About the team

With so many people using Roku’s products globally, we’ve become well-known for products that “just work” right out of the box and integrate almost by magic.  That doesn’t happen by accident, which is why we are committed to making sure our products aren’t just intuitive; they’re obvious.  To support that commitment, the Roku’s Automation support and Tools team focuses on providing innovative and impactful tools that improve efficiency, enhance productivity of all engineering to test Roku products, from industry’s most reliable streaming media platform to smart home products that seamlessly integrate with Roku entertainment OS for a great connected home user experience. We accomplish this using state of the art technology and engineering to make it happen, with consideration for the customer as the centre of all that we do.

Roku’s embedded software automation and tools team has an excellent opportunity for a Senior Software Engineer with strong experience in building automation framework and tools for embedded devices. The role involves developing and maintaining software and tools that help various internal teams to test and manage Roku’s products. Working closely with internal stakeholders to enhance existing automation toolset with new capabilities and advanced features that empower all engineering and accelerate validation efforts for SW releases. 

About the role

You will work cross-functionally with various engineering teams, using your automation tooling expertise to help both firmware developers and QA to create and deliver the highest quality products that provide valuable end-user feedback to improve customer experience. This position requires Python expertise with strong experience using web frameworks, excellent debugging, written, and organizational skills. You will be joining a talented, high-performance team of developers with a history of delivery. We are looking for someone who can help us maintain this pace and continue delivering high quality as we grow. 

We are looking for a keen problem solver and a self-motivated individual with excellent communication and collaborative skills who is eager to learn and grow in the consumer electronics space. As an engineer on the team, you will require the skills and confidence to undertake the challenges of working in a fast-paced environment, frequently be taken out of your comfort zone, and relish getting your hands dirty working with user-facing products. 

What you will be doing:

• Develop and release new E2E automation support and tools 
• Debug issues to improve the quality of automated test tools and frameworks 
• Conduct code reviews to improve code quality and optimization 
• Promote coding conventions and standards for code re-usability and cleanliness 
• Document feature guides, identify and formulate user requirements, and define product behavior 
• Support and maintain existing automation tools and technology 
• Mentor less experienced engineers and drive automation development 
• Assist in monitoring and maintenance of critical systems 
• Champion the adoption of AI tools and technologies to enhance automation capabilities and team productivity. 
• Review and provide technical feedback on design documents and high-level architecture diagrams across multiple tools and teams, with a focus on evaluating design trade-offs, scalability, maintainability, and alignment with overall system architecture. 

We're excited if you have:

• 10+ years of hands-on experience with automation systems 
• 10+ years of programming experience, preferably with Python 
• Bachelor’s degree in computer science or related field 
• Proficient in Linux, Python-based test automation frameworks, and tools using REST APIs 
• Hands-on experience in development/integration of E2E test automation frameworks and tools for embedded software devices 
• Proficient use of AI tools and technologies with a proven track record as a promoter and advocate for AI adoption in software development and testing automation. 
• Agentic workflow familiarity: Working knowledge of multi-step AI orchestration frameworks and the practical use of AI agents to support and streamline day-to-day development workflows. 
• Experienced in developing and maintaining web-based tools using JavaScript and React/Next.js 
• Experience with DevOps and continuous integration tools (Jenkins, GitLab CI, Docker, and Kubernetes) 
• Experience with CI/CD pipeline development and deployment via AWS or GCP cloud technologies 
• Experience with unit testing frameworks – pytest/pyunit and Cypress for UI testing 
• Experience developing web applications using Flask, FastAPI, Django, and Nginx 
• Knowledge in using AI for increasing test automation coverage and productivity 
• Experience with retail Consumer Electronic (CE) devices, ideally in the Over The Top (OTT) streaming domain 
• Expert problem-solving and technical troubleshooting skills 
• Ability to learn new technologies quickly 
• A self-directed professional able to work independently 
• Ability to work through ambiguous requirements and be flexible/adaptable to change 
• Comfortable and experienced working with cross-functional peers and internal stakeholders across European and US time zones 
• Excellent communication and collaborative skills 

Additional nice to have skills: 

• Previous experience with Non-Functional Testing (Performance Testing, Stress Testing) 
• Knowledge of network technologies and libraries such as TCP/IP and HTTP 
• Experience with database technologies (MySQL, PostgreSQL, MongoDB, Redis) for test data management 
• Familiarity with monitoring and observability tools (Grafana, Prometheus, ELK stack, Datadog) 
• Knowledge of streaming protocols and technologies (HLS, DASH, RTMP, WebRTC) 
• Experience with API testing tools (Postman, REST Assured, GraphQL) 
• Understanding of security testing principles and tools (OWASP, penetration testing) 
• Experience with mobile testing frameworks and cross-platform testing 
• Familiarity with test reporting and analytics platforms (Allure, TestRail, ReportPortal) 
• Experience with infrastructure as code (Terraform, Ansible, CloudFormation) 
• Knowledge of machine learning concepts for test optimization and predictive analysis 
• Familiarity with Agile/Scrum methodologies and project management tools (Jira, Confluence) 
• Basic understanding of hardware debugging tools and techniques for embedded systems 

#LI-AB3

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

About the team

The Proactive Threat team is responsible for identifying vulnerabilities and security weaknesses across Stripe's systems, applications, networks, and cloud infrastructure — before adversaries do. We operate as a hybrid offensive function: conducting penetration testing, emulating real-world threat actors through red team operations, and partnering closely with our defensive security teams to validate detection capabilities and improve Stripe's overall security posture.

We are builders first. Our team develops custom tooling, automation frameworks, and internal platforms that scale our offensive capabilities and enable repeatable, high-fidelity assessments. We believe the best offensive security engineers are equal parts hacker and engineer.

The team is distributed across the United States, primarily operating in Eastern and Pacific time zones, and collaborates regularly with security, engineering, and product stakeholders across Stripe — including teams in Europe and Asia.

What you'll do

As an Offensive Security Engineer on the Proactive Threat team, you will simulate the tactics, techniques, and procedures (TTPs) of real-world adversaries to uncover security risks across Stripe's products and infrastructure. You'll conduct hands-on penetration testing, lead red team engagements, and collaborate with blue team counterparts to validate and improve detection and response capabilities. Your work will directly influence how Stripe builds, ships, and secures financial infrastructure used by millions of businesses worldwide.

Beyond assessments, you'll design and build offensive tooling and automation that amplifies the team's impact. You'll leverage threat intelligence to prioritize testing efforts, contribute to incident investigations when needed, and act as a subject-matter expert for security initiatives across the company.

Responsibilities

• Conduct comprehensive penetration tests across web applications, APIs, cloud environments (AWS/GCP/Azure), mobile applications, and internal infrastructure
• Plan and execute red team engagements that emulate the TTPs of cyber and criminal threat actors targeting financial services, including initial access, lateral movement, persistence, and data exfiltration scenarios
• Perform assumed-breach and objective-based assessments to test detection and response capabilities in coordination with defensive teams
• Partner with detection engineering, threat intelligence, and incident response teams to validate security controls, identify coverage gaps, and improve detection fidelity
• Contribute adversary tradecraft insights to inform detection rule development, threat hunting hypotheses, and incident response playbooks
• Support incident investigations by providing offensive expertise, log analysis, and root cause analysis when required
• Design, develop, and maintain custom offensive tools, scripts, and automation frameworks to enhance assessment efficiency and coverage
• Build internal platforms and workflows that enable scalable, repeatable offensive operations
• Contribute to internal security tooling repositories and champion engineering best practices within the team
• Automate repetitive testing tasks, payload generation, and reporting workflows using modern development practices
• Produce clear, actionable reports that communicate technical findings, business risk, and remediation guidance to both technical and non-technical stakeholders
• Act as a subject-matter expert and primary point of contact for stakeholder teams engaged in offensive security programs and Stripe-wide security initiatives
• Lead offensive security projects end-to-end, mentor junior team members, and foster a culture of continuous learning and knowledge sharing
• Stay current with emerging threats, vulnerabilities, and attack techniques; share research internally and contribute to the broader security community

