About Us

The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. At the FT, curiosity thrives and ambitious thinking is rewarded. Here, you’re given the chance to reach millions, create work that matters and deliver impartial journalism in a polarised world. In our warm, collaborative culture, you’ll connect with a diverse community of experts who support your growth, career aspirations and wellbeing Your future at the FT will be filled with opportunities that challenge and inspire you. With no fixed path, you’ll discover new skills and forge a career that can take you anywhere. Build a newsworthy career at the FT.

Our Commitment to Diversity, Equity and Inclusion

We believe in the power of unique perspectives and want all voices in our organisation to be heard, respected and valued. A supportive workplace is one where employees feel they can be themselves and operate to their full potential. We are committed to removing barriers for everyone, with a focus on addressing those faced by underrepresented groups.

The Role Overview

We’re looking for a Senior Cyber Security Engineer to help mature application and cloud security across the FT’s cloud-native, AWS-hosted technology estate. This role has an approximate 50/50 focus across application security and cloud security, working closely with product, platform and engineering teams to make secure delivery easier by default.

You’ll shape and improve developer-friendly guardrails across GitHub-based CI/CD pipelines, AWS environments and infrastructure-as-code workflows. This includes improving SAST, software composition analysis, secret scanning, IaC scanning, vulnerability management and AWS misconfiguration management so that findings are actionable, low-noise and owned by the right teams.

Day to day, you’ll run practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. We’re looking for someone who has demonstrably improved security outcomes in real engineering environments, not just someone with theoretical knowledge of tools or frameworks.

Depending on team structure, you may also mentor or line-manage one or two security engineers, while remaining hands-on and close to the technical work.

What you’ll bring to the role

Application and cloud security experience: practical experience across both application security and cloud security, ideally in AWS-hosted, cloud-native environments.

Developer-friendly security mindset: you know how to work with engineers, explain risk clearly and design controls that help teams move securely without unnecessary friction.

Vulnerability management at scale: experience improving how application vulnerabilities, dependency risks, bug bounty findings, penetration test findings and advisories are identified, prioritised, owned and remediated across engineering teams.

Cloud misconfiguration & vulnerability management: experience identifying and reducing infrastructure-as-code and AWS vulnerabilities & misconfigurations at scale through pragmatic guardrails, tooling and clear remediation paths.

Threat modelling: confidence running lightweight, practical threat-modelling sessions that lead to useful engineering decisions and risk reduction.

CI/CD and code security: hands-on experience with security tooling such as SAST, software composition analysis, secret scanning and IaC scanning.

Automation mindset: ability to write scripts or small tools, ideally in Python, to reduce toil, improve visibility and surface meaningful risk.

Security leadership: ability to mentor other security engineers and influence engineers across the wider organisation. Depending on team structure, this may include line management.

AI security awareness: experience of leveraging AI to improve and scale appsec and cloud sec controls would be useful, but is not essential.

Key Responsibilities

Improve application security guardrails
Tune and evolve SAST, software composition analysis, secret scanning and related controls so they are actionable, low-noise and useful to engineering teams.

Improve cloud and IaC security guardrails
Help identify, prioritise and reduce AWS and infrastructure-as-code misconfigurations and vulnerabilities at scale.

Drive vulnerability management
Improve how application vulnerabilities, dependency risks, bug bounty findings, penetration test findings and third-party advisories are triaged, prioritised and remediated.

Drive cloud misconfiguration management
Help teams understand, own and remediate cloud security issues using pragmatic, developer-friendly workflows.

Run practical threat modelling
Facilitate lightweight threat-modelling sessions for new products, features, services and architectural changes.

Build automation and tooling
Create or improve scripts, integrations, dashboards and workflows that reduce manual effort and make risk easier to understand.

Support secure architecture decisions
Provide application and cloud security input into design reviews, AWS architecture decisions and larger technical changes.

Partner with engineering teams
Work closely with product, platform and software engineering teams to embed security into design, delivery and operational practices.

Support incidents and lessons learned
Provide application and cloud security expertise during incidents and feed lessons learned back into patterns, tooling and guidance.

Mentor others
Coach security engineers and engineering teams on practical security approaches. Depending on team structure, this may include line management of one or two security engineers.

Required Experience, Essential: 

• Strong practical experience in application security and cloud security, ideally with a balanced focus across both.
• Hands-on AWS security experience, including common misconfiguration patterns and practical remediation approaches.
• Experience improving vulnerability management across engineering teams, including prioritisation, ownership, remediation tracking and noise reduction.
• Experience in improving cloud or IaC misconfiguration management at scale in a developer-friendly way.
• Experience integrating, tuning or improving security tooling in CI/CD workflows, such as SAST, software composition analysis, secret scanning or IaC scanning.
• Experience running practical threat-modelling sessions that influence design, delivery or remediation decisions.
• Ability to write scripts or small tools, ideally in Python, to automate security workflows or improve visibility.
• Strong communication and collaboration skills, with the ability to influence engineers and technical leaders without relying on gatekeeping.
• Evidence of improving application security, cloud security or vulnerability management practices in a real engineering environment.
• Familiarity with Agile or Scrum ways of working.

Desirable

• Experience with leveraging AI for AppSec and CloudSec.
• AWS Certified Security – Speciality or equivalent practical AWS security experience.
• Terraform or CloudFormation expertise.
• Incident-management or incident-response experience.
• Experience with Splunk or similar logging/SIEM platforms.
• Experience with security metrics, dashboards or reporting that helped drive measurable risk reduction.
• Experience mentoring or line-managing security engineers.

What’s in it for You?

Our benefits vary by location but we are committed to providing best-in-class perks across all our offices. These include generous annual leave, medical cover, inclusive parental leave packages, subsidised gym memberships and opportunities to give back to the community. Full details of our benefits are available here.

We’ve embraced a 50% hybrid working model (averaging two to three days onsite) that fosters trust and remote adaptability while encouraging in-person camaraderie and peer learning. Additionally, we are open to accommodating specific flexible working pattern requests for all roles where feasible.

Accessibility

We are a disability confident employer and Valuable 500 signatory.

Please let us know if you require any reasonable adjustments/personalisation as part of the application process or to enable you to attend an interview. If you would like to discuss your requirements or have any questions, email talent@ft.com and a member of our team will be happy to help.

Further information

At the FT, we embrace innovation and the use of technology and appreciate that individuals may leverage AI tools as part of their job application process. Whilst we are happy for you to use AI to assist with your application, it is essential that all information provided is authentic and accurately represents your skills, experience, and qualifications.

Candidates should be aware that the use of AI throughout the application process may be monitored to ensure a fair and transparent hiring process for all.

About The Role:

Responsible for building and managing the relationship and strategic objectives of the Alliance partnerships with the key objective of achieving the bookings targets.  This individual should have experience working with Vendors, including joint go-to-market and selling with and through this route-to-market. This role is responsible for establishing and growing Veeam’s partnership with the nominated alliance partners across ANZ. In addition, they will be accountable for accelerating the adoption of Veeam technologies into the partner’s solutions and Cosell to  existing accounts.

What You’ll Do:

• Drive Veeam Bookings through Marketplace and Cosell Route to Market
• Focus on pipeline conversion to wins
• Develop and support close plans for top opportunities
• Support pipeline growth activities, marketing and target account penetration planning
• Establish a reporting cadence for Pipeline, Bookings, and Must Win Opportunities
• Collaborate and communicate across local and regional teams to optimize collaboration and bookings
• Understand and communicate Veeam’s “Value Prop” as it relates to the nominated Alliances  go to market, offerings and services
• Create compelling messaging and engagement to position Veeam as #1 Solution for new and existing offerings
• Develop and build relationships with the Alliance to grow the Veeam business
• Drive sales growth strategies and results on a ANZ basis by influencing and securing mindshare and positioning with various teams
• Develop and lead a predictable and effective partnership cadence with the alliances: enablement/training plans, competitive updates, roadmaps, go-to-market
• Develop and lead training and enablement strategy and plan with each alliance to establish and grow Veeam expertise within the technical and sales communities
• Facilitate collaboration between Veeam, channel partners, and Veeam Alliance Partners to optimize solutions and offerings for end users

What You’ll Bring

• Understanding of how to work with Microsoft and AWS
• Proven sales performance
• Knowledge of cloud data management, virtualization, and storage technology
• Ability to define an create a winning Sales Strategy
• Ability to Build Influential Partnerships - executive relationships and influence senior executives
• Ability to create and execute on business plans
• Ability to create and deliver go-to-market initiatives
• Ability to drive projects related to business development opportunities
• Ability to adapt to changes in roles and responsibilities
• Ability to work independently with limited direction in a fast-paced environment; must be a high-energy, motivated self-starter
• Cross team collaboration and motivational skills
• Analytical thinker with proven ability to metric and govern
• Minimum 10 years of experience in Technology Sales – Enterprise Accounts - Global System Integrator and Strategic Alliance is a plus

What You’ll Get

• 20 annual vacation days, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
• Private medical insurance and income protection during illness or injury
• Annual wellbeing allowance and flu vaccination vouchers
• Discounted HCF corporate health insurance
• Free, confidential counselling and coaching via EAP
• Superannuation contributions via salary sacrifice
• Car allowance for eligible field sales roles
• Salary sacrifice options for portable electronic devices (phones, laptops, tablets)
• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops, and learning events like our annual Global Day of Learning

About the Role:

We’re a growing SaaS startup building our security team from the ground up. We’re looking for a hands-on Product Security Engineer who enjoys breaking things (responsibly) and helping teams fix them fast.

This role is very practical and impact-driven. You’ll be embedded close to the product and engineering teams, proactively attacking our own systems before anyone else does. If you like moving fast, owning problems end-to-end, and thinking like a real attacker, this role is for you.

What You'll Do:

• Actively test our SaaS product for security vulnerabilities across web apps, APIs, and cloud infrastructure.
• Perform manual security testing and targeted penetration tests (beyond automated scanners).
• Implement and help implement automated security test suites.
• Identify abuse cases, business logic flaws, and real-world attack paths.
• Work directly with engineers to reproduce issues and drive fixes.
• Help introduce lightweight security practices into the development process (threat modeling, secure design reviews).
• Validate fixes and ensure issues are fully resolved.
• Stay current on new vulnerabilities, attack techniques, and SaaS-relevant threats.

What You'll Bring:

• 5+ years of experience in application security, offensive security, or penetration testing.
• Strong understanding of web and API security (OWASP Top 10, auth, sessions, access control).
•  Experience testing modern SaaS products.
• Comfort working in cloud environments (AWS / GCP / Azure at a practical level).
• Experience with common security testing tools (Burp Suite, Nuclei, etc.).
• Ability to communicate findings clearly and pragmatically to engineers.
• Self-starter mindset — comfortable operating with limited process and high ownership.

Preferred, but not required:

• Startup experience or early-stage product exposure.
• Bug bounty or responsible disclosure experience.
• Secure code review experience (any major language).
• Familiarity with CI/CD and modern SDLC security.
• Offensive security certifications (OSCP, GWAPT, etc.).

ABOUT THE TEAM

Anduril's Space team is dedicated to expanding our AI-powered capabilities into the final frontier, enhancing Space Domain Awareness, Space Control, and Command and Control for U.S. military and allied partners. We're developing fully integrated hardware and software systems, including Lattice for Space Missions and modular payloads, to address growing threats in space and ensure our Guardians maintain a decisive advantage in this contested war-fighting domain.

ABOUT THE JOB

We are looking for a Systems Engineer, Space to join our rapidly growing team in Costa Mesa, CA. In this role, you will be responsible for developing a technical strategy and roadmap in conjunction with the Chief Engineer of Space Missions and the Growth/Strategy leads of the Orbital Systems team that effectively leverages current Anduril technologies and newly developed technologies to serve the customer mission areas. This role will address pre-award demonstrations, early contract phases, and full-contract execution. The Systems Engineer, working with a multi-disciplinary engineering team, will ensure the efficient development and delivery of hardware and software solutions for the customer.

These efforts will include leading complex, integrated systems for on-orbit operations and demonstrations to include sub-contracted teammates and strategic partnerships. The systems engineer will need to facilitate effective technical development and integration that spans company-boundaries in an agile development approach in the context of a continuous integration/continuous deployment paradigm. They will need to balance development of new capabilities with the incorporation of several pre-existing Anduril capabilities and need to effectively communicate the development status to customers.

The Systems Engineer will be responsible for technical oversight of all aspects of program execution from proposals to SRR, PDR, CDR, MRR, TRR, assembly, qualification testing, and delivery of flight units for launch. The Systems Engineer in conjunction with the Chief Engineer of Space Missions will assist in building out the necessary infrastructure for Anduril to execute on all necessary aspects of satellite and payload build and test to include working with external vendors for establishing test requirements and pass/fail criteria. The Systems Engineer will also work closely with the Anduril Space C2 team to enable and deliver Space Ground C2 products to both the customer and to further Anduril’s penetration into customer ecosystems.

WHAT YOU’LL DO

• Provide technical expertise across multiple spacecraft subsystems including bus and payloads
• Leverage strategic partnerships and teammates for building out new products to satisfy customer requirements in new and challenging mission areas
• Provide space industry expertise to refine and advance the Anduril Space and Orbital Systems strategy for growing the organization
• Contribute technical inputs to proposals to include engineering execution plans
• Provide oversight to a multi-disciplinary team of engineers through all phases of program execution up to and including delivery and operation of capabilities on-orbit
• Perform mission and system level trade studies and analysis to balance risk, cost, and performance

REQUIRED QUALIFICATIONS

• Experience in architecting, developing, and delivering defense/IC satellite and space hardware and software systems
• Understanding of the recent/current technical state of key USSF and IC space systems and mission areas
• Demonstrated ability to decompose complex systems with competing objectives (e.g., performance, schedule, openness, cybersecurity, MLS) into executable requirements and execution then delivering on those to meet government expectations
• Experience with spacecraft standards for qualification testing and acceptance testing to include the use of GEVS, SMC-S-016 (MIL- STD-1540), etc
• Experience with US government space mission areas and associated CONOPS for successfully executing missions to enable space for the warfighter
• Design and development of space vehicle and payload architectures and detailed mission solutions to complex space domain challenges
• Strong technical communication skills, providing the ability to deliver critical technical briefings and conclusions to technical leadership, company leadership, and customers
• Strong technical fundamentals in space systems, space ground infrastructure, and product development
• Technical experience leading US Government contracts
• Eligible to obtain and maintain an active U.S. security clearance

PREFERRED QUALIFICATIONS

• Previous experience delivering spacecraft flight hardware
• On-orbit mission operations of satellites and/or associated payloads

ABOUT THE TEAM

Anduril's Space team is dedicated to expanding our AI-powered capabilities into the final frontier, enhancing Space Domain Awareness, Space Control, and Command and Control for U.S. military and allied partners. We're developing fully integrated hardware and software systems, including Lattice for Space Missions and modular payloads, to address growing threats in space and ensure our Guardians maintain a decisive advantage in this contested war-fighting domain.

ABOUT THE JOB

We are looking for a Senior Systems Engineer, Space to join our rapidly growing team in Costa Mesa, CA. In this role, you will be help lead development of technical strategy and roadmapping in conjunction with the Chief Engineer of Space Missions and the Growth/Strategy leads of the Orbital Systems team that effectively leverages current Anduril technologies and newly developed technologies to serve the customer mission areas. This role will address pre-award demonstrations, early contract phases, and full-contract execution. The Senior Systems Engineer, working with a multi-disciplinary engineering team, will ensure the efficient development and delivery of hardware and software solutions for the customer.

These efforts will include leading complex, integrated systems for on-orbit operations and demonstrations to include sub-contracted teammates and strategic partnerships. The systems engineer will need to facilitate effective technical development and integration that spans company-boundaries in an agile development approach in the context of a continuous integration/continuous deployment paradigm. They will need to balance development of new capabilities with the incorporation of several pre-existing Anduril capabilities and need to effectively communicate the development status to customers.

The Senior Systems Engineer will be responsible for technical oversight of all aspects of program execution from proposals to SRR, PDR, CDR, MRR, TRR, assembly, qualification testing, and delivery of flight units for launch. The Senior Systems Engineer in conjunction with the Chief Engineer of Space Missions will assist in building out the necessary infrastructure for Anduril to execute on all necessary aspects of satellite and payload build and test to include working with external vendors for establishing test requirements and pass/fail criteria. The Senior Systems Engineer will also work closely with the Anduril Space C2 team to enable and deliver Space Ground C2 products to both the customer and to further Anduril’s penetration into customer ecosystems.

WHAT YOU’LL DO

• Drive technical expertise across multiple spacecraft subsystems including bus and payloads
• Leverage strategic partnerships and teammates for building out new products to satisfy customer requirements in new and challenging mission areas
• Provide space industry expertise to refine and advance the Anduril Space and Orbital Systems strategy for growing the organization
• Generate technical inputs to proposals to include engineering execution plans
• Provide oversight to a multi-disciplinary team of engineers through all phases of program execution up to and including delivery and operation of capabilities on-orbit
• Perform mission and system level trade studies and analysis to balance risk, cost, and performance

REQUIRED QUALIFICATIONS

• Advanced experience in architecting, developing, and delivering defense/IC satellite and space hardware and software systems
• Thorough understanding of the recent/current technical state of key USSF and IC space systems and mission areas
• Demonstrated ability to decompose complex systems with competing objectives (e.g., performance, schedule, openness, cybersecurity, MLS) into executable requirements and execution then delivering on those to meet government expectations
• Experience with spacecraft standards for qualification testing and acceptance testing to include the use of GEVS, SMC-S-016 (MIL- STD-1540), etc
• Experience with US government space mission areas and associated CONOPS for successfully executing missions to enable space for the warfighter
• Design and development of space vehicle and payload architectures and detailed mission solutions to complex space domain challenges
• Strong technical communication skills, providing the ability to deliver critical technical briefings and conclusions to technical leadership, company leadership, and customers
• Strong technical fundamentals in space systems, space ground infrastructure, and product development
• Technical experience leading US Government contracts
• Eligible to obtain and maintain an active U.S. security clearance

PREFERRED QUALIFICATIONS

• Previous experience delivering spacecraft flight hardware
• On-orbit mission operations of satellites and/or associated payloads

ABOUT THE JOB

We are looking for a Chief Engineer to to join our rapidly growing space team in Costa Mesa, CA. In this role, you will be responsible for serving as a technical lead on a wide berth of emerging developments geared towards an all-encompassing spacecraft mission focused around dynamic space operations and highly maneuverable satellites. This will include driving technology developments through design, build, test and delivery for on-orbit operations across high dV propulsion systems, optical sensor suites, closed loop guidance and navigation and systems engineering in close concert with new and legacy ground software enterprises. The Chief Engineer will develop a technical strategy and roadmap in conjunction with the Head of Engineering for Space Missions and the Growth/Strategy leads of the Space team that effectively leverages current Anduril technologies and newly developed technologies to serve the customer mission areas. This role will address pre-award demonstrations, early contract phases, and full-contract execution. The Chief Engineer, working with a multi-disciplinary engineering team, will ensure the efficient development and delivery of hardware and software solutions for the customer.

These efforts will include leading complex, integrated systems for on-orbit operations and demonstrations to include sub-contracted teammates and strategic partnerships. The chief engineer will need to facilitate effective technical development and integration that spans company-boundaries in an agile development approach in the context of a continuous integration/continuous deployment paradigm. They will need to balance development of new capabilities with the incorporation of several pre-existing Anduril or industry capabilities and need to effectively communicate the development status to internal and external stakeholders.

The Chief Engineer will be responsible for technical oversight of all aspects of program execution from proposals to SRR, PDR, CDR, MRR, TRR, assembly, qualification testing, and delivery of flight units for launch. The Chief Engineer in conjunction with the Head of Engineering for Space Missions will assist in building out the necessary infrastructure for Anduril to execute on all necessary aspects a space based interceptor consisting of satellite and payload build and test to include working with external vendors for establishing test requirements and pass/fail criteria. The Chief Engineer will also work closely with the Anduril Space C2 team to enable and deliver Space Ground C2 products to both the customer and to further Anduril’s penetration into customer ecosystems.

