
Designs and implements scalable ML-driven intrusion detection solutions, optimizes log pipelines, and enhances threat detection on Databricks platform. Requires 10+ years experience in security detection engineering and expertise in cloud security, Python, and Spark.
Leads Security Operations engineering team, driving hiring, mentoring, roadmap refinement, and excellence in vulnerability management and incident response. Requires 8+ years technical experience with 3+ years leadership in distributed teams.
Senior Product Security Engineer leads security initiatives, conducts threat modeling and architecture reviews, and builds secure systems using AWS, Kubernetes, and modern languages. Requires 5+ years software experience and deep web app security knowledge.
Security engineer on internal Red Team stress-testing blockchain infrastructure by hunting vulnerabilities, building Rust fuzzers, simulating economic attacks, and dissecting EVM internals. Requires Rust fluency, EVM expertise, and proven offensive security track record like CTFs or bug bounties.
Leads the development and evolution of the Application Security program, integrating security practices into SDLC through threat modeling, code reviews, and pen testing. Collaborates with engineering teams on web, mobile, and API security for a SaaS platform; requires 10+ years experience building AppSec from inception.
Analyzes software supply chain threats using AI scanners, conducts malware analysis and threat hunting, builds automation tools, and integrates research into products to protect open source ecosystems. Requires 3+ years in security operations and master's degree.
Senior Security Operations Engineer drives security projects, scales detection/response, manages vulnerability remediation, and threat hunts in cloud environments. Requires 8+ years experience with AWS/Azure security tools, containers, automation, and on-call rotations.
Application Security Intern supports security reviews, threat modeling, and testing for services and APIs handling sensitive payment data. Partners with engineering to improve secure SDLC practices and tooling; requires foundational app sec knowledge and coding ability in languages like Java, Python, or Go.
Designs and builds security tools and frameworks in Rust, C++, Python for AI/ML, compilers, and low-level systems. Contributes to open-source, performs code reviews, and communicates findings via blogs and presentations.
Build scalable systems and data pipelines for security observability, enhancing detection, forensics, and compliance. Requires strong engineering in Python/Golang, Terraform, Azure, and data pipelines with a generalist SRE mindset.
Cloud Security Engineer secures AWS and Kubernetes infrastructure using Terraform IaC, conducts threat modeling and audits, embeds security in CI/CD pipelines, and ensures compliance with standards like SOC 2 and HIPAA. Requires 5+ years experience with AWS and Kubernetes security expertise.
Integrates security into product design, conducts threat modeling and risk assessments, manages secure development pipelines, and triages vulnerabilities. Requires 5+ years in app security, Kubernetes expertise, and strong collaboration with engineering teams.
Leads the security organization, defines long-term strategy to protect health data and enable AI innovation, builds scalable security architecture, and partners with engineering/data science on secure-by-design practices. Requires healthcare security experience, AWS/cloud expertise, and SOC 2 leadership.
Senior Security Engineer builds software solutions and tools to mitigate risks, conducts security reviews and threat modeling, and leads incident response while mentoring teams to elevate organizational security maturity.
Builds and maintains production-grade security services, tools, and workflows like vulnerability management orchestration to secure developer and consumer products at scale. Partners with product engineers on secure development practices and incident response; requires 2+ years experience architecting secure, scalable systems.
Senior Security Operations Engineer owns SOC operations using Google SecOps and SentinelOne, builds detection rules and SOAR playbooks, manages incident response and vulnerability remediation, and provides technical leadership to analysts. Requires 6+ years in security operations with hands-on SIEM/EDR experience.
Security Engineer specializing in product security designs and implements AWS security controls, performs vulnerability assessments, integrates security into DevOps, and mentors engineers to protect cloud, mobile core, and app infrastructure. Requires 5+ years experience with 3+ in AWS.
Designs, implements, and manages security controls focused on detection and response in AWS environments. Runs detection tooling, automates security tasks, mentors team, and integrates security into business initiatives. Requires 7+ years experience with 3+ in detection/response.