Who you are

We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

• 5+ years of experience in offensive security, penetration testing, red teaming, or a related field
• Strong programming skills in Python, Go, or similar languages, with demonstrated experience building tools, automation, or custom exploits
• Deep knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability classes (injection, auth flaws, business logic, etc.)
• Hands-on experience with cloud platforms (AWS, Azure, or GCP), including cloud-native attack techniques and misconfigurations
• Proficiency with offensive tooling such as Burp Suite, Cobalt Strike, Mythic, Sliver, BloodHound, or similar frameworks
• Familiarity with adversary tradecraft and frameworks such as MITRE ATT&CK, including TTPs for initial access, privilege escalation, lateral movement, and exfiltration
• Excellent written and verbal communication skills, with the ability to translate complex technical findings into clear, risk-based recommendations
• Ability to think like an adversary — creative, persistent, and able to holistically assess risk in complex environments

Preferred qualifications

• Experience conducting offensive security in fintech, financial services, or other highly regulated environments
• Background in vulnerability research, exploit development, or CVE discovery
• Experience collaborating with threat intelligence, detection engineering, or incident response teams (purple team operations)
• Familiarity with big data and log analysis tools (Splunk, Databricks, PySpark, osquery, etc.) for threat hunting or investigative support
• Proficiency with AI/LLM-assisted development tools (e.g., Claude Code, Cursor, GitHub Copilot) and experience applying them to offensive security workflows
• Interest or experience in agentic automation — using LLMs or autonomous agents to augment reconnaissance, vulnerability discovery, or exploitation workflows
• Experience testing AI/ML systems or LLM-based applications for security weaknesses (prompt injection, training data extraction, model manipulation, etc.)
• Contributions to open-source security tools, published research, blog posts, or conference presentations
• Relevant certifications such as OSCP, OSWE, OSEP, OSED, CRTO, CPTS, PNPT, GXPN, or cloud security certifications

At Bishop Fox, security isn't just a job - it's our passion. As leaders in continuous offensive security and penetration testing, we deliver world-class customer experiences. Trusted by over a quarter of the Fortune 100, half of the Fortune 10, and top global media companies, we help safeguard digital landscapes. Our Cosmos platform, honored as Best Emerging Technology by SC Media, exemplifies our commitment to innovation.   

Joining Bishop Fox means collaborating with a curious and dedicated team. You'll tackle complex challenges for some of the world's most recognized organizations, securing their networks against real-world threats. With nearly 20 years of industry contributions - including 16 open-source tools and 50 security advisories published in the past five years - we're committed to making the digital world safer.    

Given our exceptional growth, we are expanding and hiring a Pen Tester to join us on this exciting journey. We’re looking for a talented, experienced professional hacker to help us secure some of the world’s most complex software and sophisticated technologies. You’ll be working alongside our US and internationally-based teams supporting clients across multiple industries.                          

Who Are You and What You’ll Do  

You’re a cybersecurity consultant with a strong offensive security mindset and a passion for understanding how modern applications, cloud platforms, APIs, and emerging technologies operate at a deep technical level. You enjoy uncovering security weaknesses, thinking creatively about attack paths, and helping organizations solve complex security challenges through practical, risk-focused assessments. 

At Bishop Fox, you’ll work on a wide variety of security engagements including Cloud Security Assessments, Mobile Application Security Testing, Hybrid Application Assessments (HAA), and AI/LLM Security Assessments. You’ll evaluate modern applications and distributed systems across cloud-native, mobile, backend, and AI-enabled environments. 

Your responsibilities will include performing hands-on security testing, analyzing application behavior, reviewing source code, identifying realistic exploitation scenarios, and validating security controls across modern architectures. You’ll work closely with clients and internal teams to deliver high-quality technical assessments and actionable remediation guidance. 

As a consultant, you’ll contribute throughout the full engagement lifecycle from scoping and test planning to execution, reporting, and client presentations. Success in this role requires strong technical depth, structured testing methodologies, effective communication skills, and the ability to adapt quickly to new technologies and environments. 

Your Experience  

• 4+ years of experience in application security assessments, penetration testing, or offensive security engagements 

• Strong understanding of application security fundamentals, modern attack techniques, and common vulnerabilities affecting web applications, APIs, mobile applications, and cloud-native environments 

• Hands-on experience testing REST APIs, including authentication/authorization flaws, IDORs, injection vulnerabilities, session management issues, and business logic flaws 

• Strength with AWS services and cloud security concepts, including IAM, STS, S3, Lambda, API Gateway, CloudTrail, CloudWatch, and secure communication patterns such as SigV4 

• Solid understanding of networking and web fundamentals, including HTTP/HTTPS, TCP/IP, DNS, API communication flows, cookies, headers, and related concepts 

• Experience reviewing source code for security issues in Java, C#, and Python applications 

• Knowledge of secure coding principles and common risks such as SSRF, insecure deserialization, injection vulnerabilities, sensitive data exposure, and insecure cloud integrations 

• Understanding of SDLC, CI/CD pipelines, and secure development practices 

• Experience using security assessment and code review tools such as Burp Suite, Semgrep, Git, AWS CLI, and API testing/debugging tools 

• Comfortable working across Linux, Windows, and macOS environments 

• Experience or strong interest in AI/LLM security, including prompt injection, RAG risks, insecure integrations, excessive permissions, and the OWASP Top 10 for LLM Applications 

• Strong written and verbal communication skills, with the ability to deliver clear, actionable findings and communicate technical risks to both technical and executive stakeholders 

• Experience following structured testing methodologies, documentation standards, and validation/retesting workflows 

• Strong collaboration and interpersonal skills when working with security, engineering, and client teams 

• Ability to manage multiple concurrent engagements while maintaining high-quality deliverables and attention to detail 

• Curious, adaptable, and professional mindset with a passion for continuous learning and emerging security trends 

Nice to Have 

• Exposure to hardware or embedded device security testing 

• Familiarity with cloud-native and serverless architectures 

• Consulting or client-facing experience 

• Relevant security certifications or hands-on research contributions 

Why Bishop Fox    

At Bishop Fox, we're driven by a simple mission: deliver exceptional quality to our clients, foster a vibrant and fulfilling environment for our team, and champion excellence within our industry. Our core values, which we live by every day, are:   

• Be Excellent to Each Other  

• Do the Right Thing  

• Do What You’ll Say You’ll Do  

• Get Better Together  

• Give a Sh*t   

At Bishop Fox, we're committed to providing benefits that support your well-being and professional growth. Here's a glimpse of what we offer:   

• Generous Time Off and Company-Wide Holidays  

• Team Events and International Travel Opportunities  

• Work From Home Support  

• Training Budget  

• Saving Fund  

• Food Coupons  

• Health and Wellbeing programs  

This position is not eligible for visa sponsorship. Applicants must be authorized to work in Mexico for the duration of employment without sponsorship.  

Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment. 

Interested? Apply today! 

About the opportunity

We are looking for an Engineering Manager who thrives in a fast-paced, dynamic environment, is comfortable navigating ambiguity while moving projects forward, and is motivated to build software and processes that foster greater team efficiency and scalability across the organization. This person will focus on people management, strategic alignment and software development projects that have a meaningful impact on EnergyHub’s product and people.

As Engineering Manager for the Program team, you will own a core part of our platform: how customer programs are configured, launched, tested, and maintained across a growing set of product offerings. You will help evolve a critical system that sits at the intersection of product, operations, and platform engineering. This role is ideal for someone who enjoys bringing clarity to complex domains, improving internal tooling, and building systems that scale as the business grows. As we scale, you will champion technical excellence while balancing new feature delivery, technical debt reduction, and modernizing the user experience to empower client-facing teams.