WHAT YOU’LL DO

• Provide technical expertise across multiple spacecraft subsystems and ground systems
• Leverage strategic partnerships and teammates for building out new products to satisfy customer requirements in new and challenging mission areas
• Provide space industry expertise to refine and advance the Anduril Space Based Interceptor strategy for customer engagements and demonstrations
• Contribute technical inputs to proposals to include engineering execution plans
• Provider oversight to a multi-disciplinary team of engineers through all phases of program execution up to and including delivery and operation of capabilities on-orbit
• Perform mission and system level trade studies and analysis to balance risk, cost, and performance

REQUIRED QUALIFICATIONS

• Experience in architecting, developing, and delivering defense/IC satellite and space hardware and software systems.
• Experience in high dV spacecraft, dynamic space operations, space based sensing and understand mission operations for surveillance and reconnaissance at multiple orbits.
• Understanding of the recent/current technical state of key USSF and IC space systems and mission areas
• Demonstrated ability to decompose complex systems with competing objectives (e.g., performance, schedule, openness, cybersecurity, MLS) into executable requirements and execution then delivering on those to meet government expectations
• Experience with spacecraft standards for qualification testing and acceptance testing to include the use of GEVS, SMC-S-016 (MIL-STD-1540), etc.
• Experience with US government space mission areas and associated CONOPS for successfully executing missions to enable space for the warfighter
• Design and development of space vehicle and payload architectures and detailed mission solutions to complex space domain challenges
• Strong technical communication skills, providing the ability to deliver critical technical briefings and conclusions to technical leadership, company leadership, and customers
• Strong technical fundamentals in space systems, space ground infrastructure, and product development
• Technical experience leading US Government contracts
• Eligible to obtain and maintain an active U.S. Secret security clearance

About Procare

For over 30 years, Procare Solutions has been dedicated to empowering early childhood educators by providing products and services that enable them to focus on the care, safety and education of children.  We recognize the responsibility that comes with nurturing and educating children, which is why our child care management solutions are designed to automate business processes, help ensure safety and compliance, communicate with families and provide educational resources and training to help teachers and children thrive.

Over 40,000 satisfied customers have chosen Procare Solutions as their trusted partner in providing exceptional care for young minds.   

A Little About the Role

The VP Information Security is a senior leader responsible for establishing and executing Procare’s enterprise-wide information security strategy, program, and culture. Reporting to the CTO this role will serve as the company's top security leader — translating complex cyber risk into business language, protecting customer data, enabling compliant product growth, and building a world-class security organization.

This is an operationally engaged, high-visibility role that blends strategic vision with operational execution. The ideal candidate is a proven security leader who thrives in a fast-moving SaaS environment, understands how security is changing in an AI first world, and can operate confidently in the boardroom while remaining deeply trusted by engineering and product teams.

Procare's security organization protects 40,000+ childcare centers and millions of families who depend on our platform daily. Our program includes:

• Mature compliance posture: SOC 2 Type II certified across all products; PCI DSS v4.0.1 Level 1 Service Provider; TX-RAMP authorized
• Enterprise security tooling: CrowdStrike NextGen-SIEM, Contrast Security/Veracode for application security, Automox for patch management, Barracuda/Abnormal.ai for email security
• Proactive security culture: Monthly product security meetings, CSIRT incident response team, public trust center (SafeBase), quarterly Security Steering Committee with C-suite participation
• Parent company support: Member of Roper Technologies family with access to shared security resources, threat intelligence, and enterprise tooling

What you’ll do:

Security Strategy & Leadership

• • Define, own, and continuously evolve a multi-year enterprise security roadmap aligned to business 
  objectives, growth stage, and risk appetite
• • Serve as the primary security advisor to the executive leadership team, present security posture, risk 
  metrics, and investment cases with clarity
• Lead a high-performing security organization including Security Operations, GRC, AppSec, and Cloud 
  Security functions
• • Champion a security-first culture across the company through education, executive sponsorship, and 
  accountability
• • Translate technical risk into business impact using quantitative risk frameworks (e.g., FAIR) to influence 
  budget and strategic decisions
• • Navigate Roper Technologies cybersecurity framework, maintaining compliance with mandatory 
  foundational controls and implementing selected optional controls to achieve maturity targets; serve as 
  primary security liaison to parent company
• • Establish AI security governance program to evaluate, approve, and manage AI tool adoption across the 
  organization; implement controls for AI-specific risks including data leakage, prompt injection, and model 
  security
• • Manage security across diverse product portfolio (5+ applications) with varying technology stacks, 
  customer bases, and compliance requirements; ensure consistent security standards while 
  accommodating product-specific needs
• • Build and maintain executive cybersecurity dashboards providing real-time visibility into security posture, 
  risk metrics, and program progress for board, parent company, and executive leadership

Cloud & Product Security

• • Secure the company's SaaS platform and cloud environments (AWS/Azure/GCP) by driving secure SDLC, 
  vulnerability management, remediation SLAs, and penetration testing programs
  • Partner with Product and Engineering leadership to embed security by design — shifting security left into 
  development workflows without impeding velocity
  • Oversee Identity and Access Management (IAM), Zero Trust architecture, data encryption, and cloud 
  security posture management (CSPM/CNAPP)
  • Define and maintain security standards for APIs, microservices, container security, and third-party 
  integrations

Governance, Risk & Compliance (GRC)

• Own and maintain the company's Information Security Management System (ISMS), risk register, and policy framework
• Lead and maintain Type II and PCI DSS v4.0.1 certifications; oversee ISO 27001, TX-RAMP, GDPR, CCPA, and other applicable regulatory frameworks
• Manage customer security questionnaires, enterprise security reviews, and security-related RFP/procurement processes in partnership with Sales and Legal
• Develop and enforce vendor and third-party risk management programs to minimize supply chain exposure
• Ensure compliance with applicable federal, state, and international data privacy and security regulations
• Manage state-specific compliance programs including TX-RAMP certification with quarterly vulnerability reporting and evidence submission requirements
• Implement and maintain customer trust center and security documentation portal to streamline enterprise security reviews and RFP processes
• Lead supply chain security and vendor breach response program; assess impact of third-party compromises and coordinate remediation across affected systems
• Ensure compliance with child data protection requirements and education sector-specific regulations; implement specialized controls for sensitive family and student information

Security Operations & Incident Response

• Lead a 24/7-capable security operations capability including SIEM, EDR, XDR, and threat intelligence platforms
• Own the cyber incident response program: detection, investigation, containment, communication, and post-incident review (PIR) processes
• Test business continuity and disaster recovery plans with cross-functional stakeholders
• Monitor emerging threat intelligence; proactively brief leadership on ransomware, social engineering, supply chain, and AI-driven threat vectors
• Lead Zero Trust architecture planning and implementation across corporate and product environments as multi-year strategic initiative: coordinate with infrastructure, network, and identity teams

Corporate Security & IT Risk Management

• Oversee corporate IT security including endpoint protection, patch management, and corporate network security controls
• Implement enterprise patch management programs using automated tools to ensure timely remediation of vulnerabilities across workstations and servers
• Direct Active Directory security assessments and identity hygiene programs across all domain instances
• Ensure MFA enforcement for all privileged accounts and coordinate rollout of authentication requirements for staff and customers

People & Organizational Leadership

• Recruit, develop, and retain a diverse security team including Security Engineers, Analysts, GRC Specialists, and an AppSec function
• Define team structure, career ladders, OKRs, and budget for the security organization
• Manage external security vendors, MSSPs, auditors, and counsel relationships

Our ideal candidate will have:

• 12+ years' of progressive experience in information security, with at least 4 years' in a CISO, Deputy CISO, or VP of Security role
• Proven track record leading security at a B2B SaaS or cloud-native technology company; experience scaling security programs from growth stage to enterprise maturity
• Deep expertise in cloud security architecture (AWS, Azure, and/or GCP), secure SDLC, and modern threat detection and response
• Hands-on leadership of SOC 2 Type II and PCI audits; direct experience with ISO 27001, GDPR, CCPA
• Demonstrated ability to communicate security risk to non-technical executives and board members; experience presenting to audit committees or governance boards
• Experience managing security through enterprise sales cycles including customer trust reviews, penetration test sharing, and security questionnaire programs
• Track record of building and scaling security teams from the ground up, including hiring, organizational design, and vendor management
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field required; Master's degree or MBA preferred
• One or more industry certifications strongly preferred: CISSP, CISM, CCSP, CISA, CRISC, CEH
• Executive presence with the ability to build trust at board level and peer-level across the C-suite
• Strong business acumen — understands how security decisions impact revenue, customer trust, and company valuation
• Exceptional communication skills: able to explain complex security concepts in plain language to diverse audiences
• Collaborative, low-ego leader who can influence without authority and build bridges between security, engineering, legal, and sales
• Resilient under pressure; sound judgment in high-stakes incident scenarios
• Skilled at managing competing priorities across multiple compliance programs, product teams, and parent company requirements; able to sequence initiatives and communicate trade-offs effectively

Security Technology Experience

Core Security Platforms:

• Cloud security: Wiz, Orca, Prisma Cloud, or equivalent CSPM/CNAPP solutions
• Endpoint/XDR: CrowdStrike, SentinelOne, Microsoft Defender, or equivalent
• SIEM/SOAR: CrowdStrike NextGen-SIEM, Splunk, Sumo Logic, or equivalent
• Identity/IAM: Okta, Auth0, Azure AD, or equivalent

Specialized Security Tools:

• Email security: Proofpoint, Mimecast, Abnormal.ai, or equivalent next-gen solutions
• Application security: Veracode, Checkmarx, Contrast Security, Snyk, or equivalent SAST/DAST platforms
• GRC/Compliance: Vanta, Drata, OneTrust, or equivalent automation platforms
• Trust & transparency: SafeBase, Whistic, or equivalent trust center solutions
• Patch management: Automox, Ivanti, or equivalent endpoint management platforms

Emerging Security Categories:

• AI security and governance tools (familiarity with landscape preferred)
• Zero Trust architecture frameworks and implementation tools

Physical Requirements:

• This position works most of the time in a fixed office location and may involve sitting and/or standing for prolonged periods
• Frequently required to communicate verbally and in writing (mostly email) with customers, prospects, and other employees
• Use of computer, telephone, and other office equipment for the greater part of the workday
• Occasional travel may be required for this position

Why Procare?

• Excellent comprehensive benefits packages including: medical, dental, & vision plans
• HSA option with employer contributions
• Vacation time, holidays, sick days, volunteer & personal days
• 401K Plan with employer match and immediate vesting
• Employee Stock Purchase Plan
• Employee Discount Program
• Medical, Dependent Care, and Transportation FSA Plans
• Company paid Short and Long-Term disability and Life Insurance
• RTD EcoPass for all Denver employees
• Tuition Reimbursement and continued Professional Development
• Fast paced, high energy workplace environment in prime downtown location
• Regular company provided meals

Salary

$200,000 - $250,000/year DOE

Location

This position is based in our Denver, CO office. We are currently in a hybrid in-office/remote working model based on business needs. Candidates must be willing and able to work from our Denver, CO office a minimum of 3 days a week.

As a key member of the Quality Assurance team, you will be responsible for ensuring the reliability, performance, and security of our software products. You will design, develop, and execute comprehensive test plans that allow our development teams to ship high-quality code with confidence and speed.

Key Responsibilities

• Quality Strategy: Develop and implement robust test strategies and test cases for new and existing features.
• Test Automation: Design, write, and maintain automated test scripts (UI and API) to increase testing efficiency and coverage.
• Agile Collaboration: Participate in Agile ceremonies (Sprint Planning, Stand-ups, Retrospectives) to provide "QA perspective" from the start of the development cycle.
• Defect Management: Identify, document, and track software defects to resolution using bug-tracking tools (e.g., Jira).
• Cross-Functional Communication: Communicate effectively with developers, product owners, and stakeholders to clarify requirements and report on software health.
• CI/CD Integration: Integrate automated tests into CI/CD pipelines to ensure continuous quality and rapid feedback loops.
• Root Cause Analysis: Perform thorough regression testing and root cause analysis when bugs are identified in production.
• Continuous Improvement: Proactively suggest improvements to the development process to prevent defects before they occur.
• Soft Skills: Demonstrate a detail-oriented mindset, professional curiosity, and a "quality-first" attitude.

Requirements

• Experience: Proven experience in Software Quality Assurance (Manual and Automated testing).
• Language: English proficiency is mandatory.
• Programming Skills: Proficiency in at least one programming language (e.g., Java, Python, or JavaScript) for automation purposes.
• Testing Frameworks: Hands-on experience with automation tools such as Selenium, Cypress, Playwright, or Appium.
• API Testing: Experience testing RESTful APIs using tools like Postman, SoapUI, or RestAssured.
• Databases: Basic to intermediate knowledge of SQL for data validation and backend testing.
• Version Control: Proficiency in Git and/or BitBucket.
• Documentation: Excellent skills in writing clear, concise, and comprehensive test plans and bug reports.

Preferred Qualifications (Pluses)

• Experience with Performance/Load Testing (e.g., JMeter, Locust).
• Knowledge of Security/Penetration Testing principles.
• Experience with Cloud Infrastructure (AWS, Azure, or GCP).
• Familiarity with Docker and Kubernetes for managing test environments.

LI-DC1

As a key member of the Quality Assurance team, you will be responsible for ensuring the reliability, performance, and security of our software products. You will design, develop, and execute comprehensive test plans that allow our development teams to ship high-quality code with confidence and speed.

Key Responsibilities

• Quality Strategy: Develop and implement robust test strategies and test cases for new and existing features.
• Test Automation: Design, write, and maintain automated test scripts (UI and API) to increase testing efficiency and coverage.
• Agile Collaboration: Participate in Agile ceremonies (Sprint Planning, Stand-ups, Retrospectives) to provide "QA perspective" from the start of the development cycle.
• Defect Management: Identify, document, and track software defects to resolution using bug-tracking tools (e.g., Jira).
• Cross-Functional Communication: Communicate effectively with developers, product owners, and stakeholders to clarify requirements and report on software health.
• CI/CD Integration: Integrate automated tests into CI/CD pipelines to ensure continuous quality and rapid feedback loops.
• Root Cause Analysis: Perform thorough regression testing and root cause analysis when bugs are identified in production.
• Continuous Improvement: Proactively suggest improvements to the development process to prevent defects before they occur.
• Soft Skills: Demonstrate a detail-oriented mindset, professional curiosity, and a "quality-first" attitude.

Requirements

• Experience: Proven experience in Software Quality Assurance (Manual and Automated testing).
• Language: English proficiency is mandatory.
• Programming Skills: Proficiency in at least one programming language (e.g., Java, Python, or JavaScript) for automation purposes.
• Testing Frameworks: Hands-on experience with automation tools such as Selenium, Cypress, Playwright, or Appium.
• API Testing: Experience testing RESTful APIs using tools like Postman, SoapUI, or RestAssured.
• Databases: Basic to intermediate knowledge of SQL for data validation and backend testing.
• Version Control: Proficiency in Git and/or BitBucket.
• Documentation: Excellent skills in writing clear, concise, and comprehensive test plans and bug reports.

Preferred Qualifications (Pluses)

• Experience with Performance/Load Testing (e.g., JMeter, Locust).
• Knowledge of Security/Penetration Testing principles.
• Experience with Cloud Infrastructure (AWS, Azure, or GCP).
• Familiarity with Docker and Kubernetes for managing test environments.

LI-DC1

As a key member of the Quality Assurance team, you will be responsible for ensuring the reliability, performance, and security of our software products. You will design, develop, and execute comprehensive test plans that allow our development teams to ship high-quality code with confidence and speed.

Key Responsibilities

• Quality Strategy: Develop and implement robust test strategies and test cases for new and existing features.
• Test Automation: Design, write, and maintain automated test scripts (UI and API) to increase testing efficiency and coverage.
• Agile Collaboration: Participate in Agile ceremonies (Sprint Planning, Stand-ups, Retrospectives) to provide "QA perspective" from the start of the development cycle.
• Defect Management: Identify, document, and track software defects to resolution using bug-tracking tools (e.g., Jira).
• Cross-Functional Communication: Communicate effectively with developers, product owners, and stakeholders to clarify requirements and report on software health.
• CI/CD Integration: Integrate automated tests into CI/CD pipelines to ensure continuous quality and rapid feedback loops.
• Root Cause Analysis: Perform thorough regression testing and root cause analysis when bugs are identified in production.
• Continuous Improvement: Proactively suggest improvements to the development process to prevent defects before they occur.
• Soft Skills: Demonstrate a detail-oriented mindset, professional curiosity, and a "quality-first" attitude.

Requirements

• Experience: Proven experience in Software Quality Assurance (Manual and Automated testing).
• Language: English proficiency is mandatory.
• Programming Skills: Proficiency in at least one programming language (e.g., Java, Python, or JavaScript) for automation purposes.
• Testing Frameworks: Hands-on experience with automation tools such as Selenium, Cypress, Playwright, or Appium.
• API Testing: Experience testing RESTful APIs using tools like Postman, SoapUI, or RestAssured.
• Databases: Basic to intermediate knowledge of SQL for data validation and backend testing.
• Version Control: Proficiency in Git and/or BitBucket.
• Documentation: Excellent skills in writing clear, concise, and comprehensive test plans and bug reports.

Preferred Qualifications (Pluses)

• Experience with Performance/Load Testing (e.g., JMeter, Locust).
• Knowledge of Security/Penetration Testing principles.
• Experience with Cloud Infrastructure (AWS, Azure, or GCP).
• Familiarity with Docker and Kubernetes for managing test environments.

LI-DC1

Territory: DC, PA, MD, DE, WV & VA

We’re looking for a driven Clinical Oncology Specialist (COS) to join our newly established Cutaneous Oncology specialty team. This is a high-impact, tumor-specific role focused on accelerating the adoption and growth of Signatera—our groundbreaking, first-in-class MRD ctDNA test. As a COS, you’ll act as a strategic field partner and a key representative of Natera Oncology, collaborating cross-functionally to engage key opinion leaders (KOLs) across integrated delivery networks, academic medical centers, hospital systems, and select community oncology practices.

Primary stakeholders include Medical Oncologists, Oncology Surgeons, and Pathologists. Success in this role demands a deep understanding of the skin cancer/cutaneous space, strong clinical acumen, and the ability to navigate complex healthcare systems while fostering trusted, value-driven relationships.

We’re seeking individuals who thrive in a fast-paced, entrepreneurial environment and are driven by purpose, passion, and the pursuit of clinical excellence. Frequent travel is required.

Key Responsibilities

• Develop and execute a strategic territory plan focused on growth and account penetration

• Identify and engage KOLs and key accounts to integrate Signatera into clinical decision-making

• Drive new business development while expanding and deepening existing relationships

• Maximize return on investment through consistent sales activity and cross-functional collaboration

• Deliver impactful clinical education to physicians and care teams

• Serve as a trusted resource in a fast-paced, startup-like environment

• Build deep understanding of Natera’s oncology solutions, internal processes, and competitor landscape

• Call on targeted physicians and practices to promote Natera’s oncology products and services

• Drive product adoption by influencing clinical decision-making at the provider and system level

• Monitor account performance and market trends; escalate issues and identify new opportunities

• Consistently conduct business in an ethical, transparent, and professional manner

Qualifications

• Bachelor’s degree required

• 5+ years of experience with consistent success in Cutaneous, Surgical or molecular diagnostics preferred

• Deep knowledge of academic and community oncology markets, precision medicine, and reimbursement landscape

• Ability to travel frequently, including overnight travel as needed

• Valid driver’s license and safe driving record

• Proven leadership, business acumen, and strong communication skills

• Travel: ~75% (combination of road and air travel)

Key Competencies

• Excellent verbal, written, and presentation skills

• Strategic, forward-thinking, and data-driven mindset

• Ability to work independently and collaboratively in team environments

• Strong clinical understanding of oncology and molecular diagnostics

• Comfortable navigating complex healthcare systems and engaging senior stakeholders

Why Natera?
At Natera, we’re transforming the way cancer is detected and monitored. Join us and be part of an innovative, mission-driven team committed to improving patient outcomes in oncology.

Total compensation includes a competitive base salary and uncapped quarterly commissions. In addition we offer a car allowance and Restricted Stock Units (RSUs).

Location: Mississauga (Onsite) 

Role Type: Full-time (New Opening)  

About e-Zinc 

e-Zinc is an energy storage venture based in Toronto with a breakthrough technology poised to disrupt the market. As the global energy grid moves to higher levels of penetration of renewable energy, there is a surging need for affordable, flexible, long-duration energy storage. e-Zinc is uniquely positioned to meet this demand as the first company in the world to “metalize” electricity.  

