Senior Security Engineer

Our Engineering Standards at Karbon:

Balance Speed and Quality

Engineers are expected to balance delivery speed with a strong commitment to quality, meeting agreed timelines while producing reliable, maintainable, and well-tested solutions. Sound judgment in making trade-offs between velocity and long-term sustainability is essential.

Collaborate Effectively

Engineering is collaborative by default. Team members are expected to contribute constructively in design discussions, reviews, and planning, communicate clearly about progress and risks, and support shared team outcomes in both hybrid and distributed environments.

Build and Maintain Systems

Engineers are responsible for building new capabilities while maintaining and improving existing systems. This includes designing scalable solutions, reducing technical debt, supporting operational stability, and contributing to continuous improvement.

Operate with Autonomy

A high degree of autonomy is expected. Given clear objectives, engineers should independently translate problems into actionable technical approaches, proactively identify improvements, and continuously expand relevant technical expertise.

Ownership and Accountability

Ownership is fundamental. Engineers are accountable for the quality, performance, and customer impact of their work from design through post-release support, and are expected to follow through on commitments.

AI-Enabled Engineering

AI is reshaping how software is built, and we are committed to leveraging it as a force multiplier for creativity, impact, and capability. Engineers are expected to confidently apply strong technical fundamentals while embracing AI tools and approaches to enhance productivity, problem-solving, and innovation. Curiosity, adaptability, and enthusiasm for integrating AI into meaningful product development are essential.

Contribute to Team Culture

Engineers contribute positively to a culture of professionalism, transparency, low bureaucracy, and mutual respect, strengthening team performance through authenticity, curiosity, and collaboration.

About the Role! 

Seeking a development & cloud focused Senior Security Engineer to join our expanding security team.

The ideal candidate will have passion for AppSec, Cloud and AI. They will be a skilled communicator and relationship builder capable of promoting and building security practices across the organization and into our development processes.

AI is reshaping practices across the board and at Karbon we’re fully committed. We don’t see AI as a replacement but as a force multiplier. We’re looking for Security Engineers who are confident in network & security fundamentals, driven to grow, and excited by the challenges and opportunities AI brings.

What You’ll Own:

• Partner with different areas within Karbon - You will make sure security is embedded from the start from feature design and development to participating in design reviews and threat modelling.
• Balance Security and Delivery - You know how to balance delivery needs with security and can communicate security risks and issues to non technical stakeholders. You understand when it's important to push back, when to compromise and how to work with delivery teams to reach a great outcome.
• You keep up to date on the latest technologies and approaches - You are excited by the new developments such as AI bring to security but also understand the importance of security foundational practices such as good account hygiene, least privilege, attack surface reduction and MFA.
• Identify and assess security risks introduced by AI tools - You’ll assist with reviewing the risks of AI tooling usage & Integration and AI-generated code.
• Apply AI-assisted tooling to accelerate security work - you understand the impact AI can have and utilize it across many areas including triage, threat detection, code review, and documentation.
• Flexibility and confidence to work across multiple security domains - We’re a small team responsible for Security at a fast moving company and you’ll get exposure to many different security domains; you could be assisting with refining and investigating corporate IT security processes in the morning, reviewing a cloud hosted system after lunch and then tweaking detection rules!
• Work effectively as part of a team - Security is a team sport and you understand the need to build relationships and trust across the organization to enhance Karbon’s security posture. You are happy to answer questions and offer advice to teams that will reach out for your assistance.
• Own your work - You take pride in your work, feeling a deep sense of responsibility for the products we develop and ensuring we keep our customers' valuable data secure. This sense of ownership is paramount, and you share this commitment.
• Bring your passion and personality - Your creativity, curiosity, and authentic self make the team stronger. If you've worked in highly political environments, you'll find our culture, free from office politics and valuing openness and authenticity, a refreshing change.
• Help us measure improvement and steer our roadmap - Contribute to Security Metrics so we can track progress and feedback into our roadmap.