Main Responsibilities: What you'll do

• Build, manage, and mentor a team of engineers working on shared platform capabilities.
• Partner with cross-functional teams, including Engineering and Product, to define the team’s mission, vision, and roadmap
• Provide strategic oversight, architectural direction and execution for new team initiatives, such as building new UI workflows, code refactoring and transition to micro-services environment
• Act as a technical partner to Product, QA, Analytics, and client-facing teams.
• Translate cross-functional needs into clear technical plans and priorities.
• Communicate tradeoffs and progress clearly to both technical and non-technical stakeholders.
• Ensure the team delivers quality, scalable, well-tested, code on time and in scope.
• Continuously raise the bar for your team through organizational evolution, agile process improvement efforts and leveling your team’s technical prowess
• Thrive on building your direct report’s skills through coaching, mentoring and training opportunities
• Conduct code reviews across the team, with the ability to dive into working in the existing code base as needed
• Other duties as assigned

Required Skills and Experience: What you need

At EnergyHub we care about your passion and how you can contribute to our mission, not about the schools and companies on your resume.

This is not a list of requirements and we certainly don’t expect that you need to hit every bullet point to be a great candidate or great in the role. However, these things will catch our eye and demonstrate many of the core skills needed.

• 2+ years of experience directly managing teams of developers (ideally with teams of 5-7+)
• Core technical knowledge and experience with some of the tools and technologies at EnergyHub with a focus on Java, Spring, AWS (EC2, ECS), MongoDB and PostGres
• Experience with other technologies such as Python and C#/.NET to drive automation and micro-service efforts
• Strong foundational understanding of computer science principles and SDLC best practices
• Experience with architecture, scalability, and reliability as we develop consumable API’s
• Ability to learn from challenging projects with appropriate corrections to improve process, resource, and coaching
• Ability to work well with ambiguity and in a dynamic work environment
• Belief in a test first approach to coding
• Other duties as assigned

Preferred Skills and Experience: Nice-to-haves

• Experience building client-facing APIs and supporting developers integrating with those APIs
• Experience improving internal tools and backing services used by operational or customer-facing teams.
• Familiarity with test automation
• Experience working closely with Product partners to help disambiguate and modernize legacy implementations

Please note that sponsorship of new applicants for employment authorization, or any other immigration-related support, is not available for this position at this time.

Why work for EnergyHub?

• Collaborate with outstanding people: Our employees work hard, do great work, and enjoy collaborating and learning from each other.
• Make an immediate impact: New employees can expect to be given real responsibility for bringing new technologies to the marketplace. You are empowered to perform as soon as you join the team!
• Gain well rounded experience: EnergyHub offers a diverse and dynamic environment where you will get the chance to work directly with executives and develop expertise across multiple areas of the business.
• Work with the latest technologies: You'll gain exposure to a broad spectrum of IoT, SaaS and machine learning obstacles, including distributed fault-tolerance, device control optimization, and process modeling to support scalable interaction with disparate downstream APIs.
• Be part of something important: Help create the future of how energy is produced and consumed. Make a positive impact on our climate.

About EnergyHub

EnergyHub empowers utilities and their customers to create a clean, distributed energy future. We help consumers turn their smart thermostats, EVs, batteries, and other products into virtual power plants that keep the grid stable and enable higher penetration of solar and wind power.

To learn more, visit energyhub.com.

Company Benefits

EnergyHub offers a generous benefits package including 100% paid medical for employees and a 401(k) with employer match. We offer a casual environment, the flexibility to set your own schedule, a fully stocked fridge and pantry, free Citi Bike membership, secure bike rack, gym subsidy, paid parental leave, and an education assistance program.

EnergyHub is an Equal Opportunity Employer

EOE, Including Disability/Vets.  Reasonable accommodations are available for individuals with disabilities throughout the application process. If you are a person with a disability needing assistance with the application process, please contact accommodations.apply@energyhub.net.

In connection with your application, we collect information that identifies, reasonably relates to or describes you (“Personal Information”). The categories of Personal Information that we may collect include your name, government-issued identification number(s), email address, mailing address, other contact information, emergency contact information, employment history, educational history, and demographic information.  We collect and use those categories of Personal Information about you for human resources and other business management purposes, including identifying and evaluating you as a candidate for potential or future employment or future positions, recordkeeping in relation to recruiting and hiring, conducting analytics, and ensuring compliance with applicable legal requirements and Company policies. By submitting your application, you acknowledge that we may retain some of the personal data that you provide in your application for our internal operations such as managing our recruitment system and ensuring that we comply with labor laws and regulations even after we have made our employment decision.

Notice To Third Party Agencies:

EnergyHub understands the value of professional recruiting services. However, we are not accepting resumes from recruiters or employment agencies for this position. In the event we receive a resume or candidate referral for this position from a third-party recruiter or agency without a previously signed agreement, we reserve the right to pursue and hire those candidate(s) without any financial obligation to you.

Cybersecurity Engineer

Work Location: Huntsville, AL

Schedule: Full Time; 40 hours per week remote work not authorized

Relocation: Negotiable

IronMountain Solutions is seeking a Cybersecurity Engineer to provide aviation weapon-system cybersecurity support for the MV-75 Program. This position supports the U.S. Government MV-75 Program Office by advising on the cybersecurity risk posture, RMF strategy, platform security requirements, tactical Authorization to Operate (ATO) readiness, and cybersecurity compliance of the MV-75 weapon system. Candidates should be highly motivated, a self-starter, and able to work effectively across Government, OEM, system engineering, cyber, test, airworthiness, software, and acquisition stakeholders. Candidates must  have an active Secret clearance or have the ability to obtain and maintain an active Secret level security clearance.  Per Federal regulations; only citizens of the United States are able to obtain a Clearance. 

Job Duties:

• Support the MV-75 Program Office as a tactical aviation weapon-system cybersecurity engineer focused on platform risk, RMF execution, and embedded system security solutions
• Review, assess, and advise on OEM on cybersecurity artifacts, including System Security Plans, Security Assessment Plans, Security Assessment Reports, POA&Ms, continuous monitoring strategies, hardware/software inventories, architecture diagrams, interface descriptions, and control implementation evidence.
• Translate RMF controls into aviation platform-relevant requirements, verification approaches, and risk statements that apply to embedded avionics, mission systems, tactical databus architectures, software loads, maintenance systems, and support equipment
• Support cybersecurity requirements decomposition, allocation, traceability, and verification across MV-75 system, subsystem, software, hardware, mission equipment, and external interface boundaries.
• Advise the Government on cybersecurity risk posture, residual risk, mitigation sufficiency, operational impacts, and ATO decision readiness for the MV-75 platform.
• Review cybersecurity implementation evidence against applicable DoD, Army, and program requirements, including RMF, NIST SP 800-53/800-53A, DoDI 8510.01, Army cybersecurity policy, and program-specific authorization guidance.
• Coordinate with Government cybersecurity, systems engineering, test, airworthiness, logistics, software, and acquisition stakeholders to ensure cybersecurity considerations are integrated into platform engineering and program decision processes.
• Assess cybersecurity impacts of proposed engineering changes, software updates, configuration changes, interface changes, obsolescence actions, and system-of-systems integrations.
• Review vulnerability assessment results, scan outputs, penetration test findings, software assurance results, supply chain risk inputs, and cyber test evidence to determine platform-level risk and required Government action.
• Support cybersecurity input to test planning, verification events, lab events, flight test readiness, operational test planning, and Government reviews.
• Evaluate cybersecurity risks associated with embedded real-time operating systems, avionics networks, mission systems, tactical data links, aircraft maintenance interfaces, ground support equipment, and external system interfaces.
• Support development of risk-based recommendations for control tailoring, inherited/common controls, compensating controls, mission-based risk acceptance, continuous monitoring, and POA&M closure.
• Assist the Government in preparing decision-quality cybersecurity briefings, risk summaries, authorization status updates, and technical recommendations for program leadership and authorizing officials.
• Maintain awareness of platform cybersecurity issues across acquisition, development, test, fielding, sustainment, and modernization activities.
• While performing the duties of this job, the employee is occasionally required to stand; walk; sit; use tools or controls; normal physical activity (reach with hands and arms; climb stairs): and communicate effectively with all levels of employees and leadership. The employee must occasionally lift or move office products and supplies up to 25 pounds.