Maintains US government compliance certifications like GovRAMP and FedRAMP, conducts risk assessments using NIST/CIS, builds documentation, and automates compliance tooling for cloud environments and CI/CD pipelines. Requires experience in regulated industries and compliance tools like Vanta.
Owns end-to-end execution of GRC programs including SOC 1/2, PCI DSS, and ISO 27001 audits, control design, risk assessments, and vendor management. Partners with engineering to implement technical controls and documentation for scalable compliance in fintech.
Handles security incidents, develops detection and response processes, maintains logging platforms, and automates risk mitigation for cloud services. Requires experience in incident response, threat modeling, cloud security, and programming in Golang/Python.
Secures enterprise applications, integrations, data flows, and AI-adjacent use cases through security design reviews, risk assessment, and defining secure requirements. Partners with IT, Engineering, and stakeholders to enable scalable security practices. Requires 7+ years in security engineering.
Leads design and implementation of backend services and security tool integrations (EDR, SIEM, identity) for detection platform. Requires backend expertise in TypeScript/Node.js, distributed systems, security concepts, and technical leadership.
Cloud Security Engineer leads secure cloud configurations in AWS (primary), Azure, and GCP, owning governance, IAM, vulnerability management, and secure-by-default patterns for engineering teams. Requires 5+ years experience with deep AWS security expertise and Terraform proficiency.
Designs and builds scalable security controls and services for MongoDB Atlas multi-cloud infrastructure using Linux mechanisms, Kubernetes, and eBPF. Requires 5+ years experience in software/SRE with security focus, proficiency in systems programming, and cloud platforms.
Leads architecture and implementation of planet-scale security services like authN/Z, proxies, and key management for OpenAI's GPU clusters, multi-cloud infra, and AI models. Requires expertise in secure distributed systems, cloud platforms, and cross-team leadership.
Principal Security Engineer leads security for OpenAI's infrastructure including GPU clusters, multi-cloud, datacenters, and Kubernetes. Drives strategy, builds controls against advanced threats, and mentors teams with deep cloud and on-prem expertise.
Owns end-to-end security including application, cloud infrastructure, operational security, incident response, and compliance at a growth-stage security company. Ships production TypeScript, builds tooling, and drives security roadmap while fostering engineering culture.
Develops security features for Teleport's open core platform, focusing on application security, vulnerability fixes, and integrations like Device Trust and KMS storage. Requires Go or Rust, Linux systems engineering experience; cryptography a plus.
Enhance security of cloud infrastructure, protect patient data, and collaborate with engineering teams. Requires 4+ years infrastructure/cloud security experience, 3+ years AWS, IaC tools like Terraform, and Kubernetes/EKS expertise.
Security Engineer drives security improvements across Figma's AI, platform, product, and anti-abuse teams through assessments, tooling development, threat detection, and incident response. Requires 5+ years engineering experience, strong security judgment, and proficiency in a general-purpose language.
Security Engineer embeds security into development lifecycle, conducts threat modeling, builds automated scanning in AWS CI/CD pipelines, leads incident response, and implements compliance controls like ISO 27001. Requires 5+ years experience, AWS mastery, coding in C#/Python, and automation skills.
Senior Developer builds Windows security features using Rust and other languages, develops secure libraries, resolves vulnerabilities, and leads secure coding practices. Requires 4+ years experience in Windows security development and cryptography.
Build security tooling and enhancements to protect Pinterest's platform and users, focusing on secure development lifecycle, assessments, and AI threat mitigation. Requires 5+ years in application/product security and Python proficiency.
Staff-level AppSec engineer building secure coding practices and vulnerability management for a commerce platform. Requires 6+ years in application security with deep AWS and Python experience.
Leads security compliance and risk management projects, driving certifications like FedRAMP and PCI in a cloud-native environment. Requires 4+ years in security program management, cross-functional collaboration, and a bachelor's in CS or equivalent.
Senior Security Engineer owns security across infrastructure (GKE, GCP) and application stack, builds tooling/automation for secure-by-default development, leads threat modeling, red teaming, bug bounty, and incident response in a fast-paced startup. Requires 6+ years security engineering experience.