What Sets You Apart

4+ years experience in a security or development role across most of the following:

• Collaborating with teams to review designs & implementations for security issues and embedding good security practices across software development
• Triaging issues and reports, assisting teams to remedy items and testing fixes
• Working with external penetration test companies to validate and prioritize findings
• Conducting risk and vulnerability assessments of web applications and APIs and third party suppliers and integrations
• Configuring and tuning SAST, SCA and DAST Tooling
• Working with build/deployment pipelines to incorporate security tooling (Github Actions or Azure Devops YAML based pipelines)
• Assisting with implementing security focused alerting and detections and automations
• Conducting and facilitating organizational & developer focused security training
• Assisting with operational security items such as EDR alerts and MDM
• Contributing to our security roadmap

In addition you’ll need:

• Strong communication skills (spoken and written) 
• Some of the following Languages/Frameworks: Microsoft .NET/C#, JavaScript (we use React and EmberJS frameworks and, Python)
• At least one cloud platform: Azure, AWS or GCP (we use Azure predominantly)
• Working knowledge of PowerShell or Bash and Python
• Working knowledge of at least one AI development tool e.g. Claude Code, GitHub Co-Pilot etc
• Portswigger Burp or similar
• Certifications such as Offsec OSCP & AWAE, GIAC, Burp Practitioner, PJPT, Microsoft/AWS development and cloud related are nice to have
• Experience with securing AI applications, systems and AI tooling would be highly regarded

Why Work at Karbon?

• Gain global experience across Australia, New Zealand, UK, and Canada
• Strong benefits package including:
• Flexible Time Off with an encouraged 4 weeks use per year
• Company paid medical for you and eligible spouse/partner and dependents
• Paid dental and vision and eligible spouse/partner and dependents
• 401(k) with company matching
• Flexible Spending Account
• Up to 8 weeks paid parental leave
• Work-from-home stipend
• Work with (and learn from) an experienced, high-performing team
• A collaborative, team-oriented culture that embraces diversity, invests in development and provides consistent feedback
• Be part of a fast-growing company that firmly believes in promoting high performers from within

Who you'll work with

You will join one of our offices around the world to work in teams and directly interact with our partners, providers, and venues.

In this role, you will help Fever grow its pipeline of original events in the region. To do so, you will manage and grow a team of Project Managers, Producers, and other types of profiles, while working together with all departments of Fever, from Marketing to Operations.

The team you’re about to join (and lead) consists of people that are motivated, young, and fun. On top of having multicultural backgrounds, people in the team are all top profiles: McKinsey, BCG, Bain, Rocket Internet, Uber, Amazon, Google, KKR, Cirque du Soleil, PSG, Roland Garros.

What you'll do

As a Regional Manager, you will create and lead a team to develop, launch and manage events, from A to Z. You will be responsible for the region’s P&L, team development, development of local connections in the industry and represent Fever across all cities you will be managing. Together with the other departments, you will define the strategy to grow the business in your region and define the scalability of events to all our other markets, working hand in hand with other Regional Managers and the company’s leadership. 

Employees are expected to be in the office Monday to Thursday with possibility to work from home on Fridays.

In this role you'll:

• Build and manage the team for the West Coast (Project Managers, Producers, Location Scouters, etc) that will be generating growth for the countries within the scope
• Ensure individual team members are effective in achieving their quality and revenue goals on a quarterly basis, by auditing their work and performance on a regular basis
• Define the strategy of the region for its growth by ensuring maximum sales performance, customer excellence, and operational quality of our events, to meet quarterly and annual regional goals in all KPIs
• Manage the local portfolio of experiences based on data analyses, ensuring Fever’s penetration in the local market 
• Develop and maintain a very high level of relationship with C-level executives from major entertainment companies
• Manage big local partners and ensure our local network keeps expanding 
• Negotiate and close business deals with partners
• Define and support the scalability of our experiences in other cities (opportunity for travel)
• Report performance on a weekly, monthly, and quarterly basis
• Provide coaching, mentoring, and feedback to local team members 
• Execute detailed analysis of business opportunities and processes
• Represent Fever at local events and conversations
  