Qualifications:

• BS degree in Cybersecurity, Computer Engineering, Electrical Engineering, Systems Engineering, Computer Science, Aerospace Engineering, or a related technical field.
• 10+ years of relevant cybersecurity, systems security engineering, RMF, and tactical/embedded security. Aviation system acquisition experience desired. 
• Experience supporting DoD weapon systems, aviation platforms, tactical systems, embedded systems, mission systems, or platform cybersecurity authorization activities.
• Knowledge of RMF processes, ATO packages, security control implementation evidence, POA&Ms, continuous monitoring, and cybersecurity risk acceptance
• Ability to interpret cybersecurity controls and translate them into platform-relevant requirements, verification criteria, technical risks, and operational impacts.
• Familiarity with aviation or tactical system architectures, including avionics, mission systems, databus interfaces, support equipment, software loads, embedded controllers, tactical networks, or platform integration environments.
• Familiarity with embedded real-time operating systems is preferred.
• Familiarity with aviation and tactical interface standards such as MIL-STD-1553, ARINC-429, ARINC-664, ARINC-653, Ethernet, CAN bus, tactical radios, and tactical data links
• Experience reviewing or developing cybersecurity documentation such as SSPs, SAPs, SARs, SCTMs, POA&Ms, CONMON strategies, architecture diagrams, accreditation boundaries, PPSM/ports-protocols-services data, and system security requirements.
• Strong written and verbal communication skills with the ability to explain technical cybersecurity risk to engineering acquisition, test, and leadership audiences.
• Ability to develop strong working relationships with MV-75 personnel, Government stakeholders, OEM representatives, and supporting contractors.
• Ability to manage complex technical issues, coordinate across multiple organizations, and provide clear recommendations to Government leadership.

Security Clearance

Candidates have an active Secret clearance or have the ability to obtain and maintain an active Secret level security clearance.

IronMountain Solutions is an Equal Opportunity Employer

Location: Mississauga, On-site 

Role Type: Full-time (New Opening)  

About e-Zinc 

e-Zinc is an energy storage venture based in Toronto with a breakthrough technology poised to disrupt the market. As the global energy grid moves to higher levels of penetration of renewable energy, there is a surging need for affordable, flexible, long-duration energy storage. e-Zinc is uniquely positioned to meet this demand as the first company in the world to “metalize” electricity.  

Backed by over CAD $80 million in funding from leading global strategic and financial investors - such as Toyota Ventures, Mitsubishi Heavy Industries, Eni, Evok Innovations, and BDC - e-Zinc has garnered international recognition for its proprietary technology and visionary roadmap. Highlights include: 

• Named to the Global Cleantech 100 for four consecutive years (2022–2025) 

• $1M Grand Prize winner of the Impact Canada Charging the Future Challenge 

• Awarded a $1.6M grant from Breakthrough Energy Solutions Canada 

• Secured over $12M in funding across three projects from Sustainable Development Technology Canada (SDTC) 
• Recipient of a USD $1.3M grant from the California Energy Commission 

As e-Zinc moves toward commercialization, e-Zinc is expanding its team to bring our transformative technology to market and support the future of renewable energy. 

Opportunity 

e-Zinc is searching for an experienced and talented Senior Scientist, Electrolyte Development to work within the Technology function on the development, formation, and characterization of advanced electrolytes for e-Zinc’s technology. You will be a key contributor to driving electrolyte innovation; scaling formulations from lab to production, and collaborating closely with teams across electrode development, product engineering, and manufacturing. This role offers the opportunity to work at the cutting edge of clean energy within a fast-paced, collaborative environment. This position will report directly to the VP, Research & Development. 

Position Scope and Responsibilities 

• Lead and own the technical deliverables for cross-functional R&D projects focused on the development and characterization of electrolytes from technology readiness levels between 1 and ~4, within a technology development framework 

• Identify and characterize mechanisms regarding electrolyte formulation and operation within the e-Zinc battery  

• Develop simulations to gain mechanistic insights into battery dynamics, predict performance, and support experimental findings 

• Be the subject matter expert on electrolyte chemistry and electrolyte fundamentals 

• Propose and develop concepts to address technical issues and meet performance targets based on scientific principles 

• Plan and execute experimental work on electrochemical, chemical and physical characterization of electrolytes, including benchtop tests and prototype testing 

• Predict and characterize electrolyte behaviour under various conditions using thermodynamics and kinetics of the various mechanisms of operation 

• Partner with external collaborators to advance the technology and our understanding of it. 

• Work with partners to translate lab-scale formulations to production 

• Perform data analysis on test results and communicate results and conclusions in the form of presentations and reports 

• Document results and analysis in the form of written technical reports, such as test and analysis reports 

• Collaborate across functions to progress the technology and the integration into the product 

• Work in cross-functional teams to solve technical issues at various stages of development and support development in areas such as electrodes and advanced cell 

• Contribute to e-Zinc’s intellectual property portfolio through the creation of patent applications and trade secrets 

• Mentorship of other e-Zinc staff, fostering a high-performing and solution-oriented culture 

• Maintain a safe work environment for yourself and others 

Qualifications 

Required: 

• Minimum of a Master’s degree in chemistry, materials science or related field plus 7+ years of industrial work experience in relevant fields. 

• Proven experience developing commercially viable battery electrolytes such as zinc or lithium battery electrolytes. 

• Expert-level understanding and experience in electrochemistry, reaction kinetics, and thermodynamics.  

• Advanced knowledge and experience in simulation software (COMSOL) 

• In-depth knowledge of characterization methods for electrolytes and electrodes for electrochemical energy storage devices. 

• Strong data analysis skills and ability to interpret complex chemical and electrochemical data. 

• Excellent time management, communication, and organizational skills 

• A self-starter and adaptive learner. Motivated to strive and succeed in a start-up environment. 

• Must be legally eligible to work in Canada. 

 Additional Assets: 

• Experience in aqueous zinc electrochemistry is considered a strong asset.  

• A PhD with a focus on electrochemical energy storage or fuel cell systems 

At e-Zinc, how we work matters just as much as what we build. The qualities below reflect how our team turns our core values into action every day.

Safety: You prioritize safety in everything you do and understand the deep responsibility we have to our people, our customers, and our planet.

Truth: You are honest, transparent, and authentic—with yourself, your teammates, and our customers. 

Results: You approach challenges with curiosity and creativity, troubleshoot thoughtfully, and focus on delivering meaningful outcomes. 

Team: You contribute to an open and trusting workplace, empower others, and hold yourself and your teammates accountable. 

Mastery: You are committed to building domain expertise, bring a strong work ethic, and continuously invest in your own growth and improvement. 

Value: You act responsibly with time, financial resources, and effort, always aiming to create the greatest impact and long-term value. 

Why Join e-Zinc? 

At e-Zinc, your work has purpose. You’ll be part of a pioneering team building transformative technology that will help shape the future of clean energy. We offer a dynamic work environment, meaningful projects, and the opportunity to grow your career alongside passionate, purpose-driven colleagues. 

Note: At e-Zinc, every application is personally reviewed by our People & Talent team to understand your motivation, experience, and alignment with our mission. 

Compensation & Total Rewards: 

The expected annual salary range for this role is 105,000-125,000. Final compensation will be determined based on the candidate’s skills, experience, and overall fit for the position. 

Successful employees will be offered a comprehensive Total Rewards package, which can include: 

• Competitive compensation 

• Comprehensive Employer-paid benefits 

• Retirement savings plans with employer contributions 

• Equity grants and opportunity for company ownership.
• Paid vacation time to refresh, plus additional paid time off for special events such as birthdays or religious holidays 

Encouragement to Apply 

Studies show that individuals in underrepresented groups are less likely to apply for jobs unless they meet every qualification. If you find you are passionate about this role and meet many of the items listed, we encourage you to apply! 

e-Zinc is proud to be an equal opportunity employer that celebrates and supports diversity. We thrive in an environment of mutual respect and welcome all applicants. 

If you require accommodations at any stage in the hiring process, please contact us at careers@e-zinc.ca 

Location: Mississauga (On-Site) 

Role Type: Full-time (New Opening)  

About e-Zinc 

e-Zinc is an energy storage venture based in Toronto with a breakthrough technology poised to disrupt the market. As the global energy grid moves to higher levels of penetration of renewable energy, there is a surging need for affordable, flexible, long-duration energy storage. e-Zinc is uniquely positioned to meet this demand as the first company in the world to “metalize” electricity. 