Backed by over CAD $80 million in funding from leading global strategic and financial investors - such as Toyota Ventures, Mitsubishi Heavy Industries, Eni, Evok Innovations, and BDC - e-Zinc has garnered international recognition for its proprietary technology and visionary roadmap. Highlights include: 

• Named to the Global Cleantech 100 for four consecutive years (2022–2025) 

• $1M Grand Prize winner of the Impact Canada Charging the Future Challenge 

• Awarded a $1.6M grant from Breakthrough Energy Solutions Canada 

• Secured over $12M in funding across three projects from Sustainable Development Technology Canada (SDTC) 

• Recipient of a USD $1.3M grant from the California Energy Commission 

As e-Zinc moves toward commercialization, e-Zinc is expanding its team to bring our transformative technology to market and support the future of renewable energy. 

Opportunity 

e-Zinc is seeking an experienced and talented Mechanical Engineer to join the Product Development team. 

Position Scope and Responsibilities 

 Design & Analysis 

• Lead mechanical design of battery cells and packs, including enclosures, interconnects, and structural components 
• Design external enclosures for DC-BESS units, covering component placement, fixing and racking strategy, fluid and electrical routing, and IP compliance 
• Create detailed 3D models, engineering drawings, and BOMs in SolidWorks 
• Conduct tolerance stack-ups and FEA to validate design integrity and performance 
• Select and qualify materials and components against thermal, structural, environmental, and regulatory requirements 

Cross-Functional Integration 

• Collaborate with electrical, controls, electrochemical, and manufacturing teams to ensure designs meet functional, integration, and DFM requirements
• Lead discussions with external vendors and fabricators for custom component designs and assemblies
• Drive engineering sample assembly and participate in hands-on functional testing 

Engineering Process 

• Lead and contribute to design reviews, DFMEA, root cause analysis, and continuous improvement initiatives 
• Drive development of test fixtures, jigs, and assembly processes to support pack and BESS validation 
• Support safety and compliance testing to applicable regulatory standards (UL, IEC, CE) 
• Champion the full engineering cycle through integration of internal, field, and commercial feedback 

 Qualifications 

Required: 

• Bachelor's degree in Mechanical Engineering or a related engineering discipline  

• 5+ years of mechanical design experience in energy storage, automotive, robotics, or industrial systems  

• Registered with Professional Engineers of Ontario (PEO), or eligible for registration is an asset. 

• Demonstrated expertise in mechanical system design for high-power devices, thermal management, or structural analysis  

• Proficiency in SolidWorks, PDM and simulation tools (ANSYS, CFX, or equivalent)  

• Hands-on experience with prototyping, testing, and working with external vendors and fabricators  

• Strong working knowledge of DFM/DFA, GD&T, and materials selection for mechanical systems  

• Strong communication skills and ability to work effectively in a multidisciplinary environment 

 Additional Assets: 

• Experience in battery, fuel cell, or energy storage system design and packaging  
• Familiarity with regulatory standards relevant to energy storage (UL 9540, IEC 62619, CE marking)
• Background in electrochemical device packaging or fluid-handling mechanical systems 

 At e-Zinc, how we work matters just as much as what we build. The qualities below reflect how our team turns our core values into action every day. 

Safety: You prioritize safety in everything you do and understand the deep responsibility we have to our people, our customers, and our planet. 

Truth: You are honest, transparent, and authentic—with yourself, your teammates, and our customers. 

Results: You approach challenges with curiosity and creativity, troubleshoot thoughtfully, and focus on delivering meaningful outcomes. 

Team: You contribute to an open and trusting workplace, empower others, and hold yourself and your teammates accountable. 

Mastery: You are committed to building domain expertise, bring a strong work ethic, and continuously invest in your own growth and improvement. 

Value: You act responsibly with time, financial resources, and effort, always aiming to create the greatest impact and long-term value. 

Why Join e-Zinc? 

At e-Zinc, your work has purpose. You’ll be part of a pioneering team building transformative technology that will help shape the future of clean energy. We offer a dynamic work environment, meaningful projects, and the opportunity to grow your career alongside passionate, purpose-driven colleagues. 

Note: At e-Zinc, every application is personally reviewed by our People & Talent team to understand your motivation, experience, and alignment with our mission. 

Compensation & Total Rewards: 

 The expected annual salary range for this role is $80,000–$100,000 Final compensation will be determined based on the candidate’s skills, experience, and overall fit for the position. 

 Successful employees will be offered a comprehensive Total Rewards package, which can include: 

• Competitive compensation
• Comprehensive Employer-paid benefits
• Retirement savings plans with employer contributions
• Equity grants and opportunity for company ownership
• Paid vacation time to refresh, plus additional paid time off for special events such as birthdays or religious holidays 

Encouragement to Apply 

Studies show that individuals in underrepresented groups are less likely to apply for jobs unless they meet every qualification. If you find you are passionate about this role and meet many of the items listed, we encourage you to apply! 

e-Zinc is proud to be an equal opportunity employer that celebrates and supports diversity. We thrive in an environment of mutual respect and welcome all applicants. 

 If you require accommodations at any stage in the hiring process, please contact us at careers@e-zinc.ca 

OTR Solutions is an innovator in the transportation industry providing a suite of factoring, fuel, and business management focused solutions. We help new and established companies get fast access to the funds they need for daily operations. As a Private Equity backed FinTech company, we are looking to grow our best-in-class financial organization. We are at the beginning of the development of a new Cloud-Native platform that will drive the next wave of innovation in the industry and fuel OTR’s growth. We are looking for growth minded, collaborative technologist who love to create, innovate, and learn cutting-edge solutions on the latest and greatest technology. 

OTR has been recognized as a “Top Workplace” by the Atlanta Journal-Constitution since 2016! 

As a Senior Software Development Engineer in Test, you will ensure the quality and integrity of all software products produced for distribution. You will monitor processes and procedures in product development and design. You will develop and analyze master test plans, cases, and schedules prior to implementation into production.  

Please note: We do not sponsor work-related visas.** 

Responsibilities: 

• Design, develop, and maintain robust automated test suites for UI/E2E, API, and business rules engine testing using Playwright with TypeScript.
• Develop and execute testing strategies for our business rules engine, ensuring rule logic is validated accurately and comprehensively.
• Build and maintain automated API test suites, validating RESTful and other API protocols for functionality, reliability, and performance.
• Design and execute performance/load tests to identify bottlenecks and ensure system scalability under real-world conditions.
• Collaborate with the team to identify security vulnerabilities and incorporate security testing practices into the automation pipeline.
• Contribute to the evolution of our test automation frameworks, tools, and overall QA strategy.
• Integrate automated tests into CI/CD pipelines to enable continuous quality feedback.
• Provide technical guidance and mentorship to junior and mid-level SDETs, fostering growth and best practices across the team.
• Work closely with developers, product managers, and stakeholders in an Agile environment to understand requirements and define test coverage.
• Identify, document, and track defects with clear reproduction steps and impact analysis.

What we look for: 

• 6+ years of experience in test automation engineering (SDET or equivalent role).
• Strong proficiency in TypeScript and modern test automation frameworks.
• Hands-on experience with Playwright and/or Cypress for UI/E2E test automation.
• Solid experience with API testing and a strong understanding of API protocols (REST, GraphQL, etc.).
• Experience with performance testing tools and methodologies.
• Experience with security testing tools and methodologies (e.g., OWASP, penetration testing basics)
• Strong understanding of software development lifecycle (SDLC) and Agile/Scrum practices.
• Ability to design test automation architectures and frameworks from the ground up.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong communication skills with the ability to mentor and collaborate across teams.
• Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent practical experience).

• Paid Certifications
• Certification Bonus
• Eligibility for Individual and Company bonus programs 
• Medical, Dental, Vision, Life/ AD&D Insurance, Short-Term Disability  
• Pet Insurance, Paid Family Leave, Employee Assistance Program  
• Fully Paid Maternity Leave  
• 401(k) with Company Matching  
• Generous PTO, Sick/Mental Health Days, Flex Holidays + Company Paid Holidays
• Travel Stipend to support Work Life Balance
• Leadership Development and Training
• Continuous Learning + Professional enhancements
• Weekly Catered Lunches + Casual Dress Code 
• Company Paid Fitness Membership  
• Volunteer Days and Opportunities with Company-Partnered Charities  
• Internal Inclusion programs  

OTR’s mission is to create exceptional value for our clients by providing industry leading financing and back-office solutions. Three pillars that are crucial to supporting that mission are outstanding customer service, technology that creates efficiency for ourselves and our customers, and a culture that provides the opportunity for employees to achieve greatness.  

OTR Solutions is an Equal Opportunity Employer 

#LI-Hybrid

See yourself at Twilio

Join the team as Staff Engineer, Offensive Security

About the job

The Staff Engineer acts as a Technical Lead. You don't just find bugs; you design complex attack chains that demonstrate systemic risk. You spend as much time writing custom code and researching new bypasses as you do executing tests.

Responsibilities

In this role, you will:

• Full-Stack Penetration Testing: Perform manual and automated testing of web applications, APIs, and mobile apps (iOS/Android).
• Internal/External Network Audits: Conduct network and cloud level assessments with various tooling
• Vulnerability Validation: Triage and validate reports from automated scanners or bug bounty hunters to eliminate false positives and escalate true positives
• AI/LLM Probing: Perform initial prompt injection and jailbreak tests on AI prototypes, services, and applications using established checklists (OWASP Top 10 for LLMs).
• Technical Reporting: Draft high-quality reports that detail the "path to compromise" with clear, reproducible steps for developers.
• Tool Maintenance: Manage and update the team's testing infrastructure (e.g., Burp Suite, and basic C2 listeners).
• Remediation Support: Provide direct technical guidance to engineering teams on how to patch vulnerabilities like XSS, SQLi, and IDOR.
• Adversary Emulation: Design and lead multi-week Red Team operations that mimic specific threat actors (APTs) to test the SIRT detection capabilities.
• Custom Exploit Development: Build custom payloads, droppers, and obfuscated scripts to bypass EDR/AV and maintain stealth.
• AI Red Teaming Architecture: Build automated testing frameworks for AI systems (e.g., using PyRIT, Promptfoo, or Garak) to test for models related to sensitive data leakage.
• Cloud & Infrastructure Attacks: Execute sophisticated attacks against AWS/Azure/K8s, focusing on IAM misconfigurations and container escapes.
• Purple Teaming: Collaborate with SIRT and Detection Engineering to tune SIEM alerts based on the techniques used during an engagement.
• Strategic Bug Bounty Management: Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad architectural security changes.

Qualifications

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• Experience: 7-10 years in offensive security, penetration testing, a high-volume bug bounty background, AppSec, or vulnerability exploitation, and track record of finding high/critical vulnerabilities in complex environments using pentesting commercial or custom tools.
• Concepts: Expert Knowledge and  solid understanding of the MITRE ATT&CK matrix and the OWASP Top 10 for web applications and top 10 for LLMs, post exploitation (lateral movement, persistence, data exfiltration) and Adversarial ML.
• Tooling: Proficient in OffSec popular tools like Burp Suite professional, Nmap, Metasploit, Wireshark etc... and AI security tools such as LangChain, TensorFlow for adversarial testing or, as well as use of C2 frameworks (Cobalt Strike, Sliver, Havoc) or similar tools
• Scripting and Coding: Ability to write functional scripts in Python or Bash to automate repetitive testing tasks and proficiency in coding and scripting like Python, C++, and scripting for creating custom offensive exploits that avoids signature-based detection.
• Certifications: Possession of advanced industry certifications such as OSCP, OSEP, OSWE, GXPN or similar training in OffSec tracks is highly desirable

Desired:

• Telecom expertise is preferred
• Excellent written and verbal communication skills.
• Ability to influence and build effective working relationships with all levels of the organization.
• Proficiency in multiple languages applicable to the region.

Location

This role will be Remote, and based in Ireland

Travel 

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, approximately 15% travel is anticipated to help you connect in-person in a meaningful way.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

See yourself at Twilio

Join the team as Twilio’s next Senior Offensive Security Engineer

About the job

This position is needed to The Senior OffSec Engineer will be responsible for the day-to-day execution of penetration tests and contributing to larger Red Team campaigns. You move beyond simple scanning to manual exploitation and are beginning to automate your workflows.  

Responsibilities

In this role, you’ll:

• Full-Stack Penetration Testing: Perform manual and automated testing of web applications, APIs, and mobile apps (iOS/Android).
• Internal/External Network Audits: Conduct network and cloud level assessments with various tooling
• Vulnerability Validation: Triage and validate reports from automated scanners or bug bounty hunters to eliminate false positives and escalate true positives
• AI/LLM Probing: Perform initial prompt injection and jailbreak tests on AI prototypes, services, and applications using established checklists (OWASP Top 10 for LLMs).
• Technical Reporting: Draft high-quality reports that detail the "path to compromise" with clear, reproducible steps for developers.
• Tool Maintenance: Manage and update the team's testing infrastructure (e.g., Burp Suite, and basic C2 listeners).
• Remediation Support: Provide direct technical guidance to engineering teams on how to patch vulnerabilities like XSS, SQLi, and IDOR.
• Adversary Emulation: Design and lead multi-week Red Team operations that mimic specific threat actors (APTs) to test the SIRT detection capabilities.
• Custom Exploit Development: Build custom payloads, droppers, and obfuscated scripts to bypass EDR/AV and maintain stealth.
• AI Red Teaming Architecture: Build automated testing frameworks for AI systems (e.g., using PyRIT, Promptfoo, or Garak) to test for models related to sensitive data leakage.
• Cloud & Infrastructure Attacks: Execute sophisticated attacks against AWS/Azure/K8s, focusing on IAM misconfigurations and container escapes.
• Purple Teaming: Collaborate with SIRT and Detection Engineering to tune SIEM alerts based on the techniques used during an engagement.
• Strategic Bug Bounty Management: Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad architectural security changes.

*Required:

• Experience: 3–5 years in offensive security, penetration testing, or a high-volume bug bounty background and track record of finding high/critical vulnerabilities in complex environments.
• Concepts: Expert Knowledge and  solid understanding of the MITRE ATT&CK matrix and the OWASP Top 10 for web applications and top 10 for LLMs, post exploitation (lateral movement, persistence, data exfiltration) and Adversarial ML.
• Tooling: Proficient in Burp Suite professional, Nmap, Metasploit, Wireshark etc... and AI security tools such as LangChain, TensorFlow for adversarial testing, as well as use of C2 frameworks (Cobalt Strike, Sliver, Havoc) or similar tools
• Scripting and Coding: Ability to write functional scripts in Python or Bash to automate repetitive testing tasks and proficiency in Python, C++, and scripting for creating custom offensive tooling that avoids signature-based detection.
• Certifications: Possession of advanced industry certifications such as OSCP, OSEP, OSWE, GXPN or similar
• Telecom expertise is preferred

Location

1. This role will be remote, and based in India. (Karnataka, Tamil Nadu, Telangana, Maharashtra, Delhi)

Travel 

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

Senior Security Engineer

Our Engineering Standards at Karbon:

Balance Speed and Quality

Engineers are expected to balance delivery speed with a strong commitment to quality, meeting agreed timelines while producing reliable, maintainable, and well-tested solutions. Sound judgment in making trade-offs between velocity and long-term sustainability is essential.

Collaborate Effectively

Engineering is collaborative by default. Team members are expected to contribute constructively in design discussions, reviews, and planning, communicate clearly about progress and risks, and support shared team outcomes in both hybrid and distributed environments.

Build and Maintain Systems

Engineers are responsible for building new capabilities while maintaining and improving existing systems. This includes designing scalable solutions, reducing technical debt, supporting operational stability, and contributing to continuous improvement.

Operate with Autonomy

A high degree of autonomy is expected. Given clear objectives, engineers should independently translate problems into actionable technical approaches, proactively identify improvements, and continuously expand relevant technical expertise.

Ownership and Accountability

Ownership is fundamental. Engineers are accountable for the quality, performance, and customer impact of their work from design through post-release support, and are expected to follow through on commitments.

AI-Enabled Engineering

AI is reshaping how software is built, and we are committed to leveraging it as a force multiplier for creativity, impact, and capability. Engineers are expected to confidently apply strong technical fundamentals while embracing AI tools and approaches to enhance productivity, problem-solving, and innovation. Curiosity, adaptability, and enthusiasm for integrating AI into meaningful product development are essential.

Contribute to Team Culture

Engineers contribute positively to a culture of professionalism, transparency, low bureaucracy, and mutual respect, strengthening team performance through authenticity, curiosity, and collaboration.

About the Role! 

Seeking a development & cloud focused Senior Security Engineer to join our expanding security team.

The ideal candidate will have passion for AppSec, Cloud and AI. They will be a skilled communicator and relationship builder capable of promoting and building security practices across the organization and into our development processes.

AI is reshaping practices across the board and at Karbon we’re fully committed. We don’t see AI as a replacement but as a force multiplier. We’re looking for Security Engineers who are confident in network & security fundamentals, driven to grow, and excited by the challenges and opportunities AI brings.

What You’ll Own:

• Partner with different areas within Karbon - You will make sure security is embedded from the start from feature design and development to participating in design reviews and threat modelling.
• Balance Security and Delivery - You know how to balance delivery needs with security and can communicate security risks and issues to non technical stakeholders. You understand when it's important to push back, when to compromise and how to work with delivery teams to reach a great outcome.
• You keep up to date on the latest technologies and approaches - You are excited by the new developments such as AI bring to security but also understand the importance of security foundational practices such as good account hygiene, least privilege, attack surface reduction and MFA.
• Identify and assess security risks introduced by AI tools - You’ll assist with reviewing the risks of AI tooling usage & Integration and AI-generated code.
• Apply AI-assisted tooling to accelerate security work - you understand the impact AI can have and utilize it across many areas including triage, threat detection, code review, and documentation.
• Flexibility and confidence to work across multiple security domains - We’re a small team responsible for Security at a fast moving company and you’ll get exposure to many different security domains; you could be assisting with refining and investigating corporate IT security processes in the morning, reviewing a cloud hosted system after lunch and then tweaking detection rules!
• Work effectively as part of a team - Security is a team sport and you understand the need to build relationships and trust across the organization to enhance Karbon’s security posture. You are happy to answer questions and offer advice to teams that will reach out for your assistance.
• Own your work - You take pride in your work, feeling a deep sense of responsibility for the products we develop and ensuring we keep our customers' valuable data secure. This sense of ownership is paramount, and you share this commitment.
• Bring your passion and personality - Your creativity, curiosity, and authentic self make the team stronger. If you've worked in highly political environments, you'll find our culture, free from office politics and valuing openness and authenticity, a refreshing change.
• Help us measure improvement and steer our roadmap - Contribute to Security Metrics so we can track progress and feedback into our roadmap.

What Sets You Apart

4+ years experience in a security or development role across most of the following:

• Collaborating with teams to review designs & implementations for security issues and embedding good security practices across software development
• Triaging issues and reports, assisting teams to remedy items and testing fixes
• Working with external penetration test companies to validate and prioritize findings
• Conducting risk and vulnerability assessments of web applications and APIs and third party suppliers and integrations
• Configuring and tuning SAST, SCA and DAST Tooling
• Working with build/deployment pipelines to incorporate security tooling (Github Actions or Azure Devops YAML based pipelines)
• Assisting with implementing security focused alerting and detections and automations
• Conducting and facilitating organizational & developer focused security training
• Assisting with operational security items such as EDR alerts and MDM
• Contributing to our security roadmap

In addition you’ll need:

• Strong communication skills (spoken and written) 
• Some of the following Languages/Frameworks: Microsoft .NET/C#, JavaScript (we use React and EmberJS frameworks and, Python)
• At least one cloud platform: Azure, AWS or GCP (we use Azure predominantly)
• Working knowledge of PowerShell or Bash and Python
• Working knowledge of at least one AI development tool e.g. Claude Code, GitHub Co-Pilot etc
• Portswigger Burp or similar
• Certifications such as Offsec OSCP & AWAE, GIAC, Burp Practitioner, PJPT, Microsoft/AWS development and cloud related are nice to have
• Experience with securing AI applications, systems and AI tooling would be highly regarded

Why Work at Karbon?