Qualifications

• Project management / startup or consulting background (10y+ experience)
• MBA from top-tier school preferred
• Fluent English
• Strong analytical and organizational skills with large team management experience
• Solution-focused, identifying problems and defining solutions with an entrepreneurial spirit
• Experience managing complex projects
• Strong verbal and written communication skills, with strong skills in creating and developing relationships with C-level executives.
• Ability to influence/persuade all levels of staff. 
• Able to coordinate and audit all different internal and external teams to guide them to success in all achievements.
• Extensive networking skills and ability to make partnerships happen. 
• Advanced commercial acumen - ability to understand counterparty, find leverage and negotiate high value deals with favourable terms for Fever
• Curious and keen to push boundaries and try new concepts while being in contact with the top management - very high visibility and exposure both internally and externally.
• Able to handle large amounts of work and parallel work-streams
• This is not a position for an event production background
  

Benefits

• Attractive total compensation package (base + bonus included) between 200-250k.
• Opportunity to have a real impact in a high-growth global category leader
• 40% discount on all Fever events and experiences
• Health, dental and vision insurance 
• 401k pension plan enrollment
• Possible travel across our markets
• Responsibility from day one and professional and personal growth
• Great work environment with a young, international team of talented people to work with

Our hiring process

• A 30 min video call with one of our Talent Acquisition Managers, to better understand your career plan, assess cultural fit and answer any questions you may have
• A 60 min online test with three topics: logic, analytics, and written understanding
  
• A 30 minute conversation with your Hiring Manager to understand in more detail the position/team etc.
• A 45 min video call with your future manager + another FO manager, including questions about your profile and a business case presentation (to be prepared in advance)

On average our process lasts 20 working days and offers usually follow within a week.

THE OPPORTUNITY

Silvus is seeking a Senior Offensive Security Engineer – Embedded Systems who will report to the Director of Software Engineering on the Software Engineering team. The successful individual in this role will focus on proactively identifying and exploiting vulnerabilities in embedded systems (hardware, firmware, and associated software) to improve overall security posture. This role utilizes techniques such as penetration testing, reverse engineering, and threat modeling to find weaknesses in system design and architecture. 

This position is based at Silvus Technologies’ headquarters in the heart of vibrant West Los Angeles, CA and is on a hybrid schedule; a minimum of 3 days onsite per week is expected. On-site days are Mondays, Wednesdays, and Thursdays.

The following is a list of at least some of the current essential job functions of the position. Management may assign or reassign duties and responsibilities at any time at its discretion.

 ROLE AND RESPONSIBILITIES

• Assess security posture of Silvus-built software, hardware and firmware as well as the third-party components used in our products.
• Provide expertise to other Silvus teams on real-world attack vectors and work with appropriate team members to implement and test mitigations.
• Plan for, build and maintain capabilities needed to execute red team projects.
• Perform other related duties of which the above are representative.

REQUIRED QUALIFICATIONS

• High School diploma or GED plus 3 years of experience in cybersecurity, with at least 1 year in an offensive security role (e.g., penetration testing, red teaming, vulnerability assessment).
• Broad experience assessing the security posture of everything from web applications to hardware and embedded systems.
• Demonstrated experience leading offensive security engagements.
• Experience with assessment of cloud based and containerized environments (AWS, Azure, Kubernetes).
• Proven experience assessing and improving the security of mobile devices (Android and/or iOS).
• Proficient with one or more programming languages (e.g. Rust, C/C++, Golang, Swift).
• Security Clearance: Active U.S. Government SECRET clearance or the ability to obtain one within 15 months of hire.
• Must be a U.S. Citizen due to clients under U.S. government contracts.
• All employment is contingent upon the successful clearance of a background check and drug test.

 PREFERRED KNOWLEDGE, SKILLS AND ABILITIES

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (e.g., Mathematics, Computer Engineering).
• Considerable experience building custom tooling to assist in offensive security activities.
• Experience weaponizing vulnerabilities to provide unique capabilities.
• Familiarity with security architectures of robot platforms (consumer or otherwise), aerospace, and physical systems.
• In-depth experience developing features for and improving security of mobile applications, networks, or embedded systems.
• Strong familiarity with mobile device exploitation techniques.
• Broad familiarity with anti-tamper and reverse engineering mechanisms.
• Regularly build, test, and deliver production-ready systems, especially for embedded and/or mobile.
• Strong professional communication skills (written and verbal).