Backed by over CAD $80 million in funding from leading global strategic and financial investors - such as Toyota Ventures, Mitsubishi Heavy Industries, Eni, Evok Innovations, and BDC - e-Zinc has garnered international recognition for its proprietary technology and visionary roadmap. Highlights include: 

• Named to the Global Cleantech 100 for four consecutive years (2022–2025) 

• $1M Grand Prize winner of the Impact Canada Charging the Future Challenge 

• Awarded a $1.6M grant from Breakthrough Energy Solutions Canada 

• Secured over $12M in funding across three projects from Sustainable Development Technology Canada (SDTC) 

• Recipient of a USD $1.3M grant from the California Energy Commission 

As e-Zinc moves toward commercialization, e-Zinc is expanding its team to bring our transformative technology to market and support the future of renewable energy. 

Opportunity 

e-Zinc is searching for an experienced and talented Principal Engineer, Testing & Analysis to lead the execution, planning, and continuous improvement of battery and system-level testing and analysis across our zinc-air energy storage platform. Reporting to the VP Research & Development, this role will play a critical role in the product development testing and analysis. The ideal candidate brings a strong balance of hands-on testing experience and leadership capability, with a focus on validation and supporting product readiness for deployment and scale. You will work closely with technology (R&D), product engineering and other departments to ensure testing activities align with product goals and commercialization timelines. 

Position Scope and Responsibilities 

Lab Operations & Ownership 

• Own and manage the battery testing lab, including test stations, equipment, and infrastructure. 

• Ensure high uptime through preventive maintenance, calibration, and troubleshooting  

• Manage inventory of test materials, consumables, and battery samples.  

• Enforce and continuously improve lab safety protocols and best practices . 

• Ensure high data quality, repeatability, and statistical rigor in all testing activities 

Testing Strategy & Execution 

• Develop, implement, and continuously improve test methods, procedures, and protocols for cell, pack, and system-level validation & testing.  

• Support and lead the execution of various testing plans at all levels of development, ensuring alignment with testing objectives.  

• Analyze large and complex data sets to extract actionable insights.  

• Support assembly and build activities by ensuring test readiness and validation during prototype and system integration phases  

 Data, Reporting & Quality 

• Oversee data collection, analysis, and reporting, ensuring accuracy, consistency, and traceability  

• Establish best practices and standardize data processing, visualization and reporting formats to communicate results clearly to cross-functional teams  

• Manage test data systems and tools to enable efficient data retrieval and decision-making  

 Problem Solving & Continuous Improvement 

• Lead structured problem-solving efforts using methodologies such as 8D, root cause analysis, and Six Sigma tools  

• Identify system and process issues through testing and drive corrective actions  

• Continuously improve testing efficiency, automation, and repeatability  

 Team Leadership & Development 

• Mentor and develop a team of test engineers, technicians, and interns  

• Manage workload, scheduling, and prioritization of testing activities  

• Build a culture of accountability, collaboration, and hands-on problem solving  
• Service as the SME in experimental methods, diagnostics (cell, packs, system) and failure mechanisms.  

Cross-Functional Collaboration 

• Partner with R&D and product workstreams to align testing with product development and production goals.  

• Support transition from engineering validation to manufacturing and deployment  

• Provide feedback to design teams based on test results and field learnings to inform design and development decisions.  

Qualifications 

• Minimum Bachelor’s degree in Electrical, Mechanical, Materials, or Chemical Engineering (or relevant discipline within Engineering or Science).  

• 10+ years of experience in battery or electro-mechanical system testing and data analysis, including cell, pack and/or system-level validation. 

• Proven experience in lab operations, test execution, and team leadership  

• Experience with Factory Acceptance Testing (FAT) and product validation processes  

• Strong hands-on experience with test equipment, instrumentation, and troubleshooting  

• Proficiency in data acquisition, analysis, and reporting tools (e.g Python, MATLAB) 

• Experience with structured problem-solving methodologies (e.g., 8D, Six Sigma)  

• Familiarity with high-reliability testing environments (e.g., automotive, medical, industrial)  

• Strong understanding of battery safety standards and testing best practices 

• Strong communication skills  

At e-Zinc, how we work matters just as much as what we build. The qualities below reflect how our team turns our core values into action every day. 

Safety: You prioritize safety in everything you do and understand the deep responsibility we have to our people, our customers, and our planet. 

Truth: You are honest, transparent, and authentic—with yourself, your teammates, and our customers. 

Results: You approach challenges with curiosity and creativity, troubleshoot thoughtfully, and focus on delivering meaningful outcomes. 

Team: You contribute to an open and trusting workplace, empower others, and hold yourself and your teammates accountable. 

Mastery: You are committed to building domain expertise, bring a strong work ethic, and continuously invest in your own growth and improvement. 

Value: You act responsibly with time, financial resources, and effort, always aiming to create the greatest impact and long-term value. 

Why Join e-Zinc? 

At e-Zinc, your work has purpose. You’ll be part of a pioneering team building transformative technology that will help shape the future of clean energy. We offer a dynamic work environment, meaningful projects, and the opportunity to grow your career alongside passionate, purpose-driven colleagues. 

Note: At e-Zinc, every application is personally reviewed by our People & Talent team to understand your motivation, experience, and alignment with our mission. 

Compensation & Total Rewards: 

The expected annual salary range for this role is $120-140K. Final compensation will be determined based on the candidate’s skills, experience, and overall fit for the position. 

Successful employees will be offered a comprehensive Total Rewards package, which can include: 

• Competitive compensation 

• Comprehensive Employer-paid benefits 

• Retirement savings plans with employer contributions 

• Equity grants and opportunity for company ownership 

• Paid vacation time to refresh, plus additional paid time off for special events such as birthdays or religious holidays 

Encouragement to Apply

Studies show that individuals in underrepresented groups are less likely to apply for jobs unless they meet every qualification. If you find you are passionate about this role and meet many of the items listed, we encourage you to apply!

e-Zinc is proud to be an equal opportunity employer that celebrates and supports diversity. We thrive in an environment of mutual respect and welcome all applicants. 

If you require accommodations at any stage in the hiring process, please contact us at careers@e-zinc.ca 

See yourself at Twilio

Join the team as Staff Engineer, Offensive Security

About the job

The Staff Engineer acts as a Technical Lead. You don't just find bugs; you design complex attack chains that demonstrate systemic risk. You spend as much time writing custom code and researching new bypasses as you do executing tests.

Responsibilities

In this role, you will:

• Full-Stack Penetration Testing: Perform manual and automated testing of web applications, APIs, and mobile apps (iOS/Android).
• Internal/External Network Audits: Conduct network and cloud level assessments with various tooling
• Vulnerability Validation: Triage and validate reports from automated scanners or bug bounty hunters to eliminate false positives and escalate true positives
• AI/LLM Probing: Perform initial prompt injection and jailbreak tests on AI prototypes, services, and applications using established checklists (OWASP Top 10 for LLMs).
• Technical Reporting: Draft high-quality reports that detail the "path to compromise" with clear, reproducible steps for developers.
• Tool Maintenance: Manage and update the team's testing infrastructure (e.g., Burp Suite, and basic C2 listeners).
• Remediation Support: Provide direct technical guidance to engineering teams on how to patch vulnerabilities like XSS, SQLi, and IDOR.
• Adversary Emulation: Design and lead multi-week Red Team operations that mimic specific threat actors (APTs) to test the SIRT detection capabilities.
• Custom Exploit Development: Build custom payloads, droppers, and obfuscated scripts to bypass EDR/AV and maintain stealth.
• AI Red Teaming Architecture: Build automated testing frameworks for AI systems (e.g., using PyRIT, Promptfoo, or Garak) to test for models related to sensitive data leakage.
• Cloud & Infrastructure Attacks: Execute sophisticated attacks against AWS/Azure/K8s, focusing on IAM misconfigurations and container escapes.
• Purple Teaming: Collaborate with SIRT and Detection Engineering to tune SIEM alerts based on the techniques used during an engagement.
• Strategic Bug Bounty Management: Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad architectural security changes.