• Gain global experience across Australia, New Zealand, UK, and Canada
• Strong benefits package including:
• Flexible Time Off with an encouraged 4 weeks use per year
• Company paid medical for you and eligible spouse/partner and dependents
• Paid dental and vision and eligible spouse/partner and dependents
• 401(k) with company matching
• Flexible Spending Account
• Up to 8 weeks paid parental leave
• Work-from-home stipend
• Work with (and learn from) an experienced, high-performing team
• A collaborative, team-oriented culture that embraces diversity, invests in development and provides consistent feedback
• Be part of a fast-growing company that firmly believes in promoting high performers from within

• A team-oriented, collaborative professional who enjoys working with others.
• Passionate about security and knowledgeable about security principles, understanding their value to an organization.
• Passionate about long-term solutions that drive lasting security improvements, prioritizing sustainable change over quick fixes.

At Qualia, we've built the leading B2B real estate technology that transforms the home buying and selling experience into a simple, secure, and enjoyable process. Our SMB and Enterprise products bring together users from across the real estate ecosystem---homebuyers and sellers, lenders, title and escrow agents, and real estate agents---onto a single shared digital closing platform, providing greater clarity and transparency to real estate transactions. Today, through our business customers across the country, millions of consumers use Qualia to close on homes every year.

WHAT YOU'LL WORK ON

We are hiring an entrepreneurial Engineering Manager to lead Qualia's Application Security team. This is a builder's role. You won't just run a team - you'll redesign how a modern AppSec function operates when AI can do the first pass on nearly everything we used to do by hand.

The team today owns secure design reviews, vulnerability triage, internal penetration testing, incident response support, and security tooling across a JavaScript/NodeJS and Kubernetes stack. Your mandate is to scale that surface area vertically - growing output and coverage per engineer - by making AI-assisted workflows the default. That means automated pen testing pipelines, AI-driven triage of findings from SAST/DAST/SCA, agentic review of engineering proposals and design docs, and continuous red-teaming exercises that test both our systems and our assumptions.

You'll partner closely with Platform, Infra, and product engineering leaders to embed security earlier in the development lifecycle, and you'll be the team's voice when we set the security vision for the next two years - including anomaly detection across production traffic, model-driven threat hunting, and how we defend against (and responsibly use) AI-enabled attackers.

Securing that platform - the money, the identities, and the documents flowing through it - is what the Application Security team does every day. We're hiring an Engineering Manager to lead this team into its next chapter: one where AI is a force multiplier for every part of our security program.

RESPONSIBILITIES

• Lead and grow the Application Security team - coaching senior AppSec engineers, setting goals, and owning delivery against the security roadmap
• Build the automated pen-testing program. Stand up pipelines that run continuous, AI-assisted offensive testing against our services, APIs, and web properties - and turn the output into a triaged, actionable queue
• Scale triage with AI. Design the workflows and tooling that let the team handle 10x the volume of findings (bug bounty, scanner output, customer reports) without 10x the headcount
• Review engineering proposals. Sit at the front of the design process with engineering leaders across Core, Clear, Shield, Connect, and Atlas - reviewing RFCs and proposals, flagging risk early, and helping teams ship securely by default
• Run red-teaming exercises. Drive recurring red team engagements - both internal exercises and coordinated vendor work - and close the loop into detection, response, and product hardening
• Own the AppSec vision. Partner with the leadership team to set multi-quarter strategy across anomaly detection, threat modeling, and AI-augmented defense
• Fight fires when they happen. Lead incident response from the application security side, and be the person engineering trusts to make the call in the room
• Mentor and hire. Recruit strong AppSec engineers, mentor the ones you have, and build a team culture where people are pushed and supported in equal measure

YOUR BACKGROUND THAT LIKELY MAKES YOU A MATCH

• 5+ years as a security or full-stack engineer working on production systems, with 2+ years managing a security or platform engineering team
• Hands-on depth in application security: threat modeling, code review, and at least one offensive-security discipline (pen testing, red team)
• Track record of shipping automation that changed how a team worked - ideally including meaningful use of LLMs, agents, or ML in a security or engineering workflow
• Comfort operating across the full security lifecycle: prevention, detection, response, and recovery
• Strong written communication. You can write the design doc, the post-mortem, and the board-ready summary - and you can tell a product engineer why their proposal needs to change without shutting down the conversation
• Keen product sense and a bias toward measurable impact. You care whether the risk actually went down, not whether a ticket got closed
• Experience in fintech, real estate tech, or another regulated, high-liability domain preferred

NICE TO HAVE

• Background designing or operating anomaly-detection systems on production traffic, auth logs, or financial transactions
• Published research, CVEs, or conference talks in AppSec, offensive security, or AI security.
• Familiarity with the evolving landscape of AI-enabled offense (prompt injection, model abuse, agent exploitation) and defense

THE TECH STACK YOU'LL USE

• JavaScript / NodeJS / Typescript  / Meteor
• Microservice architecture / Kubernetes Operators
• AWS
• MongoDB
• Modern AppSec tooling: SAST/DAST/SCA and an expanding AI-assisted security automation layer that you'll help build

While this role is remote work eligible, we have three office locations: San Francisco, California; Concord, New Hampshire; and Austin, Texas.

This role has a base annual salary of $210,000-$240,000 plus a competitive equity and benefits package. (Salary to be determined by relevant experience, location, knowledge, and skills of the applicant, internal equity, and alignment with market data.)

WHY QUALIA

Qualia is made up of incredibly bright, mission-driven coworkers who are passionate about using technology to solve real-world problems---and we're growing quickly. In order to continue building an engaging and dynamic organization, we're committed to giving everyone the support they need to do great work.

Our benefits package is designed to allow our team members to be their best selves, both in and out of the workplace. In addition to comprehensive health plans, a 401k program, and commuter benefits, we prioritize family and personal well-being through professional development, parental leave, and a flexible time off policy. Qualia offers a robust online onboarding program to train new hires, biweekly all hands meetings, and a variety of internal virtual events to keep employees connected.

We believe diverse perspectives and backgrounds are critical to building great technology, and our goal is to cultivate an environment where people feel equally valued and respected. Qualia is proud to be an equal-opportunity workplace, and we welcome applicants from all backgrounds regardless of race, color, ancestry, religion, gender identity or expression, sexual orientation, marital status, age, citizenship, socioeconomic status, disability, or veteran status.

By submitting your application, you acknowledge and agree to the collection, processing, and use of your personal information as described in our Employee Data Privacy Notice.

#LI-Remote

Who you are:

We are always looking for amazing talent who can contribute to our growth and deliver results! Geotab is seeking a Senior Account Based Marketing Manager who will own and execute highly personalized, segment-focused account-based marketing strategies targeting Geotab's most strategic enterprise accounts. Supporting 1–2 assigned segments, this individual contributor role is accountable for driving net-new pipeline and accelerating deal progression through a coordinated mix of digital marketing, executive gifting, VIP experiences, and industry roadshows. If you love technology, and are keen to join an industry leader — we would love to hear from you!

What you'll do:

As a Senior Account Based Marketing Manager your key area of responsibility will be to serve as the primary marketing partner to segment Business Development Executives (BDEs), aligning marketing investment directly to account-level priorities, buying stages, and revenue goals. Success is measured by pipeline revenue sourced and influenced, account engagement, and program ROI within the assigned segments

How you'll make an impact:

• Own the 1:1 and 1:few ABM strategy for strategic accounts across 1–2 assigned segments, aligned to sales priorities and pipeline targets 

• Partner with sales teams to identify, tier, and map named accounts, including org structure, key decision-makers, and buying signals

• Build tailored account plans that connect marketing investment to deal stages, intent signals, and pipeline forecasts

• Run a regular ABM sync with assigned BDEs to pressure-test account plans, review engagement signals, and adjust program priorities

• Translate company and segment narratives into account-specific messaging and ABM plays

• Design and execute multi-channel digital ABM campaigns, including LinkedIn paid social, programmatic display, content syndication, and email, targeting named accounts and personas

• Leverage ABM platforms (e.g., 6sense) to orchestrate personalized account experiences, serve intent-based advertising, and measure account-level engagement

• Build account-specific landing pages and personalized content assets that address industry-specific pain points

• Use intent data and behavioral signals to prioritize accounts, optimize campaign timing, and trigger coordinated outreach with sales

• Apply AI tools to automate account research, generate personalized content variants, and scale 1:1 personalization across target accounts

• Execute strategic gifting programs tied to deal stages and account milestones to reinforce relationships and accelerate pipeline

• Plan and deliver VIP executive experiences, including executive dinners and hosted industry engagements, directly tied to deal advancement and account plans

• Develop and manage targeted roadshow programs that bring Geotab's value proposition to regional stakeholder clusters within strategic accounts

• Coordinate pre- and post-program follow-up sequences with sales, ensuring every experiential touchpoint maps to a deal milestone rather than existing as a standalone activity

• Serve as the primary marketing liaison to assigned Business Development Executives (BDEs), embedding into planning cadences and account reviews

• Build and maintain account-level marketing playbooks that guide outreach sequencing, content delivery, and program coordination

• Align marketing investment to pipeline priorities, forecast commitments, and account penetration goals

• Build credibility with BDEs and sales leaders through data, account insights, and a clear POV on marketing's role in each deal

• Track pipeline sourced and influenced, account engagement, and program ROI for assigned segments on a regular reporting cadence

• Manage ABM budget across channels and programs for assigned segments

What you'll bring to the role:

Why job seekers choose Geotab:

HubSpot for Startups is a global program with a mission to help millions of startups grow better. It's a fast-growing and important piece of HubSpot's larger customer acquisition strategy. 2025 is a key year for the program as we make significant investments to scale our program. Our ecosystem consists of 5000+ global startup partners (accelerators, incubators, and VC's) and over 25,000 startup customers. You can learn more here: www.hubspot.com/startups

Our team is passionate and entrepreneurial. To drive the next phase of growth, we’re looking for an accomplished Business Development Manager (BDM) to drive the adoption of HubSpot Products among startups.

As a BDM, your responsibilities will include working with accelerators, incubators, and VC to drive business and technical relationships, educate startups in a scalable approach to drive new customer acquisition and enable the sales team to drive effective and frictionless interactions with startups. You will have the exciting opportunity to help drive the growth and shape the GTM strategy of HubSpot in your geographic region..

Your responsibilities will include working very closely with the regional sales leadership team, focusing on driving revenue, product adoption, and market penetration within the various customer segments including startups, scaleups, and entrepreneurs. We’re looking for people who possess a business development/sales background and can lead tactical and strategic initiatives to help drive revenue growth and adoption of HubSpot.

In the Business Development Manager role, you’ll get to:

• Explore new partnership opportunities with VC, Accelerators, and Incubators, and onboarding them as approved partners.
• Manage existing startup partners to help them enable their portfolio companies to grow better, driving deeper portfolio penetration
• Build trust, establish credibility, and hold partners accountable.
• Educate startups on growth strategy (sales, marketing, AI, and fundraising) and HubSpot's platform.
• Work with HubSpot’s sales and marketing teams to make sure the partner and startup experiences are frictionless.
• Work closely with your manager and Global Director of HubSpot for Startups to share market research, partnership development, and startup development.
• Travel rarely (5%), both international and in-country events 

We’re looking for people who:

• Have a minimum of 5+ years in business development/sales 
• Are proactive, genuinely curious, and detail-oriented
• Have healthy negotiation skills and business acumen
• Enjoy working in a global team & working with cross-functional departments
• Have experience working with or within startups
• Have an understanding of the accelerators, incubators, and venture capital industries
• Are comfortable and capable of giving public presentations
• Can make data-driven decisions
• Have the desire to meet and exceed measurable performance goals such as Qualified leads, new customers and MRR
• Enjoy the fast-paced environment of sales and want to apply that determination to a more strategic role
• Strong planning & organizational skills - can balance a lot of priorities and conversations
• Fluent in using CRM for communication and sales conversations
• Have compassion and empathy for others
• Have strong communication skills

POS-15106

HubSpot for Startups is a global program with a mission to help millions of startups grow better. It's a fast-growing and important piece of HubSpot's larger customer acquisition strategy. 2025 is a key year for the program as we make significant investments to scale our program. Our ecosystem consists of 5000+ global startup partners (accelerators, incubators, and VC's) and over 25,000 startup customers. You can learn more here: www.hubspot.com/startups

Our team is passionate and entrepreneurial. To drive the next phase of growth, we’re looking for an accomplished Business Development Manager (BDM) to drive the adoption of HubSpot Products among startups.

As a BDM, your responsibilities will include working with accelerators, incubators, and VC to drive business and technical relationships, educate startups in a scalable approach to drive new customer acquisition and enable the sales team to drive effective and frictionless interactions with startups. You will have the exciting opportunity to help drive the growth and shape the GTM strategy of HubSpot in your geographic region..

Your responsibilities will include working very closely with the regional sales leadership team, focusing on driving revenue, product adoption, and market penetration within the various customer segments including startups, scaleups, and entrepreneurs. We’re looking for people who possess a business development/sales background and can lead tactical and strategic initiatives to help drive revenue growth and adoption of HubSpot.

In the Business Development Manager role, you’ll get to:

• Explore new partnership opportunities with VC, Accelerators, and Incubators, and onboarding them as approved partners.
• Manage existing startup partners to help them enable their portfolio companies to grow better, driving deeper portfolio penetration
• Build trust, establish credibility, and hold partners accountable.
• Educate startups on growth strategy (sales, marketing, AI, and fundraising) and HubSpot's platform.
• Work with HubSpot’s sales and marketing teams to make sure the partner and startup experiences are frictionless.
• Work closely with your manager and Global Director of HubSpot for Startups to share market research, partnership development, and startup development.
• Travel rarely (5%), both international and in-country events 

We’re looking for people who:

• Have a minimum of 5+ years in business development/sales 
• Are proactive, genuinely curious, and detail-oriented
• Have healthy negotiation skills and business acumen
• Enjoy working in a global team & working with cross-functional departments
• Have experience working with or within startups
• Have an understanding of the accelerators, incubators, and venture capital industries
• Are comfortable and capable of giving public presentations
• Can make data-driven decisions
• Have the desire to meet and exceed measurable performance goals such as Qualified leads, new customers and MRR
• Enjoy the fast-paced environment of sales and want to apply that determination to a more strategic role
• Strong planning & organizational skills - can balance a lot of priorities and conversations
• Fluent in using CRM for communication and sales conversations
• Have compassion and empathy for others
• Have strong communication skills

What We Need

We’re looking for a driven Commercial Account Executive focused on new business acquisition—someone who thrives in a true hunter role and knows how to build pipeline from scratch, land new logos, and consistently exceed quota. This role requires a proactive, high-activity seller who can manage the full sales cycle, generate pipeline through outbound efforts and partners, and effectively engage senior IT stakeholders. This particular role requires candidates to be located in the Mountain or Pacific Time Zone. Ideal candidates bring a proven track record of creating new opportunities and closing net-new business.

What You'll Do

• Meet or exceed assigned new business sales quotas and pipeline generation targets.
• Identify, prospect, and develop new customer opportunities within an assigned territory or market segment.
• Execute a territory strategy that prioritizes high-value prospects and drives consistent pipeline development.
• Leverage partners to maximize penetration and scale within your target market.
• Manage the full sales cycle from prospecting through negotiation and deal closure.
• Maintain ownership of newly acquired customers during the first year, ensuring strong adoption and customer satisfaction.
• Collaborate with Sales Engineers, Business Development Representatives, and partner organizations to advance opportunities and deliver effective solutions.
• Develop compelling commercial and technical proposals aligned with customer business needs.
• Maintain accurate pipeline management, forecasting, and activity tracking in Salesforce.
• Develop an understanding of customer priorities, including CIO and IT leadership initiatives such as digital transformation.
• Coordinate the successful transition of accounts to the Named Accounts team after the first year.

What You Bring

• Bachelor’s degree in Business, Marketing, Communications, or related field (or equivalent experience)
• 4+ years of experience in account management, sales, customer success, or a related client-facing role
• Proven track record of meeting or exceeding revenue, retention, or expansion targets
• Experience managing a portfolio of customer accounts in a B2B environment
• Familiarity with CRM tools such as Salesforce or similar systems
• Demonstrated ability to identify and close upsell and cross-sell opportunities
• Experience developing and executing account growth strategies or account plans
• Strong stakeholder management skills, including experience working with senior decision-makers
• Ability to build trust and maintain long-term customer relationships
• Willingness to travel within your territory as required.
• Manual Dexterity: Repetitive motion of wrists, hands and fingers for using a computer.
• Stationary Tasks: Sitting for extended periods, remaining in a stationary position.

What We Offer

Our comprehensive compensation package is vital in how we recognize our people for the impact they make on us reaching our goals as a company.

For this role, the estimated OTE is $140,000 – $160,000 on a 50/50 base/variable split. The actual salary may vary based on a range of factors, including market and individual qualifications objectively assessed during the interview process.

The range listed above is a guideline and may be modified. People Experience offers a comprehensive benefits package in addition to cash compensation that includes but is not limited to 401k and medical/dental coverage. Speak with your Recruiter for more details on our Total Rewards philosophy.

ABOUT THE TEAM

We're seeking a staff systems security engineer to will drive security engineering principles into design and integration with other systems internal and external to Anduril to ultimately secure our suite of advanced technologies including artificial intelligence systems, command and control platforms, aerospace vehicles, and long range sensors.

The ideal candidate has a background in systems of systems, systems, electrical and/or software engineering with deep expertise in embedded systems security. They will perform in-depth security architecture assessments, identify and mitigate vulnerabilities and exploits, and work cross-functionally to bake security into Anduril products.

ABOUT THE JOB

WHAT YOU’LL DO

• This is not an ISSO or ISSM role.
• Own security end-to-end for assigned products—derive and decompose security requirements from customer needs and threat intelligence, design security architectures, and manage security through the full product lifecycle
• Implement security features and capabilities, develop and execute comprehensive security test strategies at multiple integration levels, and support major milestone deliveries (SRR, PDR, CDR, TRR, PRR)
• Brief security architectures and approaches to government customers and program leadership, translating complex security concepts for diverse audiences
• Collaborates and builds solutions with engineering teams to meet and exceed industry-standard security goals
• Collaborate with security assessment teams to assess Anduril’s products and integrated components to uncover potential weaknesses
• Collaborate cross-functionally with engineering teams to translate architectural requirements into implementations, and coordinate with security teams on threat modeling, validation, and testing

REQUIRED QUALIFICATIONS

• Typically 12+ years of experience and a Bachelors degree or equivalent education/work experience.
• Demonstrable ability to address complex, high-stakes security engineering challenges across multiple programs within a major area of business.
• Evidence of recognized expertise contributing to risk resolution on cross-functional initiatives.
• Experience in one or more of the following fields: Systems Security Engineering, Cybersecurity, Systems Engineering, Electrical Engineering, Software Engineering, Computer Engineering, Computer Science.
• Familiarity with security-relevant features on embedded hardware / FPGAs (e.g., secure boot, key management, etc.)
• Previous work on security engineering and architecture for defense / national security systems and/or complex embedded commercial systems.
• Ability to effectively brief and interact regularly with highly technical government customers.
• Strong understanding of the “why” behind the product, systems, and security design.
• A sincere commitment to a positive, inclusive, and collaborative culture.
• Excellent verbal & written communication skills.
• Currently possesses and is able to maintain at least a final active US Secret security clearance with SAP eligibility.
• Must be able to obtain a Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Excels at the above listed Requirements.
• Possesses and able to maintain a U.S. TS Security clearance with SCI and/or SAP eligibility.
• Strong skills in one or more programming languages (e.g., Python, Rust, Go, C/C++).
• Experience assessing security of firmware, applications, network, IoT, or embedded systems.
• Fluency in modern USG cyber methodologies, including Cyber Survivability guidance and related policy (JSIG, ICD 503, CSEIG, SSECG, NIST SP 800-160, Cyber T&E Guidebook, CMMC, etc.)
• Experience developing cyber documentation for USG customers.
• Proven track record of excelling across the broader Systems Security Engineering domain, encompassing embedded Systems Engineering, Cybersecurity, Cyber Resiliency, Software Security.
• Experience creating and integrating with system design documentation in MBSE tools.
• Experience integrating with Software Assurance, Supply Chain Risk Management, Configuration Management, and System Test.
• Experience executing the Anti-Tamper process and authoring associated documentation.
• Experience with security testing on DoD systems (e.g. penetration testing, red teaming, vulnerability assessments)
• Experience working with unmanned aircraft Group 3 class and above.
• Experience working with government or national security space systems.