WORKING CONDITIONS & PHYSICAL REQUIREMENTS

• Office environment.
• While performing the duties of this job, the employee is required to do the following:
  • Lift equipment up to 20 lbs. for the set-up of demonstrations or testing.
  • Perform bending and reaching movements to place items on lower and higher shelves.
  • Kneeling or squatting to access lower shelves.
  • Walking/Moving in the labs.

THE OPPORTUNITY

Silvus is seeking a Senior Defensive Security Engineer – Embedded Systems who will report to the Director of Software Engineering on the Software Engineering team. The successful individual in this role will focus on protecting our embedded systems from potential threats by designing and implementing robust security measures, conducting security assessments, and ensuring compliance with industry standards. 

This position is based at Silvus Technologies’ headquarters in the heart of vibrant West Los Angeles, CA and is on a hybrid schedule; a minimum of 3 days onsite per week is expected. On-site days are Mondays, Wednesdays, and Thursdays.

The following is a list of at least some of the current essential job functions of the position. Management may assign or reassign duties and responsibilities at any time at its discretion.

 ROLE AND RESPONSIBILITIES

• Design and implement Linux-based security architectures for embedded systems, focusing on secure boot, and kernel hardening.
• Develop and enforce Linux security features, including iptables, netfilter, and auditd for intrusion detection and prevention.
• Conduct security assessments and audits of Linux-based embedded systems to identify and mitigate vulnerabilities.
• Integrate Linux security best practices into the development lifecycle (DevSecOps), emphasizing secure coding and configuration management.
• Manage vulnerabilities in Linux-based embedded systems, including timely patching and kernel updates.
• Train teams on Linux security practices, including privilege management, file system permissions, and container security.
• Participate in incident response planning and execution for Linux-based embedded systems.
• Implement Linux-native encryption and authentication mechanisms (e.g., dm-crypt, OpenSSL, PAM) for secure communications.
• Perform other related duties of which the above are representative.

REQUIRED QUALIFICATIONS

• High School diploma or GED plus 5 years of experience in cybersecurity, with at least 2 years of experience in defensive security roles focused on Linux based systems (e.g., penetration testing, red teaming, vulnerability assessment).
• Expertise in Linux network security, secure coding, or embedded systems security.
• Coding/scripting in embedded C/C++ for Linux environments.
• Familiarity with Linux security tools like auditd, Lynis, or vulnerability scanners.
• Security Clearance: Active U.S. Government SECRET clearance or the ability to obtain one within 15 months of hire.
• Must be a U.S. Citizen due to clients under U.S. government contracts.
• All employment is contingent upon the successful clearance of a background check and drug test.

 PREFERRED KNOWLEDGE, SKILLS AND ABILITIES

• Bachelor or Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• One or more of the following certifications: CISSP, CISM, GIAC Security Expert (GSE), CompTIA Security+, or Linux-specific (e.g., LFCS, RHCE).
• Hands-on experience implementing Linux security controls, such as SELinux, AppArmor, or iptables, and conducting security assessments.
• Proficiency in Linux security frameworks, such as CIS Benchmarks, NIST SP 800-53, or STIGs.
• Broad experience with Linux secure development lifecycle (SDL) practices.
• Knowledge of Linux threat intelligence and threat modeling.
• Familiarity with Linux container security (e.g., Docker, Podman) and cloud environments.
• Strong communication skills to explain Linux security concepts to technical and non-technical audiences.
• Collaborative teamwork with cross-functional groups.
• Experience securing resource-constrained Linux-based embedded systems.
• Understanding of real-time Linux systems and their security implications.
• Knowledge of Linux hardware security integration, such as TPM or Secure Enclave.
• Demonstrated experience designing secure Linux communication systems with encryption, authentication, and key management.
• Familiarity with mobile ad-hoc networking security on Linux platforms.

WORKING CONDITIONS & PHYSICAL REQUIREMENTS

• Office environment.
• While performing the duties of this job, the employee is required to do the following:
  • Lift equipment up to 20 lbs. for the set-up of demonstrations or testing.
  • Perform bending and reaching movements to place items on lower and higher shelves.
  • Kneeling or squatting to access lower shelves.
  • Walking/Moving in the labs.