Qualifications

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• Experience: 7-10 years in offensive security, penetration testing, a high-volume bug bounty background, AppSec, or vulnerability exploitation, and track record of finding high/critical vulnerabilities in complex environments using pentesting commercial or custom tools.
• Concepts: Expert Knowledge and  solid understanding of the MITRE ATT&CK matrix and the OWASP Top 10 for web applications and top 10 for LLMs, post exploitation (lateral movement, persistence, data exfiltration) and Adversarial ML.
• Tooling: Proficient in OffSec popular tools like Burp Suite professional, Nmap, Metasploit, Wireshark etc... and AI security tools such as LangChain, TensorFlow for adversarial testing or, as well as use of C2 frameworks (Cobalt Strike, Sliver, Havoc) or similar tools
• Scripting and Coding: Ability to write functional scripts in Python or Bash to automate repetitive testing tasks and proficiency in coding and scripting like Python, C++, and scripting for creating custom offensive exploits that avoids signature-based detection.
• Certifications: Possession of advanced industry certifications such as OSCP, OSEP, OSWE, GXPN or similar training in OffSec tracks is highly desirable

Desired:

• Telecom expertise is preferred
• Excellent written and verbal communication skills.
• Ability to influence and build effective working relationships with all levels of the organization.
• Proficiency in multiple languages applicable to the region.

Location

This role will be Remote, and based in Ireland

Travel 

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, approximately 15% travel is anticipated to help you connect in-person in a meaningful way.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

See yourself at Twilio

Join the team as Twilio’s next Senior Offensive Security Engineer

About the job

This position is needed to The Senior OffSec Engineer will be responsible for the day-to-day execution of penetration tests and contributing to larger Red Team campaigns. You move beyond simple scanning to manual exploitation and are beginning to automate your workflows.  

Responsibilities

In this role, you’ll:

• Full-Stack Penetration Testing: Perform manual and automated testing of web applications, APIs, and mobile apps (iOS/Android).
• Internal/External Network Audits: Conduct network and cloud level assessments with various tooling
• Vulnerability Validation: Triage and validate reports from automated scanners or bug bounty hunters to eliminate false positives and escalate true positives
• AI/LLM Probing: Perform initial prompt injection and jailbreak tests on AI prototypes, services, and applications using established checklists (OWASP Top 10 for LLMs).
• Technical Reporting: Draft high-quality reports that detail the "path to compromise" with clear, reproducible steps for developers.
• Tool Maintenance: Manage and update the team's testing infrastructure (e.g., Burp Suite, and basic C2 listeners).
• Remediation Support: Provide direct technical guidance to engineering teams on how to patch vulnerabilities like XSS, SQLi, and IDOR.
• Adversary Emulation: Design and lead multi-week Red Team operations that mimic specific threat actors (APTs) to test the SIRT detection capabilities.
• Custom Exploit Development: Build custom payloads, droppers, and obfuscated scripts to bypass EDR/AV and maintain stealth.
• AI Red Teaming Architecture: Build automated testing frameworks for AI systems (e.g., using PyRIT, Promptfoo, or Garak) to test for models related to sensitive data leakage.
• Cloud & Infrastructure Attacks: Execute sophisticated attacks against AWS/Azure/K8s, focusing on IAM misconfigurations and container escapes.
• Purple Teaming: Collaborate with SIRT and Detection Engineering to tune SIEM alerts based on the techniques used during an engagement.
• Strategic Bug Bounty Management: Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad architectural security changes.

*Required:

• Experience: 3–5 years in offensive security, penetration testing, or a high-volume bug bounty background and track record of finding high/critical vulnerabilities in complex environments.
• Concepts: Expert Knowledge and  solid understanding of the MITRE ATT&CK matrix and the OWASP Top 10 for web applications and top 10 for LLMs, post exploitation (lateral movement, persistence, data exfiltration) and Adversarial ML.
• Tooling: Proficient in Burp Suite professional, Nmap, Metasploit, Wireshark etc... and AI security tools such as LangChain, TensorFlow for adversarial testing, as well as use of C2 frameworks (Cobalt Strike, Sliver, Havoc) or similar tools
• Scripting and Coding: Ability to write functional scripts in Python or Bash to automate repetitive testing tasks and proficiency in Python, C++, and scripting for creating custom offensive tooling that avoids signature-based detection.
• Certifications: Possession of advanced industry certifications such as OSCP, OSEP, OSWE, GXPN or similar
• Telecom expertise is preferred

Location

1. This role will be remote, and based in India. (Karnataka, Tamil Nadu, Telangana, Maharashtra, Delhi)

Travel 

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

The role

We’re looking for a Security Product Manager to join our team. Security Product Manager is responsible for conveying the company’s security strengths to customers, partners and the market at large. This includes participating in relevant security partnership initiatives, influencing security positioning and branding, and working closely with internal teams to ensure company’s security posture and security products is communicated effectively to all stakeholders. By combining expertise in compliance requirements with a customer-centric approach, Security Product Manager helps position security as a competitive advantage rather than just an internal obligation. 

Your responsibilities will include: 

1. Product Management 

• Define the vision and roadmap for Nebius’ security products. 
• Owning the ideation, postmortem, prioritization, backlog, and customer feedback processes. 
• Guiding new features, systems and services from inception to launch, while keeping customers at the center of everything. 

2. Customer-facing communications 

• Lead public-facing communications around security updates or changes in compliance status. 
• In the event of a security incident, coordinate user messaging (email notifications, press releases, FAQs) with support from the Head of Security Products and CISO. 
• Gather user feedback on user experience and security to guide continuous improvements. 

 3. Competitive analysis and market research 

• Conduct ongoing research on industry benchmarks, emerging security standards and technologies, and competitor certifications. 
• Identify gaps and opportunities in organization’s product security posture; propose strategic initiatives that differentiate the company’s security story in the market. 
• Stay informed about new regulations or frameworks that may influence future product certifications or transparency requirements (e.g., privacy laws, data sovereignty standards). 

 4. Certification and audit support, service ownership 

• Collaborate with the CISO office to gather technical evidence or make necessary product enhancements that satisfy certification requirements. 
• Take ownership of some security-related services of Cloud platform. 
• Track and maintain a certification roadmap (ISO 27001, SOC 2, HIPPA, etc.), working closely with CISO, GRC & Compliance, Corporate Security departments. Communicate timelines, goals and status updates to leadership and sales representatives. 

5. Cross-functional collaboration 

• Coordinate with multiple Product Managers to align security goals with other product roadmaps, ensuring a consistent narrative between product security and external messaging. 
• Work with Platform Security, GRC & Corporate Security and legal teams to gather essential information for security products enhancements (e.g., penetration test summaries, compliance reports). 
• Work with Customer-facing teams to address client inquiries about security posture and guide them on using security features optimally. 

We expect you to have: 

• 3+ years of Product Management or Program Management experience with a focus on security initiatives. 
• Basic knowledge of compliance frameworks (e.g., SOC 2, ISO 27001, GDPR) and familiarity with how they translate into business value. 
• Proven ability to communicate technical concepts in a clear, customer-friendly manner (e.g., writing content, speaking at webinars or conferences). 
• Stakeholder management skills to align with other Product Managers, CISO staff, engineering, marketing, and customer-facing teams. 
• Analytical mindset: comfortable defining success metrics (e.g., security feature adoption, NPS around trust, certification progress) and making data-driven decisions. 
• Project management skills: demonstrated ability to manage inter-team collaboration within company-wide projects, ensuring timely delivery of cross-functional tasks and alignment with compliance goals. 

It will be an added bonus if you have: 

•  Certifications such as CISSP, CISM, or PMP; prior experience in regulated industries; prior experience working for Cloud Service Provider.