ABOUT THE TEAM

We're seeking a systems security engineer to will drive security engineering principles into design and integration with other systems internal and external to Anduril to ultimately secure our suite of advanced technologies including artificial intelligence systems, command and control platforms, aerospace vehicles, and long range sensors.

The ideal candidate has a background in systems of systems, systems, electrical and/or software engineering with deep expertise in embedded systems security. They will perform in-depth security architecture assessments, identify and mitigate vulnerabilities and exploits, and work cross-functionally to bake security into Anduril products.

ABOUT THE JOB

WHAT YOU’LL DO

• This is not an ISSO or ISSM role.
• Own security end-to-end for assigned products—derive and decompose security requirements from customer needs and threat intelligence, design security architectures, and manage security through the full product lifecycle
• Implement security features and capabilities, develop and execute comprehensive security test strategies at multiple integration levels, and support major milestone deliveries (SRR, PDR, CDR, TRR, PRR)
• Brief security architectures and approaches to government customers and program leadership, translating complex security concepts for diverse audiences
• Collaborates and builds solutions with engineering teams to meet and exceed industry-standard security goals
• Collaborate with security assessment teams to assess Anduril’s products and integrated components to uncover potential weaknesses
• Collaborate cross-functionally with engineering teams to translate architectural requirements into implementations, and coordinate with security teams on threat modeling, validation, and testing

REQUIRED QUALIFICATIONS

• Experience in one or more of the following fields: Systems Security Engineering, Cybersecurity, Systems Engineering, Electrical Engineering, Software Engineering, Computer Engineering, Computer Science
• Familiarity with security-relevant features on embedded hardware / FPGAs (e.g., secure boot, key management, etc.)
• Previous work on security engineering and architecture for defense / national security systems and/or complex embedded commercial systems
• Ability to effectively brief and interact regularly with highly technical government customers
• Strong understanding of the “why” behind the product, systems, and security design
• A sincere commitment to a positive, inclusive, and collaborative culture
• Excellent verbal & written communication skills
• Currently possesses and is able to maintain at least a final active US Secret security clearance with SAP eligibility
• Must be able to obtain a Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Excels at the above listed Requirements
• Possesses and able to maintain a U.S. TS Security clearance with SCI and/or SAP eligibility
• Strong skills in one or more programming languages (e.g., Python, Rust, Go, C/C++).
• Experience assessing security of firmware, applications, network, IoT, or embedded systems
• Fluency in modern USG cyber methodologies, including Cyber Survivability guidance and related policy (JSIG, ICD 503, CSEIG, SSECG, NIST SP 800-160, Cyber T&E Guidebook, CMMC, etc.)
• Experience developing cyber documentation for USG customers
• Proven track record of excelling across the broader Systems Security Engineering domain, encompassing embedded Systems Engineering, Cybersecurity, Cyber Resiliency, Software Security
• Experience creating and integrating with system design documentation in MBSE tools
• Experience integrating with Software Assurance, Supply Chain Risk Management, Configuration Management, and System Test
• Experience executing the Anti-Tamper process and authoring associated documentation
• Experience with security testing on DoD systems (e.g. penetration testing, red teaming, vulnerability assessments)
• Experience working with unmanned aircraft Group 3 class and above
• Experience working with government or national security space systems

ABOUT THE TEAM

We're seeking a senior systems security engineer to will drive security engineering principles into design and integration with other systems internal and external to Anduril to ultimately secure our suite of advanced technologies including artificial intelligence systems, command and control platforms, aerospace vehicles, and long range sensors.

The ideal candidate has a background in systems of systems, systems, electrical and/or software engineering with deep expertise in embedded systems security. They will perform in-depth security architecture assessments, identify and mitigate vulnerabilities and exploits, and work cross-functionally to bake security into Anduril products.

ABOUT THE JOB

WHAT YOU’LL DO

• This is not an ISSO or ISSM role.
• Own security end-to-end for assigned products—derive and decompose security requirements from customer needs and threat intelligence, design security architectures, and manage security through the full product lifecycle
• Implement security features and capabilities, develop and execute comprehensive security test strategies at multiple integration levels, and support major milestone deliveries (SRR, PDR, CDR, TRR, PRR)
• Brief security architectures and approaches to government customers and program leadership, translating complex security concepts for diverse audiences
• Collaborates and builds solutions with engineering teams to meet and exceed industry-standard security goals
• Collaborate with security assessment teams to assess Anduril’s products and integrated components to uncover potential weaknesses
• Collaborate cross-functionally with engineering teams to translate architectural requirements into implementations, and coordinate with security teams on threat modeling, validation, and testing

REQUIRED QUALIFICATIONS

• 8+ years of experience and a Bachelor's degree or equivalent education/work experience.
• Evidence of leading a team to solve complex security engineering challenges.
• Able to evaluate trade spaces and offer optimal security solutions against program risks using advanced knowledge and sound judgement.
• Experience in one or more of the following fields: Systems Security Engineering, Cybersecurity, Systems Engineering, Electrical Engineering, Software Engineering, Computer Engineering, Computer Science.
• Familiarity with security-relevant features on embedded hardware / FPGAs (e.g., secure boot, key management, etc.)
• Previous work on security engineering and architecture for defense / national security systems and/or complex embedded commercial systems.
• Ability to effectively brief and interact regularly with highly technical government customers.
• Strong understanding of the “why” behind the product, systems, and security design.
• A sincere commitment to a positive, inclusive, and collaborative culture.
• Excellent verbal & written communication skills.
• Currently possesses and is able to maintain at least a final active US Secret security clearance with SAP eligibility.
• Must be able to obtain a Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Excels at the above listed Requirements
• Possesses and able to maintain a U.S. TS Security clearance with SCI and/or SAP eligibility
• Strong skills in one or more programming languages (e.g., Python, Rust, Go, C/C++).
• Experience assessing security of firmware, applications, network, IoT, or embedded systems
• Fluency in modern USG cyber methodologies, including Cyber Survivability guidance and related policy (JSIG, ICD 503, CSEIG, SSECG, NIST SP 800-160, Cyber T&E Guidebook, CMMC, etc.)
• Experience developing cyber documentation for USG customers
• Proven track record of excelling across the broader Systems Security Engineering domain, encompassing embedded Systems Engineering, Cybersecurity, Cyber Resiliency, Software Security
• Experience creating and integrating with system design documentation in MBSE tools
• Experience integrating with Software Assurance, Supply Chain Risk Management, Configuration Management, and System Test
• Experience executing the Anti-Tamper process and authoring associated documentation
• Experience with security testing on DoD systems (e.g. penetration testing, red teaming, vulnerability assessments)
• Experience working with unmanned aircraft Group 3 class and above
• Experience working with government or national security space systems

About EnergyHub

EnergyHub empowers utilities and their customers to create a clean, distributed energy future. We help consumers turn their smart thermostats, EVs, batteries, and other products into virtual power plants that keep the grid stable and enable higher penetration of solar and wind power.

We are looking for an Engineering Manager who thrives in a fast-paced, dynamic environment, is comfortable navigating ambiguity while moving projects forward, and is motivated to build software and processes that foster greater team efficiency and scalability across the organization. This person will focus on people management, strategic alignment and software development projects that have a meaningful impact on EnergyHub’s product and people.

As Engineering Manager for the Program team, you will own a core part of our platform: how customer programs are configured, launched, tested, and maintained across a growing set of product offerings. You will help evolve a critical system that sits at the intersection of product, operations, and platform engineering. This role is ideal for someone who enjoys bringing clarity to complex domains, improving internal tooling, and building systems that scale as the business grows. As we scale, you will champion technical excellence while balancing new feature delivery, technical debt reduction, and modernizing the user experience to empower client-facing teams.

Main Responsibilities: What you'll do

• Build, manage, and mentor a team of engineers working on shared platform capabilities.
• Partner with cross-functional teams, including Engineering and Product, to define the team’s mission, vision, and roadmap
• Provide strategic oversight, architectural direction and execution for new team initiatives, such as building new UI workflows, code refactoring and transition to micro-services environment
• Act as a technical partner to Product, QA, Analytics, and client-facing teams.
• Translate cross-functional needs into clear technical plans and priorities.
• Communicate tradeoffs and progress clearly to both technical and non-technical stakeholders.
• Ensure the team delivers quality, scalable, well-tested, code on time and in scope.
• Continuously raise the bar for your team through organizational evolution, agile process improvement efforts and leveling your team’s technical prowess
• Thrive on building your direct report’s skills through coaching, mentoring and training opportunities
• Conduct code reviews across the team, with the ability to dive into working in the existing code base as needed
• Other duties as assigned

Required Skills and Experience: What you need

At EnergyHub we care about your passion and how you can contribute to our mission, not about the schools and companies on your resume.

This is not a list of requirements and we certainly don’t expect that you need to hit every bullet point to be a great candidate or great in the role. However, these things will catch our eye and demonstrate many of the core skills needed.

• 2+ years of experience directly managing teams of developers (ideally with teams of 5-7+)
• Core technical knowledge and experience with some of the tools and technologies at EnergyHub with a focus on Java, Spring, AWS (EC2, ECS), MongoDB and PostGres
• Experience with other technologies such as Python and C#/.NET to drive automation and micro-service efforts
• Strong foundational understanding of computer science principles and SDLC best practices
• Experience with architecture, scalability, and reliability as we develop consumable API’s
• Ability to learn from challenging projects with appropriate corrections to improve process, resource, and coaching
• Ability to work well with ambiguity and in a dynamic work environment
• Belief in a test first approach to coding
• Other duties as assigned

Preferred Skills and Experience: Nice-to-haves

• Experience building client-facing APIs and supporting developers integrating with those APIs
• Experience improving internal tools and backing services used by operational or customer-facing teams.
• Familiarity with test automation
• Experience working closely with Product partners to help disambiguate and modernize legacy implementations

Please note that sponsorship of new applicants for employment authorization, or any other immigration-related support, is not available for this position at this time.

Why work for EnergyHub?

• Collaborate with outstanding people: Our employees work hard, do great work, and enjoy collaborating and learning from each other.
• Make an immediate impact: New employees can expect to be given real responsibility for bringing new technologies to the marketplace. You are empowered to perform as soon as you join the team!
• Gain well rounded experience: EnergyHub offers a diverse and dynamic environment where you will get the chance to work directly with executives and develop expertise across multiple areas of the business.
• Work with the latest technologies: You'll gain exposure to a broad spectrum of IoT, SaaS and machine learning obstacles, including distributed fault-tolerance, device control optimization, and process modeling to support scalable interaction with disparate downstream APIs.
• Be part of something important: Help create the future of how energy is produced and consumed. Make a positive impact on our climate.

Company Benefits

EnergyHub offers a generous benefits package including 100% paid medical for employees and a 401(k) with employer match. We offer a casual environment, the flexibility to set your own schedule, a fully stocked fridge and pantry, free Citi Bike membership, secure bike rack, gym subsidy, paid parental leave, and an education assistance program.

EnergyHub is an Equal Opportunity Employer

EOE, Including Disability/Vets.  Reasonable accommodations are available for individuals with disabilities throughout the application process. If you are a person with a disability needing assistance with the application process, please contact accommodations.apply@energyhub.net.

In connection with your application, we collect information that identifies, reasonably relates to or describes you (“Personal Information”). The categories of Personal Information that we may collect include your name, government-issued identification number(s), email address, mailing address, other contact information, emergency contact information, employment history, educational history, and demographic information.  We collect and use those categories of Personal Information about you for human resources and other business management purposes, including identifying and evaluating you as a candidate for potential or future employment or future positions, recordkeeping in relation to recruiting and hiring, conducting analytics, and ensuring compliance with applicable legal requirements and Company policies. By submitting your application, you acknowledge that we may retain some of the personal data that you provide in your application for our internal operations such as managing our recruitment system and ensuring that we comply with labor laws and regulations even after we have made our employment decision.

Notice To Third Party Agencies:

EnergyHub understands the value of professional recruiting services. However, we are not accepting resumes from recruiters or employment agencies for this position. In the event we receive a resume or candidate referral for this position from a third-party recruiter or agency without a previously signed agreement, we reserve the right to pursue and hire those candidate(s) without any financial obligation to you.

The Basics:

The APAC Partner Marketing Manager – Enterprise is responsible for developing and executing partner marketing strategies that drive measurable pipeline growth, brand awareness, and customer engagement across Asia Pacific including Japan. This role is accountable for delivering tangible business outcomes through high-impact joint campaigns, adapting global strategies for regional execution, and leveraging deep market knowledge to maximize results through co-marketing with key enterprise markets. 

What you’ll do:

• Pipeline & Revenue Growth 
  
  • Deliver qualified leads and opportunities through joint partner campaigns, meeting or exceeding quarterly pipeline targets for APAC, including Japan. 
  • Optimize partner marketing initiatives to maximize conversion rates and revenue impact measured by co-marketing sales qualified leads and partner co-sell pipeline 
• Regional Partner Campaign Leadership 
  
  • Strategically plan, launch, and optimize joint partner campaigns, events, and partner enablement programs tailored to APAC enterprise segments and buyer personas. 
  • Localize messaging and creative assets for APAC audiences, ensuring cultural relevance and compliance, especially for Japan. 
  • Lead cross-functional teams and agency partners to deliver integrated campaigns together with key partners -  on time and within budget. 
• Partner Relationship Management 
  
  • Build and maintain strong relationships with key enterprise partners and alliances 
  • Facilitate regular partner communications, enablement sessions, and feedback loops to ensure alignment and mutual success with key partners. 
• Performance Analytics & Reporting 
  
  • Track, analyze, and report on partner campaign KPIs (lead volume, conversion rates, pipeline contribution, ROI) with actionable insights for continuous improvement. 
  • Present regular partner marketing performance updates to APAC stakeholders, highlighting progress against goals and recommendations for optimization. 
• Compliance & Regulatory Alignment 
  
  • Ensure all partner marketing activities comply with company policies and enterprise regulations across APAC, with special attention to Japanese requirements. 
• Market Insights & Innovation 
  
  • Monitor APAC enterprise marketing trends, competitor activity, and customer behaviors to inform partner strategy and identify new growth opportunities for co-marketing  
  • Test and implement innovative partner marketing tactics to improve campaign effectiveness and market penetration. 

We’re looking for someone with:

• Bachelor’s degree in Marketing, Business, IT or related field 
• 8-10 years’ experience in partner marketing, demand generation, or field marketing, with a proven track record of success in APAC-wide roles (at least 5 years). 
• Demonstrated experience planning and executing partner campaigns in APAC 
• Proven ability to deliver pipeline and revenue outcomes through joint marketing initiatives with partners 
• Hands-on expertise in campaign management, event execution, and partner enablement. 
• Advanced proficiency in MarTech platforms (Marketo/Eloqua, Salesforce, ABM tools). 
• Strong analytical skills with experience in campaign reporting, optimization, and presenting insights to senior stakeholders. 
• Ability to localize global strategies for APAC markets, including messaging and creative adaptation for Japan. 
• Experience managing budgets and vendors in a regional context. 
• Collaborative, proactive, and accountable, with excellent communication and stakeholder management skills. 
• Knowledge of enterprise compliance and regulatory requirements in APAC

About Tanium 

On a mission. Together. 

At Tanium, we are stewards of a culture that emphasizes the importance of collaboration, respect, and diversity. In our pursuit of revolutionizing the way some of the largest enterprises and governments in the world solve their most difficult IT challenges, we are strengthened by our unique perspectives and by our collective actions.   

As a global organization with stakeholders around the world, it’s imperative that the diversity of our customers and communities is reflected internally in our team members. We strive to create a diverse and inclusive environment where everyone feels they have opportunities to succeed and grow because we know that only together can we do great things.  

Our commitment to excellence and innovation has earned us a place on the Forbes Cloud 100 list for ten consecutive years, and we continue to be recognized worldwide as a great place to work. 

Taking care of our team members 

Each of our team members has 5 days set aside as volunteer time off (VTO) to contribute to the communities they live in and give back to the causes they care about most. 

For more information on how Tanium processes your personal data, please see our Privacy Policy.

What you'll do

As our first Product Security Engineer, you will sit at the intersection of Security and Software Engineering. You will be a "Security Builder": embedded within our engineering teams with the autonomy needed to build the automation, tools, and workflows that make security a seamless part of the software development lifecycle.

You aren't just finding bugs; you are building the systems that prevent and fix them at scale. Your work will be centered on three core strategic pillars:

• Secure architecture and auth: you will design and implement auth enhancements such as magic link improvements and access/audit log features to monitor access and improve transparency.
• Privacy engineering: you will lead the privacy engineering initiatives including DSAR integration, building automated data deletion capabilities directly into the Pomelo mobile app and our internal platform to ensure seamless compliance. You will also help improve privacy-preserving data de-identification and anonymization as needed.
• Full-cycle remediation: you will own the end-to-end pentest-to-fix lifecycle. This means you don't just triage reports; you write the code to fix penetration test findings, remediate SAST issues, and build greenkeeping systems for high-volume dependency patching with regression testing.

Beyond these pillars, you will serve as a high-leverage engineering partner to the broader InfoSec team by:

• Building secure-by-default libraries: reducing the load on core Software Engineering by creating internal libraries and patterns that make security the default path.
• Threat modeling: partnering with engineering leads to conduct threat modeling and ensure secure design at the earliest stages of the development process.
• Scaling through collaboration: as a security resource embedded in our engineering teams, you will help engineering squads navigate complex security use cases, translating GRC requirements into elegant code rather than manual checklists.

Who you are

You’re an enthusiastic and collaborative engineer who enjoys solving meaningful problems through code. You view security as a product challenge, and you believe the best way to secure a system is to make the "secure way" the "easy way." In particular, you:

• Are a builder first: Have 5+ years of software engineering experience with a strong foundation in computer science and a track record of shipping production-grade code (Python, Go, Kotlin or similar).
• Have a security mindset: You understand the OWASP Top 10, identity flows and prompt injections, but you’d rather build a system that eliminates a class of vulnerability than manually triage individual alerts. You believe security expertise should be embedded into the development process, not bolted on at the end.
• Are an automation enthusiast: you enjoy tackling complex problems with practical automation and are keeping up with trends in LLM agents to multiply your engineering impact.
• Navigate ambiguity: as a floating resource across various engineering teams, you are comfortable context-switching and can quickly build rapport with different engineering teams to understand their needs.
• Prior experience in healthcare data: including understanding of HIPAA, SOC 2 Type 2 and HITRUST compliance requirements.

We’ll be super excited if you

• Have experience with Google Cloud Platform (GCP), Github Advanced Security (GHAS), Stytch, Sentry, Fullstory, Statsig or similar technology stack.
• Have experience building data infrastructure that supports AI/ML workloads,internal developer platforms and privacy preserving data de-identification and anonymization techniques.
• Have previously worked in a fast-paced, product-oriented startup environment.

Why you should join our team

By joining Pomelo, you will get in on the ground floor of a fast-moving, well-funded, and mission-driven startup that always puts the patient first. You will learn, grow and be challenged -- and have fun with your team while doing it.

We strive to create an environment where employees from all backgrounds are respected. We also offer:

• Competitive healthcare benefits
• Generous equity compensation
• Unlimited vacation
• Membership in the First Round Network (a curated and confidential community with events, guides, thousands of Q&A questions, and opportunities for 1-1 mentorship)

At Pomelo, we are committed to hiring the best team to improve outcomes for all mothers and babies, regardless of their background. We need diverse perspectives to reflect the diversity of problems we face and the population we serve. We look to hire people from a variety of backgrounds, including but not limited to race, age, sexual orientation, gender identity and expression, national origin, religion, disability, and veteran status.

At Asana, security is foundational to our mission of helping humanity thrive by enabling the world’s teams to work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations.

We’re looking for a security engineer to join our Security Red Team in Warsaw. You’ll be a foundational member of the security presence in a key engineering hub, partnering directly with IT, infrastructure, and product teams to ensure we design and ship secure software. You will be instrumental in scaling our security practices by performing security reviews and penetration testing assessments of our products and internal applications, eliminating entire classes of vulnerabilities, and championing a security-first mindset.

This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday.