Security Engineer enhances AWS serverless infrastructure security, develops playbooks, improves compliance with SOC/HIPAA/HITRUST, and collaborates on secure CI/CD and app design. Requires 4+ years AWS experience and TypeScript proficiency.
Conduct manual penetration testing on web apps, APIs, networks, and iOS/Android mobile apps as part of a pentest team. Document findings, validate vulnerabilities, and focus on OWASP Top 10 for US-resident freelancers.
Performs manual penetration testing on web apps, APIs, networks, and iOS/Android mobile apps as part of a pentest team. Documents findings, validates vulnerabilities, and targets OWASP Top 10; not entry-level, freelance part-time role.
Senior Software Engineer building security features for Teleport's access platform, focusing on cryptography, networking, automation, AI agents, and detection/response using Go/Rust. Contributes to open-source code reviews, vulnerability hunting, and hardening defenses.
Leads SOC 1/2 and SOX compliance, manages IT controls audits, gap assessments, and remediation in a crypto/Web3 environment. Requires 5+ years external IT audit experience, Big 4 background preferred, strong cross-functional collaboration.
Four-month fellowship for researchers and engineers to conduct empirical AI security research, producing public outputs like papers. Requires strong technical background, Python fluency, and interest in AI safety; open to remote in US/UK/Canada.
Software engineer focused on security and privacy, improving Tailscale's security through feature development, audits, threat modeling, and spending 50% time writing code. Requires proficiency in Go or similar, security experience, and deep knowledge of vulnerabilities and cryptography.
Builds security controls across cloud, Kubernetes, networks, and CI/CD for Tailscale. Audits infrastructure, implements security features in Go/Terraform, and provides threat modeling expertise. Requires cloud security and infrastructure experience.
Leads Application Security practice performing code audits, vulnerability research, and secure design reviews. Hands-on leader managing team, P&L, client relationships; requires 10+ years security experience and proficiency in multiple languages.
Staff Software Engineer leading platform security initiatives, building secure IAM systems, cloud infrastructure baselines, and supply chain security tools. Requires 5+ years in production systems, software development in Python/Rust, and securing large-scale cloud environments.
Principal Engineer leads Authentication strategy at Databricks, crafting secure, scalable systems with 10+ years in data security, 15+ in distributed systems, and MS/PhD required. Mentors teams and drives executive decisions.
Principal Engineer leads Authentication strategy at Databricks, crafting secure, scalable systems with 15+ years in distributed systems and data security expertise. Requires MS/PhD, leadership, and experience in identity management and access control.
Product Security Engineer embeds security in Databricks' SDLC through threat modeling, design reviews, code audits, exploit development, and tool automation. Requires 2-4 years threat modeling experience and proficiency in Python/Java/Scala/JavaScript.
Designs and implements scalable ML-driven intrusion detection solutions, optimizes log pipelines, and enhances threat detection on Databricks platform. Requires 10+ years experience in security detection engineering and expertise in cloud security, Python, and Spark.
Leads Security Operations engineering team, driving hiring, mentoring, roadmap refinement, and excellence in vulnerability management and incident response. Requires 8+ years technical experience with 3+ years leadership in distributed teams.
Senior Product Security Engineer leads security initiatives, conducts threat modeling and architecture reviews, and builds secure systems using AWS, Kubernetes, and modern languages. Requires 5+ years software experience and deep web app security knowledge.
Security engineer on internal Red Team stress-testing blockchain infrastructure by hunting vulnerabilities, building Rust fuzzers, simulating economic attacks, and dissecting EVM internals. Requires Rust fluency, EVM expertise, and proven offensive security track record like CTFs or bug bounties.
Leads the development and evolution of the Application Security program, integrating security practices into SDLC through threat modeling, code reviews, and pen testing. Collaborates with engineering teams on web, mobile, and API security for a SaaS platform; requires 10+ years experience building AppSec from inception.
Analyzes software supply chain threats using AI scanners, conducts malware analysis and threat hunting, builds automation tools, and integrates research into products to protect open source ecosystems. Requires 3+ years in security operations and master's degree.