About Nebius

Nebius AI is an AI cloud platform with one of the largest GPU capacities in Europe. Launched in November 2023, the Nebius AI platform provides high-end, training-optimized infrastructure for AI practitioners. As an NVIDIA preferred cloud service provider, Nebius AI offers a variety of NVIDIA GPUs for training and inference, as well as a set of tools for efficient multi-node training. 

Nebius AI owns a data center in Finland, built from the ground up by the company’s R&D team and showcasing our commitment to sustainability. The data center is home to ISEG, the most powerful commercially available supercomputer in Europe and the 16th most powerful globally (Top 500 list, November 2023).  

Nebius’s headquarters are in Amsterdam, Netherlands, with teams working out of R&D hubs across Europe and the Middle East. 

Nebius AI is built with the talent of more than 500 highly skilled engineers with a proven track record in developing sophisticated cloud and ML solutions and designing cutting-edge hardware. This allows all the layers of the Nebius AI cloud – from hardware to UI – to be built in-house, distictly differentiating Nebius AI from the majority of specialized clouds: Nebius customers get a true hyperscaler-cloud experience tailored for AI practitioners. We’re growing and expanding our products every day. 

If you’re up to the challenge and are excited about AI and ML as much as we are, join us!

The Basics:

The APAC Partner Marketing Manager – Enterprise is responsible for developing and executing partner marketing strategies that drive measurable pipeline growth, brand awareness, and customer engagement across SEA and ANZ. This role is accountable for delivering tangible business outcomes through high-impact joint campaigns, adapting global strategies for regional execution, and leveraging deep market knowledge to maximize results through co-marketing with key enterprise markets. 

What you’ll do:

• Pipeline & Revenue Growth 
  
  • Deliver qualified leads and opportunities through joint partner campaigns, meeting or exceeding quarterly pipeline targets for APAC. 
  • Optimize partner marketing initiatives to maximize conversion rates and revenue impact measured by co-marketing sales qualified leads and partner co-sell pipeline 
• Regional Partner Campaign Leadership 
  
  • Strategically plan, launch, and optimize joint partner campaigns, events, and partner enablement programs tailored to APAC enterprise segments and buyer personas. 
  • Localize messaging and creative assets for APAC audiences, ensuring cultural relevance and compliance.
  • Lead cross-functional teams and agency partners to deliver integrated campaigns together with key partners -  on time and within budget. 
• Partner Relationship Management 
  
  • Build and maintain strong relationships with key enterprise partners and alliances 
  • Facilitate regular partner communications, enablement sessions, and feedback loops to ensure alignment and mutual success with key partners. 
• Performance Analytics & Reporting 
  
  • Track, analyze, and report on partner campaign KPIs (lead volume, conversion rates, pipeline contribution, ROI) with actionable insights for continuous improvement. 
  • Present regular partner marketing performance updates to APAC stakeholders, highlighting progress against goals and recommendations for optimization. 
• Compliance & Regulatory Alignment 
  
  • Ensure all partner marketing activities comply with company policies and enterprise regulations across APAC
• Market Insights & Innovation 
  
  • Monitor APAC enterprise marketing trends, competitor activity, and customer behaviors to inform partner strategy and identify new growth opportunities for co-marketing  
  • Test and implement innovative partner marketing tactics to improve campaign effectiveness and market penetration. 

We’re looking for someone with:

• Bachelor’s degree in Marketing, Business, IT or related field 
• 8-10 years’ experience in partner marketing, demand generation, or field marketing, with a proven track record of success in APAC-wide roles (at least 5 years). 
• Demonstrated experience planning and executing partner campaigns in APAC 
• Proven ability to deliver pipeline and revenue outcomes through joint marketing initiatives with partners 
• Hands-on expertise in campaign management, event execution, and partner enablement. 
• Advanced proficiency in MarTech platforms (Marketo/Eloqua, Salesforce, ABM tools). 
• Strong analytical skills with experience in campaign reporting, optimization, and presenting insights to senior stakeholders. 
• Ability to localize global strategies for APAC markets, especially SEA and ANZ.
• Experience managing budgets and vendors in a regional context. 
• Collaborative, proactive, and accountable, with excellent communication and stakeholder management skills. 
• Knowledge of enterprise compliance and regulatory requirements in APAC

About Tanium 

On a mission. Together. 

At Tanium, we are stewards of a culture that emphasizes the importance of collaboration, respect, and diversity. In our pursuit of revolutionizing the way some of the largest enterprises and governments in the world solve their most difficult IT challenges, we are strengthened by our unique perspectives and by our collective actions.   

As a global organization with stakeholders around the world, it’s imperative that the diversity of our customers and communities is reflected internally in our team members. We strive to create a diverse and inclusive environment where everyone feels they have opportunities to succeed and grow because we know that only together can we do great things.  

Our commitment to excellence and innovation has earned us a place on the Forbes Cloud 100 list for ten consecutive years, and we continue to be recognized worldwide as a great place to work. 

Taking care of our team members 

Each of our team members has 5 days set aside as volunteer time off (VTO) to contribute to the communities they live in and give back to the causes they care about most. 

For more information on how Tanium processes your personal data, please see our Privacy Policy.

About Us

The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. At the FT, curiosity thrives and ambitious thinking is rewarded. Here, you’re given the chance to reach millions, create work that matters and deliver impartial journalism in a polarised world. In our warm, collaborative culture, you’ll connect with a diverse community of experts who support your growth, career aspirations and wellbeing Your future at the FT will be filled with opportunities that challenge and inspire you. With no fixed path, you’ll discover new skills and forge a career that can take you anywhere. Build a newsworthy career at the FT.

Our Commitment to Diversity, Equity and Inclusion

We believe in the power of unique perspectives and want all voices in our organisation to be heard, respected and valued. A supportive workplace is one where employees feel they can be themselves and operate to their full potential. We are committed to removing barriers for everyone, with a focus on addressing those faced by underrepresented groups.

The Role Overview

We’re looking for a Senior Cyber Security Engineer to help mature application and cloud security across the FT’s cloud-native, AWS-hosted technology estate. This role has an approximate 50/50 focus across application security and cloud security, working closely with product, platform and engineering teams to make secure delivery easier by default.

You’ll shape and improve developer-friendly guardrails across GitHub-based CI/CD pipelines, AWS environments and infrastructure-as-code workflows. This includes improving SAST, software composition analysis, secret scanning, IaC scanning, vulnerability management and AWS misconfiguration management so that findings are actionable, low-noise and owned by the right teams.

Day to day, you’ll run practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. We’re looking for someone who has demonstrably improved security outcomes in real engineering environments, not just someone with theoretical knowledge of tools or frameworks.

Depending on team structure, you may also mentor or line-manage one or two security engineers, while remaining hands-on and close to the technical work.

What you’ll bring to the role

Application and cloud security experience: practical experience across both application security and cloud security, ideally in AWS-hosted, cloud-native environments.

Developer-friendly security mindset: you know how to work with engineers, explain risk clearly and design controls that help teams move securely without unnecessary friction.

Vulnerability management at scale: experience improving how application vulnerabilities, dependency risks, bug bounty findings, penetration test findings and advisories are identified, prioritised, owned and remediated across engineering teams.

Cloud misconfiguration & vulnerability management: experience identifying and reducing infrastructure-as-code and AWS vulnerabilities & misconfigurations at scale through pragmatic guardrails, tooling and clear remediation paths.

Threat modelling: confidence running lightweight, practical threat-modelling sessions that lead to useful engineering decisions and risk reduction.

CI/CD and code security: hands-on experience with security tooling such as SAST, software composition analysis, secret scanning and IaC scanning.

Automation mindset: ability to write scripts or small tools, ideally in Python, to reduce toil, improve visibility and surface meaningful risk.

Security leadership: ability to mentor other security engineers and influence engineers across the wider organisation. Depending on team structure, this may include line management.

AI security awareness: experience of leveraging AI to improve and scale appsec and cloud sec controls would be useful, but is not essential.

Key Responsibilities

Improve application security guardrails
Tune and evolve SAST, software composition analysis, secret scanning and related controls so they are actionable, low-noise and useful to engineering teams.