We offer a Contract of Employment (UoP) for our employees in Poland

What you’ll achieve:

• Conduct security architecture reviews, threat modeling, and penetration testing for new features and services across our product and internal applications.
• Test software for application security vulnerabilities through various assessment methodologies, including penetration testing.
• Triage, investigate, and drive remediation of vulnerabilities from our bug bounty program, internal penetration tests, and automated security tooling.
• Influence engineering initiatives by conducting design and roadmap reviews, effectively communicating security constraints, and assisting teams in making informed trade-offs.
• Investigate product security incidents as an incident subject matter expert, using logs and monitoring tools.
• Develop and deliver training to educate engineers on secure coding best practices and emerging threats.
• Stay informed of industry trends, emerging threats, and best practices to ensure that Asana’s security posture remains robust.
• Collaborate with teammates and stakeholders to develop both short-term and long-term strategies for risk management.
• Join a collaborative Security team composed of specialists in product, application, software engineering, infrastructure and detection and response, all working together to help engineering teams design and ship secure software.

About you:

• 5+ years of experience in application security, product security, penetration assessments, or software engineering with a security focus, with significant experience in security reviews and penetration testing.
• Strong software engineering background with experience in languages like Python, Javascript/Typescript or Scala
• Deep working knowledge of the OWASP Top 10 and common web application vulnerabilities such as XSS, CSRF, SSRF, and SQL injection
• Experience with security tools for static/dynamic analysis (SAST/DAST), software composition analysis (SCA), and vulnerability management.
• Proven experience performing security design reviews and threat modeling for complex applications, as well as conducting comprehensive penetration tests.
• Excelling communication skills for collaborating effectively with both technical and non-technical partners.
• A pragmatic and collaborative mindset, with a passion for building defenses against real-world attacks and enabling other engineers to do their best, most secure work.

What we offer:

• Generous, transparent and fair compensation system (base salary and generous Restricted Stock Unit for Asana Inc.) 
• Contract of Employment (with 50% tax deductible costs for author’s rights usage for Engineers) 
• Health insurance with dental and travel coverage (Lux Med) 
• Lunch catering on the days that you work from the office
• Career growth budget 
• Home office setup budget 
• Gym/Fitness reimbursement
• Fertility healthcare and family-forming support with Carrot
• Mental health support in Modern Health
• Group life insurance
• MacBooks with all necessary accessories

For this role, the estimated base salary range is between 25,604  - 35,854 PLN gross monthly on the contract of employment (UoP). The actual base salary will vary based on various factors and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base compensation range for this role may be modified.

Our total compensation consists of base salary and equity (RSUs). 

#appsec #securityengineer #LI-Hybrid

About VulnCheck

VulnCheck is transforming vulnerability intelligence by helping security teams act faster and with more confidence. Our platform delivers early, high-quality exploit intelligence, deep asset correlation, and contextual insights to help organizations stay ahead of emerging threats.

About the Role

VulnCheck is looking for a Red Team Systems Administrator / Lab Manager to build, maintain, and operate the lab infrastructure that supports our vulnerability research team. This role is responsible for standing up and managing a research environment that includes networking equipment, IoT / OT devices, and the supporting compute, storage, and network infrastructure our researchers depend on to discover, analyze, and validate vulnerabilities.

You'll work closely with our exploit developers and threat researchers to ensure they have reliable, secure, and reproducible environments for testing against real-world hardware and software. The lab is central to VulnCheck's mission — our researchers need to move fast, and the infrastructure has to keep up. While this is a hybrid role, the position requires regular onsite management of physical lab equipment in the Fort Meade, MD area. 

What You'll Do

• Design, build, and maintain the physical and virtual lab infrastructure used by VulnCheck's vulnerability research team.
• Procure, configure, and manage networking equipment (routers, switches, firewalls, wireless access points) and IoT / OT devices used for security research and exploit validation.
• Manage lab network architecture — including segmentation, VLANs, out-of-band management, and isolated test environments to safely run exploit code against live devices.
• Administer Linux and Windows servers, hypervisors, and virtualization platforms (e.g., VMware, Proxmox, KVM) that host vulnerable software and services for testing.
• Maintain firmware libraries and device inventories, ensuring researchers have access to specific hardware and software versions needed for vulnerability analysis.
• Provide remote access infrastructure (VPN, jump hosts, remote console access) so distributed team members can interact with physical lab equipment.
• Automate environment provisioning, configuration management, and lab reset workflows using tools such as Ansible, Terraform, or similar.
• Monitor lab systems for availability, performance, and security — and respond to issues promptly.
• Collaborate with researchers to understand upcoming research targets and proactively prepare the lab environments they need.
• Manage vendor relationships for hardware procurement, warranties, and RMA processes.
• Document lab architecture, procedures, and runbooks to ensure operational continuity.

What You'll Bring

• 8+ years of experience in systems administration, lab operations, or infrastructure engineering.
• Strong hands-on experience with Linux system administration (Ubuntu, CentOS/RHEL, or similar).
• Solid networking fundamentals — TCP/IP, DNS, DHCP, VLANs, firewall configuration, and routing.
• Experience managing and configuring networking equipment (Cisco, Juniper, MikroTik, etc).
• Familiarity with IoT devices and embedded systems — comfortable working with serial consoles, JTAG, firmware flashing, and device provisioning.
• Familiarity with OT/ICS devices and protocols is a huge plus.
• Experience with virtualization and containerization technologies (VMware, Proxmox, KVM, Docker).
• Experience with configuration management and infrastructure-as-code tools (Ansible, Terraform, or similar).
• Ability to work independently and manage priorities across multiple concurrent research efforts.
• Strong documentation habits and clear written communication.
• Scripting skills in Python, Bash, or Go for automating lab workflows; familiarity with Go is a plus. 

Preferred Qualifications

• Experience using Claude or other AI models for task automation. 
• Prior experience supporting a security research, penetration testing, or red team lab environment.
• Prior cybersecurity work experience (at a vendor or in government).
• Experience managing physical lab infrastructure remotely, including out-of-band management (IPMI/iLO/iDRAC), remote PDUs, and KVM-over-IP.

*IMPORTANT NOTE: This position may involve access to technology subject to U.S. export control regulations. Employment is contingent upon the company's ability to authorize access under applicable export control, sanctions, and any other applicable legal or contractual requirements. The company does not guarantee and is under no obligation to seek such authorization if it would be necessary.

What We Offer

We believe people do their best work when they feel supported, trusted, and valued. VulnCheck offers benefits designed to meet a wide range of needs and lifestyles.

Benefits and Perks

• Competitive salary with employee equity program
• Health, dental, and vision coverage
• Unlimited PTO
• 401(k) plan
• Remote friendly environment with flexibility
• Expense reimbursement for home internet and phone
• Ongoing professional development, coaching, and learning resources
• Opportunities for career advancement within a fast-growing team

Why Join Us

Built on over two decades of cybersecurity experience, our team of experts understands the intricacies of vulnerabilities, their exploitation in the wild, and how to leverage this data to build more effective cybersecurity products that produce better outcomes for organizations.

VulnCheck gives organizations a tactical advantage by providing best-in-class exploit & vulnerability intelligence information. We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We were founded in 2021 in Lexington, Massachusetts.

VulnCheck has a transparent, collaborative, and supportive culture — we are looking for people who have a growth mindset, are curious and innovative. Our team is smart, but humble, hardworking, and supportive.

VulnCheck is proud to be an Equal Opportunity Employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. VulnCheck is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.

It’s not just about the compliance; it’s about the mission!

At Career TEAM, we work to accelerate the human condition. Our award-winning portal, Career EDGE, transforms lives across the U.S.—and behind every secure experience is a cybersecurity expert like you.

We are looking for a Senior Information Security Engineer with deep experience in StateRAMP, FedRAMP, and/or TX-RAMP to take charge of our compliance efforts and champion a culture of security from code to cloud. You'll be the linchpin in our security architecture, helping to ensure Career EDGE meets the most rigorous standards for protecting government data—while working with a purpose-driven team that values innovation and impact.

Why Join Us?

By joining this incredible company, you will be:

• A founding security leader shaping how we build trust into every layer of our product.

• Play a major role in our NIST 800-53 compliance programs and our efforts to obtain and maintain a GovRAMP verified status.

• Working on a product that directly helps thousands of individuals access workforce and educational services.

• Driving continuous improvement of security controls, policies, and architecture across cloud infrastructure.

• Mentoring engineers and advising product teams on secure-by-design principles.

• Enjoy a fully remote work environment.

Your Impact on Career TEAM’s Success:

As a Senior Information Security Engineer, your focus will be both strategic and hands-on:

Security Compliance Leadership

• Lead the end-to-end process of StateRAMP readiness, gap remediation, and authorization.

• Provide guidance and oversight for FedRAMP Moderate and TX-RAMP certification efforts.

• Manage communication with third-party assessment organizations (3PAOs) and security consultants.

• Maintain the System Security Plan (SSP), POA&M, and related documentation.

Architecture & Technical Oversight

• Design and maintain secure cloud infrastructure (primarily AWS), aligned with NIST 800-53 controls.

• Implement technical safeguards for identity & access management, vulnerability management, and incident response.

• Support DevOps teams in security automation and secure CI/CD pipelines.

• Conduct risk assessments and penetration test planning and review.

Team Enablement & Policy

• Collaborate with executive leadership on security strategy.

• Develop training materials to raise internal security awareness.

• Ensure alignment between security policies and engineering practices.

What We’re Looking For:

• Located in the Philippines with night shift work hours (to overlap with U.S. team).

• Proven experience leading or significantly contributing to StateRAMP, FedRAMP, and TX-RAMP compliance efforts.

• Expertise in NIST 800-53, FIPS 199/200, and continuous monitoring frameworks.

• Hands-on experience with AWS security services (IAM, GuardDuty, CloudTrail, Security Hub, etc.).

• Strong understanding of SOC2, GovRAMP, DevSecOps practices, and cloud infrastructure.

• Exceptional written and spoken English skills.

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; relevant certifications (e.g., CISSP, CCSP, AWS Security Specialty) are a strong plus.

• Bonus: Experience with audit response, SIEM tools, or zero trust architecture.

Ready to lead security for a platform that changes lives?
Apply today and help us build trust into every login, every connection, and every breakthrough.

It’s not just about the compliance; it’s about the mission!

At Career TEAM, we work to accelerate the human condition. Our award-winning portal, Career EDGE, transforms lives across the U.S.—and behind every secure experience is a cybersecurity expert like you.

We are looking for a Cloud Security Architect with deep experience in GovRAMP, FedRAMP, and/or TX-RAMP to take charge of our compliance efforts and champion a culture of security from code to cloud. You'll be the linchpin in our security architecture, helping to ensure Career EDGE meets the most rigorous standards for protecting government data—while working with a purpose-driven team that values innovation and impact.

Why Join Us?

By joining this incredible company, you will be:

• A security leader shaping how we build trust into every layer of our product.

• Play a major role in our NIST 800-53 compliance programs and our efforts to obtain and maintain a GovRAMP verified status.

• Working on a product that directly helps thousands of individuals access workforce and educational services.

• Driving continuous improvement of security controls, policies, and architecture across cloud infrastructure.

• Mentoring engineers and advising product teams on secure-by-design principles.

• Enjoy a fully remote work environment.

Your Impact on Career TEAM’s Success:

As a Cloud Security Architect, your focus will be both strategic and hands-on:

Security Compliance Leadership

• Lead the end-to-end process of GovRAMP readiness, gap remediation, and authorization.

• Provide guidance and oversight for FedRAMP Moderate and TX-RAMP certification efforts.

• Manage communication with third-party assessment organizations (3PAOs) and security consultants.

• Maintain the System Security Plan (SSP), POA&M, and related documentation.

Architecture & Technical Oversight

• Design and maintain secure cloud infrastructure (primarily AWS), aligned with NIST 800-53 controls.

• Implement technical safeguards for identity & access management, vulnerability management, and incident response.

• Support DevOps teams in security automation and secure CI/CD pipelines.

• Conduct risk assessments and penetration test planning and review.

Team Enablement & Policy

• Collaborate with executive leadership on security strategy.

• Develop training materials to raise internal security awareness.

• Ensure alignment between security policies and engineering practices.

What We’re Looking For:

• Located in the Philippines with night shift work hours (to overlap with U.S. team).

• Proven experience leading or significantly contributing to GovRAMP, FedRAMP, and TX-RAMP compliance efforts.

• Expertise in NIST 800-53, FIPS 199/200, and continuous monitoring frameworks.

• Hands-on experience with AWS security services (IAM, GuardDuty, CloudTrail, Security Hub, etc.).

• Strong understanding of SOC2, GovRAMP, DevSecOps practices, and cloud infrastructure.

• Experience with audit responses

• Exceptional written and spoken English skills.

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; relevant certifications (e.g., CISSP, CCSP, AWS Security Specialty) are a strong plus.

• Bonus: SIEM tools or zero trust architecture.

Ready to lead security for a platform that changes lives?
Apply today and help us build trust into every login, every connection, and every breakthrough.

About Prezzee

Prezzee is a global leader in digital gifting and payments, having sold over 140 million gift cards through partnerships with more than 1,500 brands and serving over 6 million customers worldwide. Our mission is to change lives through the power of giving—leveraging borderless payment technology and innovative digital solutions to help people connect and create memorable moments that truly matter.

As our Head of Security, you’ll play a critical role in protecting the trust our customers, partners, and teams place in us every day. Reporting to the CTO and as a member of the IT Leadership Team, you’ll lead the evolution of Prezzee’s security, privacy, and compliance maturity -  embedding security-first thinking across the organisation while delivering practical, commercial outcomes that enable growth.

This role blends strategic leadership with hands-on impact, spanning policy and governance, technology uplift, and day-to-day security operations. Your work will directly support Prezzee’s growth ambitions and position us as a market leader in information security and privacy.

What You’ll Do

Lead Our Security Strategy

• Own and deliver a clear, ongoing security roadmap aligned to Prezzee’s risk appetite, business priorities, and growth plans.
  
  
• Continuously uplift our administrative, technical, and procedural security posture across the business.
  
  
• Stay ahead of emerging threats and evolving standards, ensuring Prezzee remains proactive rather than reactive.

Build a Security-First Culture

• Act as the Security Champion across all teams and locations, embedding security awareness into how we work every day.
  
  
• Partner closely with engineering, product, IT, and the wider business to ensure security is at the forefront of design.
  
  
• Manage and mentor a small, high-performing security team, driving engagement and alignment with Prezzee’s purpose.

Governance, Risk & Compliance

• Maintain and expand compliance with frameworks and certifications including PCI, ISO:27001, Cyber Essentials+, ISO:42001 and others as required.
  
  
• Chair and manage the ISMS Committee, ensuring stakeholders have clear visibility of risks, controls, and progress.
  
  
• Lead third-party and vendor security due diligence across tools, partners, and workplace technology.

Operational Security & Incident Management

• Oversee vulnerability management, penetration testing outcomes, and remediation within agreed SLAs.
  
  
• Coordinate security incident prevention, detection, and response across internal teams, MSPs, and partners.
  
  
• Create, maintain, and regularly test cyber security response plans and supporting playbooks.

Tools, Technology & AI Governance

• Select, implement, and manage core security tools including WAF, bot detection, PAM, code scanning, and compliance platforms.
  
  
• Establish and manage an AI security governance model that safely supports workplace enablement and customer experience innovation.
  
  
• Ensure AWS environments and system architectures align with security best practices.

Partner with the Business

• Support Sales and GTM teams with customer security questionnaires, audits, and front-line security engagement.
  
  
• Balance strong security outcomes with a pragmatic, commercial mindset that enables business velocity.
  
  

What You’ll Bring

• A degree in Computer Science, Software Engineering, or a related discipline.
  
  
• 5+ years’ experience in a senior cyber security role, ideally within a systems development or technology-led environment.
  
  
• Strong understanding of AWS technologies and modern cloud architecture models.
  
  
• Proven experience delivering strategic security programs, including policy development, risk management, BCP/DR testing, third-party risk, and end-user device security.
  
  
• Hands-on experience triaging, investigating, and resolving security and operational incidents within SLAs.
  
  
• Deep knowledge of modern cyber security principles, threat landscapes, threat intelligence, and remediation techniques.
  
  
• Experience coordinating outcomes across internal teams, external vendors, auditors, and security partners.
  
  
• A collaborative, business-minded approach with the confidence to influence at leadership level.

Why Join Prezzee?
You’ll play a key role in shaping the future of digital gifting at a global scale — working with talented people, modern technology, and a culture that genuinely values openness, excellence, and impact.
At Prezzee, Where We Don’t Just Work – We Innovate, Collaborate, And Shape The Future Of Digital Giving. As Part Of Our Dynamic Team, You’ll Contribute To a Global Company’s Growth While Enjoying a Flexible, Supportive, And Inclusive Work Environment. We Offer

Prezzeeversary Leave – Extra day of annual leave for each year you’re with us.
BirthYay Leave – Celebrate you with a paid day off during your birthday month.
Novated Car Leasing – A tax-smart way to bundle and pay for your car and running costs.
ClassPass Membership – Fully covered monthly credits for fitness, wellness, and beauty.
Office Allowance – One-time payment to upgrade your office setup.
Flexible Work Perks – Flex your hours, take Culture Swap Days, and work from anywhere for 30 days a year.
Prezzee Staff Discounts – Exclusive deals on Prezzee gift cards – just for being part of the team.
Wellbeing Support – Access to mental, social, financial, and physical wellbeing support via Telus.
Learning & Development – Grow your career with LinkedIn Learning, job shadowing, industry programs, and our Lunch & Learn sessions.
Employee Resource Groups – Be an advocate or ally and foster belonging through groups like EmpowHer and Pride.
Parental Leave – 12 weeks for primary carers and 4 weeks for secondary carers.

Prezzee has been recognised for the third consecutive year as a Computerworld Best Places to Work in IT, and as a Great Place to Work® 2026 across all of our three  regions. We value diversity, collaboration, and innovation in everything we do. Join a global team united by the core values: Give openness, Give greatness, Give magic. Give a damn &  Give Ingenuity.

Prezzee is an Equal Opportunity employer. We believe that diversity is the key to building the best products for our customers, team culture and growing our global business. Our diversity mission is for our people to be their most authentic selves, to inspire, innovate and celebrate within a culture of belonging. We do not discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status.

We are looking for people to help create human connections, make magic and shape the future of gifting so even if you don’t think you quite meet all of the skills listed or tick all the boxes, we’d still love to hear from you! Please let us know if you require any adjustments as part of the application and recruitment process, We also encourage you to let us know of your pronouns at any point of the process.

About Prezzee

Prezzee is a global leader in digital gifting and payments, having sold over 140 million gift cards through partnerships with more than 1,500 brands and serving over 6 million customers worldwide. Our mission is to change lives through the power of giving — leveraging borderless payment technology and innovative digital solutions to help people connect and create memorable moments that truly matter.

As our Head of Security, you’ll play a critical role in protecting the trust our customers, partners, and teams place in us every day. Reporting to the CTO and as a member of the IT Leadership Team, you’ll lead the evolution of Prezzee’s security, privacy, and compliance maturity -  embedding security-first thinking across the organisation while delivering practical, commercial outcomes that enable growth.

This role blends strategic leadership with hands-on impact, spanning policy and governance, technology uplift, and day-to-day security operations. Your work will directly support Prezzee’s growth ambitions and position us as a market leader in information security and privacy.

What You’ll Do

Lead Our Security Strategy

• Own and deliver a clear, ongoing security roadmap aligned to Prezzee’s risk appetite, business priorities, and growth plans.
  
  
• Continuously uplift our administrative, technical, and procedural security posture across the business.
  
  
• Stay ahead of emerging threats and evolving standards, ensuring Prezzee remains proactive rather than reactive.

Build a Security-First Culture

• Act as the Security Champion across all teams and locations, embedding security awareness into how we work every day.
  
  
• Partner closely with engineering, product, IT, and the wider business to ensure security is at the forefront of design.
  
  
• Manage and mentor a small, high-performing security team, driving engagement and alignment with Prezzee’s purpose.

Governance, Risk & Compliance

• Maintain and expand compliance with frameworks and certifications including PCI, ISO:27001, Cyber Essentials+, ISO:42001 and others as required.
  
  
• Chair and manage the ISMS Committee, ensuring stakeholders have clear visibility of risks, controls, and progress.
  
  
• Lead third-party and vendor security due diligence across tools, partners, and workplace technology.

Operational Security & Incident Management

• Oversee vulnerability management, penetration testing outcomes, and remediation within agreed SLAs.
  
  
• Coordinate security incident prevention, detection, and response across internal teams, MSPs, and partners.
  
  
• Create, maintain, and regularly test cyber security response plans and supporting playbooks.

Tools, Technology & AI Governance

• Select, implement, and manage core security tools including WAF, bot detection, PAM, code scanning, and compliance platforms.
  
  
• Establish and manage an AI security governance model that safely supports workplace enablement and customer experience innovation.
  
  
• Ensure AWS environments and system architectures align with security best practices.

Partner with the Business

• Support Sales and GTM teams with customer security questionnaires, audits, and front-line security engagement.
  
  
• Balance strong security outcomes with a pragmatic, commercial mindset that enables business velocity.
  
  

What You’ll Bring

• A degree in Computer Science, Software Engineering, or a related discipline.
  
  
• 5+ years’ experience in a senior cyber security role, ideally within a systems development or technology-led environment.
  
  
• Strong understanding of AWS technologies and modern cloud architecture models.
  
  
• Proven experience delivering strategic security programs, including policy development, risk management, BCP/DR testing, third-party risk, and end-user device security.
  
  
• Hands-on experience triaging, investigating, and resolving security and operational incidents within SLAs.
  
  
• Deep knowledge of modern cyber security principles, threat landscapes, threat intelligence, and remediation techniques.
  
  
• Experience coordinating outcomes across internal teams, external vendors, auditors, and security partners.
  
  
• A collaborative, business-minded approach with the confidence to influence at leadership level.

Why Join Prezzee?
You’ll play a key role in shaping the future of digital gifting at a global scale — working with talented people, modern technology, and a culture that genuinely values openness, excellence, and impact.
At Prezzee, Where We Don’t Just Work – We Innovate, Collaborate, And Shape The Future Of Digital Giving. As Part Of Our Dynamic Team, You’ll Contribute To a Global Company’s Growth While Enjoying a Flexible, Supportive, And Inclusive Work Environment. We Offer

Prezzeeversary Leave – Extra day of annual leave for each year you’re with us.
BirthYay Leave – Celebrate you with a paid day off during your birthday month.
Novated Car Leasing – A tax-smart way to bundle and pay for your car and running costs.
ClassPass Membership – Fully covered monthly credits for fitness, wellness, and beauty.
Office Allowance – One-time payment to upgrade your office setup.
Flexible Work Perks – Flex your hours, take Culture Swap Days, and work from anywhere for 30 days a year.
Prezzee Staff Discounts – Exclusive deals on Prezzee gift cards – just for being part of the team.
Wellbeing Support – Access to mental, social, financial, and physical wellbeing support via Telus.
Learning & Development – Grow your career with LinkedIn Learning, job shadowing, industry programs, and our Lunch & Learn sessions.
Employee Resource Groups – Be an advocate or ally and foster belonging through groups like EmpowHer and Pride.
Parental Leave – 12 weeks for primary carers and 4 weeks for secondary carers.

Prezzee has been recognised for the third consecutive year as a Computerworld Best Places to Work in IT, and as a Great Place to Work® 2026 across all of our three  regions. We value diversity, collaboration, and innovation in everything we do. Join a global team united by the core values: Give openness, Give greatness, Give magic. Give a damn &  Give Ingenuity.

Prezzee is an Equal Opportunity employer. We believe that diversity is the key to building the best products for our customers, team culture and growing our global business. Our diversity mission is for our people to be their most authentic selves, to inspire, innovate and celebrate within a culture of belonging. We do not discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status.

We are looking for people to help create human connections, make magic and shape the future of gifting so even if you don’t think you quite meet all of the skills listed or tick all the boxes, we’d still love to hear from you! Please let us know if you require any adjustments as part of the application and recruitment process, We also encourage you to let us know of your pronouns at any point of the process.

About the Role

We are seeking an experienced Engineering Infrastructure Security Manager to lead the security of our production and non-production engineering systems. This is a critical leadership role responsible for securing the infrastructure that powers the software development lifecycle, including source control systems, CI/CD pipelines, build environments, deployment platforms, developer tools, and associated cloud resources. The ideal candidate will bring deep technical expertise in infrastructure security, strong leadership capabilities, and a solid understanding of modern engineering and DevSecOps practices.

Key Responsibilities

Engineering Systems Security

• Design and implement security controls across development, staging, testing, and production environments
• Secure CI/CD pipelines, build systems, and deployment automation against supply chain threats
• Manage security for source control systems, code repositories, and secrets management platforms
• Oversee security of containerized environments (Docker, Kubernetes) and IaC ecosystems
• Ensure security across multi-cloud environments (AWS, GCP, Azure) and hybrid infrastructure

Security Architecture & Technical Leadership

• Design and implement security frameworks aligned with engineering workflows and developer productivity
• Implement zero-trust architecture and least-privilege access models
• Secure API gateways, service meshes, and microservices architectures
• Lead security initiatives across observability, logging, and monitoring platforms
• Strengthen network security posture including firewalls, VPCs, and segmentation

Risk Management & Vulnerability Response

• Conduct security assessments and penetration testing across engineering systems
• Manage vulnerability scanning and remediation programs
• Develop threat models for critical systems and deployment pipelines 
• Lead incident response for infrastructure security events
• Track and analyze security metrics (deployment security, configuration compliance, infra drift)

Team Leadership & Collaboration

• Build, mentor, and manage a high-performing team of security engineers
• Drive a “security as code” culture across engineering teams
• Collaborate with platform, SRE, and development teams to embed security into SDLC
• Provide training and guidance on secure infrastructure practices
• Foster a culture of security awareness and proactive risk reporting

Policy, Compliance & Governance

• Define and enforce security policies aligned with SOC 2, ISO 27001, NIST, PCI-DSS
• Ensure compliance with data protection regulations (GDPR, CCPA)
• Implement strong access control mechanisms and RBAC (must-have)
• Conduct regular audits and maintain compliance documentation
• Manage security for production data access and handling

Automation & Continuous Improvement

• Drive automation of security monitoring, controls, and incident response
• Implement security-as-code using Terraform, CloudFormation, and policy frameworks
• Integrate automated security testing into CI/CD pipelines (SAST, DAST, container scans)
• Maintain infrastructure security baselines and automated compliance checks
• Continuously reduce security technical debt

Business Continuity & Disaster Recovery

• Design and test disaster recovery plans for engineering infrastructure
• Implement backup strategies for source code, artifacts, and configurations
• Ensure high availability and resilience of critical systems
• Support incident response and business continuity planning from a security perspective

Basic Qualifications

Technical Expertise

• 8–12 years of experience in infrastructure security or related fields, with 3+ years in a leadership role
• Strong expertise in cloud security (AWS, GCP, Azure) and cloud-native architectures
• Hands-on experience with Kubernetes, containers, and orchestration platforms
• Deep understanding of CI/CD security, supply chain security, and DevSecOps practices
• Proficiency with Infrastructure-as-Code tools (Terraform, Ansible, CloudFormation)
• Experience with security tools: SIEM, vulnerability scanners, IDS/IPS, endpoint protection
• Strong knowledge of network security, encryption, IAM, and secrets management

Leadership & Collaboration

• Proven experience building and managing high-performing security teams
• Experience driving cross-functional initiatives across engineering, operations, and product teams
• Strong project management and execution skills
• Ability to mentor and grow security talent

Communication & Strategic Thinking

• Strong communication skills with ability to explain complex concepts to technical and non-technical stakeholders
• Experience presenting security strategies and risk insights to leadership
• Ability to translate business needs into security solutions
• Strong documentation and process definition skills

Compliance & Risk Management

• Experience with compliance frameworks: SOC 2, ISO 27001, NIST, PCI-DSS
• Strong understanding of risk assessment and security frameworks
• Knowledge of data privacy and regulatory requirements

Preferred Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field
• Security certifications such as CISSP, CISM, CCSP, CEH, or cloud security certifications
• Experience with GitOps workflows and tools like GitHub Advanced Security or GitLab Security
• Proficiency in scripting/programming (Python, Go, Bash) for automation
• Experience in regulated industries (finance, healthcare, government)
• Background in SRE or DevOps practices
• Experience securing microservices and serverless architectures
• Strong interest in security research and evolving threat landscapes

About the Role

We are seeking an experienced Infrastructure Security Engineer to work on the security of our production and non-production engineering systems. This is a critical  role responsible for securing the infrastructure that powers the software development lifecycle, including source control systems, CI/CD pipelines, build environments, deployment platforms, developer tools, and associated cloud resources. The ideal candidate will bring deep technical expertise in infrastructure security and a solid understanding of modern engineering and DevSecOps practices.

Key Responsibilities

Engineering Systems Security

• Design and implement security controls across development, staging, testing, and production environments
• Secure CI/CD pipelines, build systems, and deployment automation against supply chain threats
• Manage security for source control systems, code repositories, and secrets management platforms
• Oversee security of containerized environments (Docker, Kubernetes) and IaC ecosystems
• Ensure security across multi-cloud environments (AWS, GCP, Azure) and hybrid infrastructure

Security Architecture & Technical Leadership

• Design and implement security frameworks aligned with engineering workflows and developer productivity
• Implement zero-trust architecture and least-privilege access models
• Secure API gateways, service meshes, and microservices architectures
• Lead security initiatives across observability, logging, and monitoring platforms
• Strengthen network security posture including firewalls, VPCs, and segmentation

Risk Management & Vulnerability Response

• Conduct security assessments and penetration testing across engineering systems
• Manage vulnerability scanning and remediation programs
• Develop threat models for critical systems and deployment pipelines 
• Lead incident response for infrastructure security events
• Track and analyze security metrics (deployment security, configuration compliance, infra drift)

Policy, Compliance & Governance

• Define and enforce security policies aligned with SOC 2, ISO 27001, NIST, PCI-DSS
• Ensure compliance with data protection regulations (GDPR, CCPA)
• Implement strong access control mechanisms and RBAC.
• Conduct regular audits and maintain compliance documentation
• Manage security for production data access and handling

Automation & Continuous Improvement

• Drive automation of security monitoring, controls, and incident response
• Implement security-as-code using Terraform, CloudFormation, and policy frameworks
• Integrate automated security testing into CI/CD pipelines (SAST, DAST, container scans)
• Maintain infrastructure security baselines and automated compliance checks
• Continuously reduce security technical debt

Business Continuity & Disaster Recovery

• Design and test disaster recovery plans for engineering infrastructure
• Implement backup strategies for source code, artifacts, and configurations
• Ensure high availability and resilience of critical systems
• Support incident response and business continuity planning from a security perspective

Basic Qualifications

Technical Expertise

• 2–5 years of experience in infrastructure security or related fields.
• Strong expertise in cloud security (AWS, GCP, Azure) and cloud-native architectures
• Hands-on experience with Kubernetes, containers, and orchestration platforms
• Deep understanding of CI/CD security, supply chain security, and DevSecOps practices
• Proficiency with Infrastructure-as-Code tools (Terraform, Ansible, CloudFormation)
• Experience with security tools: SIEM, vulnerability scanners, IDS/IPS, endpoint protection
• Strong knowledge of network security, encryption, IAM, and secrets management

Compliance & Risk Management

• Experience with compliance frameworks: SOC 2, ISO 27001, NIST, PCI-DSS
• Strong understanding of risk assessment and security frameworks
• Knowledge of data privacy and regulatory requirements

Preferred Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field
• Security certifications such as CISSP, CISM, CCSP, CEH, or cloud security certifications
• Experience with GitOps workflows and tools like GitHub Advanced Security or GitLab Security
• Proficiency in scripting/programming (Python, Go, Bash) for automation
• Experience in regulated industries (finance, healthcare, government)
• Background in SRE or DevOps practices
• Experience securing microservices and serverless architectures
• Strong interest in security research and evolving threat landscapes

We are looking for an Application Security Engineer to work with our engineering team to ensure security is an integral part of our Software Development Lifecycle (SDLC). In this role, you’ll have the chance to use your security and software development background to protect patients as we build products that leverage AI to improve healthcare. If you enjoy working with talented engineers to solve complex technical challenges and want to see your work make a direct difference in patient outcomes, we encourage you to apply. This role is a hybrid, requiring three days a week in our San Francisco office.

What You’ll Do:

• Partner with the engineering team to provide hands-on technical guidance to software developers throughout the vulnerability remediation lifecycle. Perform secure code reviews, validate false positive determinations, coach developers on effective remediation strategies, threat model our products and carry out essential parts of a secure SDLC.
• Drive vulnerability identification using SAST, DAST, SCA and in-house AI tooling and manage external penetration testing.
• Support engineering team on vulnerability management, including risk assessment, remediation, improving identification of vulnerabilities and translate security and privacy requirements into technical requirements.
• Build security awareness through training on secure coding practices, security standards and latest security threats.

What You Bring:

• Security Communication – Ability to reason about risk in complex environments and communicate that risk to technical and non-technical audiences. Experience leading training, speaking internally/externally about security projects valued.
• Programming Skills  – Experience writing and maintaining code in at least one modern programming language and with at least one scripting language (Heartflow uses C++/Python). Comfortable with testing frameworks and CI/CD pipelines.
• AI Development Tools – Experience using AI code tools such as Claude Code and Github Copilot for development and security testing.
• Education & Experience  – BS in Computer Science (or related degree) or relevant certifications and equivalent experience. 5+ years of total experience with at least 1 year working in Application Security or performing security tasks in a development role.
• Securing SDLC – Have contributed to secure SDLC activities, including threat modeling, code review, security testing and vulnerability management.
• Knowledge of Modern AI Security Threats – Experience working with or ability to discuss current AI threats for both machine learning and generative AI.

What Helps You Stand Out:

• Healthcare Experience – Current knowledge of HIPAA, HITRUST and the complexities of working in a regulated environment. Experience with Software as a Medical Device (SaMD) is especially valuable.
• Infrastructure as Code & Cloud – Familiarity with AWS (or equivalent cloud providers) and configuration tools (Terraform, Chef, Ansible). Experience with containerization (Docker, Kubernetes) and orchestration (GitHub Actions or similar).

A reasonable estimate of the base salary compensation range is $145,000 to $180,000 per year, bonus, and equity. #LI-IB1

About the opportunity

Are you passionate about cybersecurity and eager to make a real impact in a dynamic environment? Look no further! We are on the lookout for a Senior Cloud Security Engineer who is ready to take the lead in proactively identifying and mitigating security threats and safeguarding our sensitive data. Join forces with our Platform and Data teams and be at the forefront of safeguarding our customer and our organisation.

At N26, our Infrastructure Security team is on a mission to detect and remediate IT and cloud infrastructure security threats. We're dedicated to providing efficient and effective services that empower our N26 tech teams to thrive.

Once here you will

• Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager.
• Own, define and drive initiatives, solutions, processes and frameworks to proactively identify and mitigate security threats within our AWS infrastructure which leads to an overall improvement of our security maturity.
• Design, deploy and maintain state-of-the-art cloud-native security solutions, incorporating end-to-end data protection, advanced threat detection, automated controls, alerting and remediation mechanisms to ensure continuous compliance and protection across our cloud infrastructure.  
• Perform regular and proactive research to detect new attack vectors.
• Perform Threat Modeling Sessions, assess and classify identify security threats and define threats mitigation solutions in alignment with the stakeholders
• Monitor for vulnerabilities, perform ongoing risk assessment and collaborate with cross-functional teams to mitigate the risk.
• Define the pentesting scope and scenarios.
• Develop and maintain documentation providing clear guidelines to strengthen security posture and ensure consistent, secure cloud operations across the organisation.
• Provide a first class service to our main stakeholders in our support portal
• Be part of our security incident response on-call rotation (voluntary) and lead security incidents 

What you will bring along

• Cloud Security: Competent understanding and experience of securing at minimum AWS cloud infrastructure environments, CI/CD pipelines, containerized environment and Linux systems.
• Risk Assessment: Experience with assessing security findings and mitigation strategies 
• Security Savvy: Competent knowledge of common security frameworks and tactics, including STRIDE, MITRE ATT&CK®, and OWASP.
• Data Security: Understanding of cloud data security challenges and best practices across cloud cloud environments.
• Tool Mastery: Experience in deploying and customising security tools to address threats and reduce risk (CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, container runtime security, etc.)
• Automation Pro: Proficiency in using CI/CD pipelines (e.g., Terraform) for implementing automated security testing and change management.
• Cloud Deployment: Hands-on Experience with modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.
• Scripting Skills: Proficiency in Python, Bash, or GO for scripting and automation.
• Ethical Hacker: Experience with ethical hacking and penetration test methodologies.

Teamwork & Collaboration

• Agile Mindset: Familiarity with agile methodologies and project management.
• Collaborative Spirit: Demonstrated ability to collaborate across teams and segments to achieve complex objectives.
• Hands-On: A hands-on attitude with a knack for driving solutions to completion.
• Communicator: Excellent oral and written communication skills.
• Growth-Driven: A growth mindset focused on learning and pushing the team forward.
• Community Contributor: Contributions to the security community, such as open-source tools, research papers, conference talks, etc.
• Educational Background: A Master's degree in cybersecurity or a related field or a Bachelor's degree in computer science or a related field with an advanced security certification.

If you're ready to embark on a thrilling journey in the world of IT security and make a meaningful impact, we want to hear from you! Join our team at N26 and help us protect what matters most.

What’s in it for you:

• Accelerate your career growth by joining one of Europe’s most talked about disruptors 🚀.
• Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation. 
• As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.    
• Additional day of annual leave for each year of service.  
• A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses. 
• A relocation package with visa support for those who need it.

Who we are

N26 has reimagined banking for today’s digital world. Technology and design empower everything we do and it’s how we are building the global banking platform the world loves to use.

We've eliminated physical branches, paperwork, and hidden fees for an elegant digital experience and supreme savings. Giving people the power to live and bank their way is what gets us out of bed in the morning and inspires the work that we do. 

We are headquartered in Berlin with offices in multiple cities across Europe, including Vienna and Barcelona, and a 1,500-strong team of more than 80 nationalities.

Sounds good? Apply now for this position.

Equal Opportunities:

We recognize that our strength lies in our people and the varied perspectives they bring to our workforce. We strive to build talented and diverse teams to drive our business success and empower our people to reach their full potential.

We genuinely welcome and encourage applications from people of all backgrounds, cultures, genders, sexual orientations, abilities, neurodiversities, and ages. We're committed to creating an inclusive workspace where everyone feels valued and respected, free from harassment and discrimination. If there's anything you need to make the application process work for you, please let us know by reaching out to candidate.exp@n26.com. 

Visit our website to learn more about Diversity, Equity, & Inclusion at N26. 

About the opportunity

Are you passionate about cybersecurity and eager to make a real impact in a dynamic environment? Look no further! We are on the lookout for a Senior Cloud Security Engineer who is ready to take the lead in proactively identifying and mitigating security threats and safeguarding our sensitive data. Join forces with our Platform and Data teams and be at the forefront of safeguarding our customer and our organisation.

At N26, our Infrastructure Security team is on a mission to detect and remediate IT and cloud infrastructure security threats. We're dedicated to providing efficient and effective services that empower our N26 tech teams to thrive.

Once here you will

• Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager.
• Own, define and drive initiatives, solutions, processes and frameworks to proactively identify and mitigate security threats within our AWS infrastructure which leads to an overall improvement of our security maturity.
• Design, deploy and maintain state-of-the-art cloud-native security solutions, incorporating end-to-end data protection, advanced threat detection, automated controls, alerting and remediation mechanisms to ensure continuous compliance and protection across our cloud infrastructure.  
• Perform regular and proactive research to detect new attack vectors.
• Perform Threat Modeling Sessions, assess and classify identify security threats and define threats mitigation solutions in alignment with the stakeholders
• Monitor for vulnerabilities, perform ongoing risk assessment and collaborate with cross-functional teams to mitigate the risk.
• Define the pentesting scope and scenarios.
• Develop and maintain documentation providing clear guidelines to strengthen security posture and ensure consistent, secure cloud operations across the organisation.
• Provide a first class service to our main stakeholders in our support portal
• Be part of our security incident response on-call rotation (voluntary) and lead security incidents 

What you will bring along

• Cloud Security: Competent understanding and experience of securing at minimum AWS cloud infrastructure environments, CI/CD pipelines, containerized environment and Linux systems.
• Risk Assessment: Experience with assessing security findings and mitigation strategies 
• Security Savvy: Competent knowledge of common security frameworks and tactics, including STRIDE, MITRE ATT&CK®, and OWASP.
• Data Security: Understanding of cloud data security challenges and best practices across cloud cloud environments.
• Tool Mastery: Experience in deploying and customising security tools to address threats and reduce risk (CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, container runtime security, etc.)
• Automation Pro: Proficiency in using CI/CD pipelines (e.g., Terraform) for implementing automated security testing and change management.
• Cloud Deployment: Hands-on Experience with modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.
• Scripting Skills: Proficiency in Python, Bash, or GO for scripting and automation.
• Ethical Hacker: Experience with ethical hacking and penetration test methodologies.

Teamwork & Collaboration

• Agile Mindset: Familiarity with agile methodologies and project management.
• Collaborative Spirit: Demonstrated ability to collaborate across teams and segments to achieve complex objectives.
• Hands-On: A hands-on attitude with a knack for driving solutions to completion.
• Communicator: Excellent oral and written communication skills.
• Growth-Driven: A growth mindset focused on learning and pushing the team forward.
• Community Contributor: Contributions to the security community, such as open-source tools, research papers, conference talks, etc.
• Educational Background: A Master's degree in cybersecurity or a related field or a Bachelor's degree in computer science or a related field with an advanced security certification.

If you're ready to embark on a thrilling journey in the world of IT security and make a meaningful impact, we want to hear from you! Join our team at N26 and help us protect what matters most.

What’s in it for you:

• Accelerate your career growth by joining one of Europe’s most talked about disruptors 🚀.
• Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation. 
• As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.    
• Additional day of annual leave for each year of service.  
• A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses. 
• A relocation package with visa support for those who need it.

Who we are

N26 has reimagined banking for today’s digital world. Technology and design empower everything we do and it’s how we are building the global banking platform the world loves to use.

We've eliminated physical branches, paperwork, and hidden fees for an elegant digital experience and supreme savings. Giving people the power to live and bank their way is what gets us out of bed in the morning and inspires the work that we do. 

We are headquartered in Berlin with offices in multiple cities across Europe, including Vienna and Barcelona, and a 1,500-strong team of more than 80 nationalities.

Sounds good? Apply now for this position.

Equal Opportunities:

We recognize that our strength lies in our people and the varied perspectives they bring to our workforce. We strive to build talented and diverse teams to drive our business success and empower our people to reach their full potential.

We genuinely welcome and encourage applications from people of all backgrounds, cultures, genders, sexual orientations, abilities, neurodiversities, and ages. We're committed to creating an inclusive workspace where everyone feels valued and respected, free from harassment and discrimination. If there's anything you need to make the application process work for you, please let us know by reaching out to candidate.exp@n26.com. 

Visit our website to learn more about Diversity, Equity, & Inclusion at N26. 

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

About the team

The Proactive Threat team is responsible for identifying vulnerabilities and security weaknesses across Stripe's systems, applications, networks, and cloud infrastructure — before adversaries do. We operate as a hybrid offensive function: conducting penetration testing, emulating real-world threat actors through red team operations, and partnering closely with our defensive security teams to validate detection capabilities and improve Stripe's overall security posture.

We are builders first. Our team develops custom tooling, automation frameworks, and internal platforms that scale our offensive capabilities and enable repeatable, high-fidelity assessments. We believe the best offensive security engineers are equal parts hacker and engineer.

The team is distributed across the United States, primarily operating in Eastern and Pacific time zones, and collaborates regularly with security, engineering, and product stakeholders across Stripe — including teams in Europe and Asia.

What you'll do

As an Offensive Security Engineer on the Proactive Threat team, you will simulate the tactics, techniques, and procedures (TTPs) of real-world adversaries to uncover security risks across Stripe's products and infrastructure. You'll conduct hands-on penetration testing, lead red team engagements, and collaborate with blue team counterparts to validate and improve detection and response capabilities. Your work will directly influence how Stripe builds, ships, and secures financial infrastructure used by millions of businesses worldwide.

Beyond assessments, you'll design and build offensive tooling and automation that amplifies the team's impact. You'll leverage threat intelligence to prioritize testing efforts, contribute to incident investigations when needed, and act as a subject-matter expert for security initiatives across the company.

Responsibilities

• Conduct comprehensive penetration tests across web applications, APIs, cloud environments (AWS/GCP/Azure), mobile applications, and internal infrastructure
• Plan and execute red team engagements that emulate the TTPs of cyber and criminal threat actors targeting financial services, including initial access, lateral movement, persistence, and data exfiltration scenarios
• Perform assumed-breach and objective-based assessments to test detection and response capabilities in coordination with defensive teams
• Partner with detection engineering, threat intelligence, and incident response teams to validate security controls, identify coverage gaps, and improve detection fidelity
• Contribute adversary tradecraft insights to inform detection rule development, threat hunting hypotheses, and incident response playbooks
• Support incident investigations by providing offensive expertise, log analysis, and root cause analysis when required
• Design, develop, and maintain custom offensive tools, scripts, and automation frameworks to enhance assessment efficiency and coverage
• Build internal platforms and workflows that enable scalable, repeatable offensive operations
• Contribute to internal security tooling repositories and champion engineering best practices within the team
• Automate repetitive testing tasks, payload generation, and reporting workflows using modern development practices
• Produce clear, actionable reports that communicate technical findings, business risk, and remediation guidance to both technical and non-technical stakeholders
• Act as a subject-matter expert and primary point of contact for stakeholder teams engaged in offensive security programs and Stripe-wide security initiatives
• Lead offensive security projects end-to-end, mentor junior team members, and foster a culture of continuous learning and knowledge sharing
• Stay current with emerging threats, vulnerabilities, and attack techniques; share research internally and contribute to the broader security community

Who you are

We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

• 5+ years of experience in offensive security, penetration testing, red teaming, or a related field
• Strong programming skills in Python, Go, or similar languages, with demonstrated experience building tools, automation, or custom exploits
• Deep knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability classes (injection, auth flaws, business logic, etc.)
• Hands-on experience with cloud platforms (AWS, Azure, or GCP), including cloud-native attack techniques and misconfigurations
• Proficiency with offensive tooling such as Burp Suite, Cobalt Strike, Mythic, Sliver, BloodHound, or similar frameworks
• Familiarity with adversary tradecraft and frameworks such as MITRE ATT&CK, including TTPs for initial access, privilege escalation, lateral movement, and exfiltration
• Excellent written and verbal communication skills, with the ability to translate complex technical findings into clear, risk-based recommendations
• Ability to think like an adversary — creative, persistent, and able to holistically assess risk in complex environments

Preferred qualifications

• Experience conducting offensive security in fintech, financial services, or other highly regulated environments
• Background in vulnerability research, exploit development, or CVE discovery
• Experience collaborating with threat intelligence, detection engineering, or incident response teams (purple team operations)
• Familiarity with big data and log analysis tools (Splunk, Databricks, PySpark, osquery, etc.) for threat hunting or investigative support
• Proficiency with AI/LLM-assisted development tools (e.g., Claude Code, Cursor, GitHub Copilot) and experience applying them to offensive security workflows
• Interest or experience in agentic automation — using LLMs or autonomous agents to augment reconnaissance, vulnerability discovery, or exploitation workflows
• Experience testing AI/ML systems or LLM-based applications for security weaknesses (prompt injection, training data extraction, model manipulation, etc.)
• Contributions to open-source security tools, published research, blog posts, or conference presentations
• Relevant certifications such as OSCP, OSWE, OSEP, OSED, CRTO, CPTS, PNPT, GXPN, or cloud security certifications

About the Role

As an Application Security Engineer (Offensive Testing), you will lead and perform penetration testing and DAST for Veeam Data Cloud products. You’ll use Burp Suite and modern web/API testing techniques to find real, exploitable issues, help prioritize risk, and work with engineering teams to drive fixes to completion.

You will also improve testing tools and processes, make testing more repeatable, and help teams prevent recurring vulnerabilities—especially around authentication, authorization, session management, and tenant isolation.

What You’ll Do

• Own offensive testing: plan what to test, how deep to go, and how often; create clear, consistent reports and reusable playbooks
• Perform manual pentesting (main focus): test web apps and APIs, especially authentication/authorization, multi-tenant boundaries, and critical workflows; chain issues into realistic attack paths
• Use Burp Suite daily: validate and reproduce findings with advanced Burp features; build and maintain repeatable scopes, macros, and authenticated flows
• Run and improve DAST: execute and tune authenticated scans, reduce false positives, and work with CI/platform teams to scale scanning and manage credentials
• Drive remediation: deliver high-quality write-ups, partner with engineers to fix and retest, and help prevent regressions; ensure findings are tracked with the right severity and SLAs
• Improve security long-term: spot recurring patterns and help teams prevent them through standards, libraries, platform controls, and input to threat modeling/design reviews

What You’ll Bring

• Strong web and API pentesting experience, especially in authorization (IDOR/BOLA, privilege escalation, role/tenant boundaries), authentication/session flows (tokens, identity integrations), and common vulnerabilities (injection, SSRF, deserialization, misconfigurations) with practical exploitation skills
• Advanced Burp Suite skills: manual validation, targeted fuzzing, authenticated testing, and workflow automation (extensions/macros)
• Experience writing Semgrep rules to detect insecure patterns and improve secure-by-default development
• DAST experience at scale: running or supporting authenticated scans, tuning coverage, and reducing false positives
• Clear written communication: concise PoCs and actionable remediation guidance for engineers

Bonus Skills

• SaaS multi-tenant security testing experience; OAuth2/OIDC/SAML depth; bug bounty triage; writing custom tooling or Burp extensions

What You’ll Get 

• 26 paid days off annually, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
• Paid parental, maternity, and paternity leave
• Fully covered family medical plan, dental, rehab, and vaccinations
• Life, critical illness, and disability insurance
• Employer pension contribution via PPK
• Monthly Edenred allowance of 450 PLN for meals
• MultiSport card fully covered by Veeam, giving access to sports facilities nationwide
• Up to 12 free therapy sessions annually, plus legal and financial advice
• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops and learning events like our annual Global Day of Learning

Please note: If the applicant is permanently present outside of Poland, Veeam reserves the right to refuse to consider the application for a job. Remote job is only possible in case the employee is located in Poland.

#LI-GD1
#Hybrid

About the Role

As an Application Security Engineer (Offensive Testing), you will lead and perform penetration testing and DAST for Veeam Data Cloud products. You’ll use Burp Suite and modern web/API testing techniques to find real, exploitable issues, help prioritize risk, and work with engineering teams to drive fixes to completion.

You will also improve testing tools and processes, make testing more repeatable, and help teams prevent recurring vulnerabilities—especially around authentication, authorization, session management, and tenant isolation.

What You’ll Do

• Own offensive testing: plan what to test, how deep to go, and how often; create clear, consistent reports and reusable playbooks
• Perform manual pentesting (main focus): test web apps and APIs, especially authentication/authorization, multi-tenant boundaries, and critical workflows; chain issues into realistic attack paths
• Use Burp Suite daily: validate and reproduce findings with advanced Burp features; build and maintain repeatable scopes, macros, and authenticated flows
• Run and improve DAST: execute and tune authenticated scans, reduce false positives, and work with CI/platform teams to scale scanning and manage credentials
• Drive remediation: deliver high-quality write-ups, partner with engineers to fix and retest, and help prevent regressions; ensure findings are tracked with the right severity and SLAs
• Improve security long-term: spot recurring patterns and help teams prevent them through standards, libraries, platform controls, and input to threat modeling/design reviews

What You’ll Bring

• Strong web and API pentesting experience, especially in authorization (IDOR/BOLA, privilege escalation, role/tenant boundaries), authentication/session flows (tokens, identity integrations), and common vulnerabilities (injection, SSRF, deserialization, misconfigurations) with practical exploitation skills
• Advanced Burp Suite skills: manual validation, targeted fuzzing, authenticated testing, and workflow automation (extensions/macros)
• Experience writing Semgrep rules to detect insecure patterns and improve secure-by-default development
• DAST experience at scale: running or supporting authenticated scans, tuning coverage, and reducing false positives
• Clear written communication: concise PoCs and actionable remediation guidance for engineers

Bonus Skills

• SaaS multi-tenant security testing experience; OAuth2/OIDC/SAML depth; bug bounty triage; writing custom tooling or Burp extensions

What You’ll Get 

• 25 vacation days, 4 sick days, 21 paid medical leave days, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
• Premium private medical insurance for employees and dependents
• Daily meal vouchers for restaurants and groceries (180 CZK per working day)
• Flexible cafeteria platform with thousands of lifestyle benefit options
• Multisport Card for gym and wellness, with family add-on options
• Annual public transport reimbursement up to a set limit
• Corporate mobile plan with optional family tariff
• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops and learning events like our annual Global Day of Learning

Please note: If the applicant is permanently present outside of the Czech Republic, Veeam reserves the right to refuse to consider the application for a job. Remote job is only possible in case the employee is located in the Czech Republic.

#LI-GD1
#Hybrid

Who you'll work with

You will join our office in Madrid to work in teams and directly interact with our partners, providers, and venues.

In this role, you will help Fever grow its pipeline of original events in the region. To do so, you will manage and grow a team of Project Managers, Producers, and other types of profiles, while working together with all departments of Fever, from Marketing to Operations.

The team you’re about to join (and lead) consists of people that are motivated, young, and fun. On top of having multicultural backgrounds, people in the team are all top profiles: McKinsey, BCG, Bain, Rocket Internet, Uber, Amazon, Google, KKR, Cirque du Soleil, PSG, Roland Garros.

What you'll do

As a Regional Manager for Spain + Portugal, you will create and lead a team to develop, launch and manage events, from A to Z. You will be responsible for the region’s P&L, team development, development of local connections in the industry and represent Fever across all cities you will be managing. Together with the other departments, you will define the strategy to grow the business in your region and define the scalability of events to all our other markets, working hand in hand with other Regional Managers and the company’s leadership. 

When you join Fever, you are joining a company that will invest in your professional development. You will receive training and coaching on how to:

• Build and manage the team in the region (Project Managers, Producers, Location Scouters, etc) that will be generating growth for the countries within the scope
• Ensure individual team members are effective in achieving their quality and revenue goals on a quarterly basis, by auditing their work and performance on a regular basis
• Define the strategy of the region for its growth by ensuring maximum sales performance, customer excellence, and operational quality of our events, to meet quarterly and annual regional goals in all KPIs
• Manage the local portfolio of experiences based on data analyses, ensuring Fever’s penetration in the local market 
• Develop and maintain a very high level of relationship with C-level executives from major entertainment companies
• Manage big local partners and ensure our local network keeps expanding 
• Negotiate and close business deals with partners
• Define and support the scalability of our experiences in other cities (opportunity for travel)
• Report performance on a weekly, monthly, and quarterly basis
• Provide coaching, mentoring, and feedback to local team members 
• Execute detailed analysis of business opportunities and processes
• Represent Fever at local events and conversations
  

Qualifications

• Project management / startup or consulting background (10y+ experience)
• MBA from top-tier school preferred
• Fluent English + Spanish
• Strong analytical and organizational skills with large team management experience
• Solution-focused, identifying problems and defining solutions with an entrepreneurial spirit
• Experience managing complex projects
• Strong verbal and written communication skills, with strong skills in creating and developing relationships with C-level executives.
• Ability to influence/persuade all levels of staff. 
• Able to coordinate and audit all different internal and external teams to guide them to success in all achievements.
• Extensive networking skills and ability to make partnerships happen. The person needs to be able to lead worldwide touring / not touring project roll-outs that are co-created with big Entertainment companies (e.g.: Bridgerton Experience, Stranger Things Experience, Harry Potter Forbidden Forest Experience)
• Curious and keen to push boundaries and try new concepts while being in contact with the top management - very high visibility and exposure both internally and externally.
• Able to handle large amounts of work and parallel work-streams
• This is not a position for an event production background

What you'll get

All job positions at Fever in Spain include the following perks:

• Attractive compensation package consisting of base salary and the potential to earn a significant bonus for top performance.
• Opportunity to have a real impact in a high-growth global category leader
• Health + dental insurance
• Flexible remuneration plan
• Wellhub membership
• 40% discount on all Fever events and experiences
• Work in a location in the heart of Madrid, with possible travel across our markets
• Responsibility from day one and professional and personal growth
• Great work environment with a young, international team of talented people to work with!
• Free snacks, drink, and fruit at the office!

Our hiring process

• A 30 min video call with one of our Talent Acquisition Managers, to better understand your career plan, assess cultural fit and answer any questions you may have
• A 60 min online test with three topics: logic, analytics, and written understanding
• A 30 min interview with your future manager
• A 45 min video call with your future manager + another FO manager, including questions about your profile and a business case presentation (to be prepared in advance)

On average our process lasts 20 working days and offers usually follow within a week.

ABOUT THE ROLE:

The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response

Product Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Identity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi-factor authentication, and granular role-based access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

• Supporting the development and implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.
• Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.
• Creating security automations and services to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes. We want you to run with the “anything is possible” mantra.
• Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers. You'll monitor and respond to threats across AWS, GCP, internal applications, and employee endpoints (Windows, macOS).
• Collaborating with cross-functional teams to develop and implement; business-specific threat detection rules. 
• Responsible for ensuring the quality of detections, and uptime of our detection ecosystem through mature test driven development paired with proactive health monitoring capabilities.
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.
• Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery.
• Support as part of the wider security incident response on-call rota.

WHAT WE ARE LOOKING FOR:

• Strong knowledge with one of the following: Splunk, Scanner, Sentinel, SecOps.
• Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands-on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; bonus points if you have a repository to show-case your work.

WHAT YOU’LL GET IN RETURN:

• Competitive Compensation -  competitive salary and share options
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Health Insurance – Private family insurance with additional OPD coverage and top-up options.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Office perks with snacks, coffee, tea, and lunch (location dependent).

TIDEAN WAYS OF WORKING:

At Tide, we champion a flexible workplace model that supports both in-person and remote work to cater to the specific needs of our different teams. 

While remote work is supported, we believe in the power of face-to-face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team-building, where we encourage regular in-person gatherings to foster a strong sense of community. 

ABOUT THE ROLE:

The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response

Product Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Identity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi-factor authentication, and granular role-based access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

• Supporting the development and implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.
• Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.
• Creating security automations and services to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes. We want you to run with the “anything is possible” mantra.
• Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers. You'll monitor and respond to threats across AWS, GCP, internal applications, and employee endpoints (Windows, macOS).
• Collaborating with cross-functional teams to develop and implement; business-specific threat detection rules. 
• Responsible for ensuring the quality of detections, and uptime of our detection ecosystem through mature test driven development paired with proactive health monitoring capabilities.
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.
• Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery.
• Support as part of the wider security incident response on-call rota.

WHAT WE ARE LOOKING FOR:

• Strong knowledge with one of the following: Splunk, Scanner, Sentinel, SecOps.
• Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands-on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; bonus points if you have a repository to show-case your work.

WHAT YOU’LL GET IN RETURN:

• Competitive Compensation -  competitive salary and share options
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Health Insurance – Private family insurance with additional OPD coverage and top-up options.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Office perks with snacks, coffee, tea, and lunch (location dependent).

ABOUT THE ROLE:

The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response

Product Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Identity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi-factor authentication, and granular role-based access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

• Supporting the development and implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.
• Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.
• Creating security automations and services to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes. We want you to run with the “anything is possible” mantra.
• Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers. You'll monitor and respond to threats across AWS, GCP, internal applications, and employee endpoints (Windows, macOS).
• Collaborating with cross-functional teams to develop and implement; business-specific threat detection rules. 
• Responsible for ensuring the quality of detections, and uptime of our detection ecosystem through mature test driven development paired with proactive health monitoring capabilities.
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.
• Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery.
• Support as part of the wider security incident response on-call rota.

WHAT WE ARE LOOKING FOR:

• Strong knowledge with one of the following: Splunk, Scanner, Sentinel, SecOps.
• Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands-on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; bonus points if you have a repository to show-case your work.

WHAT YOU’LL GET IN RETURN:

• Competitive Compensation -  competitive salary and share options
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Health Insurance – Private family insurance with additional OPD coverage and top-up options.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Office perks with snacks, coffee, tea, and lunch (location dependent).

TIDEAN WAYS OF WORKING:

At Tide, we champion a flexible workplace model that supports both in-person and remote work to cater to the specific needs of our different teams. 

While remote work is supported, we believe in the power of face-to-face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team-building, where we encourage regular in-person gatherings to foster a strong sense of community.