Improve cloud and IaC security guardrails
Help identify, prioritise and reduce AWS and infrastructure-as-code misconfigurations and vulnerabilities at scale.

Drive vulnerability management
Improve how application vulnerabilities, dependency risks, bug bounty findings, penetration test findings and third-party advisories are triaged, prioritised and remediated.

Drive cloud misconfiguration management
Help teams understand, own and remediate cloud security issues using pragmatic, developer-friendly workflows.

Run practical threat modelling
Facilitate lightweight threat-modelling sessions for new products, features, services and architectural changes.

Build automation and tooling
Create or improve scripts, integrations, dashboards and workflows that reduce manual effort and make risk easier to understand.

Support secure architecture decisions
Provide application and cloud security input into design reviews, AWS architecture decisions and larger technical changes.

Partner with engineering teams
Work closely with product, platform and software engineering teams to embed security into design, delivery and operational practices.

Support incidents and lessons learned
Provide application and cloud security expertise during incidents and feed lessons learned back into patterns, tooling and guidance.

Mentor others
Coach security engineers and engineering teams on practical security approaches. Depending on team structure, this may include line management of one or two security engineers.

Required Experience, Essential: 

• Strong practical experience in application security and cloud security, ideally with a balanced focus across both.
• Hands-on AWS security experience, including common misconfiguration patterns and practical remediation approaches.
• Experience improving vulnerability management across engineering teams, including prioritisation, ownership, remediation tracking and noise reduction.
• Experience in improving cloud or IaC misconfiguration management at scale in a developer-friendly way.
• Experience integrating, tuning or improving security tooling in CI/CD workflows, such as SAST, software composition analysis, secret scanning or IaC scanning.
• Experience running practical threat-modelling sessions that influence design, delivery or remediation decisions.
• Ability to write scripts or small tools, ideally in Python, to automate security workflows or improve visibility.
• Strong communication and collaboration skills, with the ability to influence engineers and technical leaders without relying on gatekeeping.
• Evidence of improving application security, cloud security or vulnerability management practices in a real engineering environment.
• Familiarity with Agile or Scrum ways of working.

Desirable

• Experience with leveraging AI for AppSec and CloudSec.
• AWS Certified Security – Speciality or equivalent practical AWS security experience.
• Terraform or CloudFormation expertise.
• Incident-management or incident-response experience.
• Experience with Splunk or similar logging/SIEM platforms.
• Experience with security metrics, dashboards or reporting that helped drive measurable risk reduction.
• Experience mentoring or line-managing security engineers.

What’s in it for You?

Our benefits vary by location but we are committed to providing best-in-class perks across all our offices. These include generous annual leave, medical cover, inclusive parental leave packages, subsidised gym memberships and opportunities to give back to the community. Full details of our benefits are available here.

We’ve embraced a 50% hybrid working model (averaging two to three days onsite) that fosters trust and remote adaptability while encouraging in-person camaraderie and peer learning. Additionally, we are open to accommodating specific flexible working pattern requests for all roles where feasible.

Accessibility

We are a disability confident employer and Valuable 500 signatory.

Please let us know if you require any reasonable adjustments/personalisation as part of the application process or to enable you to attend an interview. If you would like to discuss your requirements or have any questions, email talent@ft.com and a member of our team will be happy to help.

Further information

At the FT, we embrace innovation and the use of technology and appreciate that individuals may leverage AI tools as part of their job application process. Whilst we are happy for you to use AI to assist with your application, it is essential that all information provided is authentic and accurately represents your skills, experience, and qualifications.

Candidates should be aware that the use of AI throughout the application process may be monitored to ensure a fair and transparent hiring process for all.

About The Role:

Responsible for building and managing the relationship and strategic objectives of the Alliance partnerships with the key objective of achieving the bookings targets.  This individual should have experience working with Vendors, including joint go-to-market and selling with and through this route-to-market. This role is responsible for establishing and growing Veeam’s partnership with the nominated alliance partners across ANZ. In addition, they will be accountable for accelerating the adoption of Veeam technologies into the partner’s solutions and Cosell to  existing accounts.

What You’ll Do:

• Drive Veeam Bookings through Marketplace and Cosell Route to Market
• Focus on pipeline conversion to wins
• Develop and support close plans for top opportunities
• Support pipeline growth activities, marketing and target account penetration planning
• Establish a reporting cadence for Pipeline, Bookings, and Must Win Opportunities
• Collaborate and communicate across local and regional teams to optimize collaboration and bookings
• Understand and communicate Veeam’s “Value Prop” as it relates to the nominated Alliances  go to market, offerings and services
• Create compelling messaging and engagement to position Veeam as #1 Solution for new and existing offerings
• Develop and build relationships with the Alliance to grow the Veeam business
• Drive sales growth strategies and results on a ANZ basis by influencing and securing mindshare and positioning with various teams
• Develop and lead a predictable and effective partnership cadence with the alliances: enablement/training plans, competitive updates, roadmaps, go-to-market
• Develop and lead training and enablement strategy and plan with each alliance to establish and grow Veeam expertise within the technical and sales communities
• Facilitate collaboration between Veeam, channel partners, and Veeam Alliance Partners to optimize solutions and offerings for end users

What You’ll Bring

• Understanding of how to work with Microsoft and AWS
• Proven sales performance
• Knowledge of cloud data management, virtualization, and storage technology
• Ability to define an create a winning Sales Strategy
• Ability to Build Influential Partnerships - executive relationships and influence senior executives
• Ability to create and execute on business plans
• Ability to create and deliver go-to-market initiatives
• Ability to drive projects related to business development opportunities
• Ability to adapt to changes in roles and responsibilities
• Ability to work independently with limited direction in a fast-paced environment; must be a high-energy, motivated self-starter
• Cross team collaboration and motivational skills
• Analytical thinker with proven ability to metric and govern
• Minimum 10 years of experience in Technology Sales – Enterprise Accounts - Global System Integrator and Strategic Alliance is a plus

What You’ll Get

• 20 annual vacation days, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
• Private medical insurance and income protection during illness or injury
• Annual wellbeing allowance and flu vaccination vouchers
• Discounted HCF corporate health insurance
• Free, confidential counselling and coaching via EAP
• Superannuation contributions via salary sacrifice
• Car allowance for eligible field sales roles
• Salary sacrifice options for portable electronic devices (phones, laptops, tablets)
• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops, and learning events like our annual Global Day of Learning

Introduction

NSPA are looking for engineers to support their Cyber Security infrastructure to covering day to day and project activities, in addition providing Cyber Security services to NSPA customers or partners from across the NATO nations.

Day to Day Activities

• Planning and carrying out the replacement of products or technologies within the infrastructure. This will involve developing time schedules, collaborating with the helpdesk, communicating with the customers, configuring the new equipment and performing the actual migration work. Following this, documentation and diagrams will have to be updated.
• Operating and maintaining a wide variety of different cyber security solutions on a day-to-day basis, including but not limited to: Network firewall, web proxy, mail proxy and anti-spam, antivirus for servers, DMZ segregation, web application firewall, intrusion prevention, SIEM log correlation and reporting, managed file transfer, certificates, strong authentication etc.
• Providing support on various cyber security tasks and operations, such as incident response, troubleshooting, change management, write and implement security procedures for operating security solutions, lifecycle management, security and risk assessments, etc.

Project Activities

• Assessment of new cyber security products or technologies. This will involve researching the product, liaising with the manufacturer, arranging for a lab trial, conducting a test phase and then writing a report and making recommendations to NSPA.
• Design and implementation of new secure solutions for various projects and to ensure that NSPA Cyber Security posture remains adequate and aligned with best practices.
• Operating effectiveness testing and improvement of existing cyber security controls involving various cyber security technologies (including but not limited to network firewalls, Web Application firewalls, SIEM, Network IPS, e-mail protection, web browsing protection, Public Key Infrastructure, Medium and Strong authentication, etc.).
• Cyber Security advisory and support provided for various customer projects.
• Cyber Security penetration testing project.

Working Location

• Main working location: Capellen, Luxembourg (NSPA HQ)
• Some projects may require business travel to other sites
• Some remote/hybrid work may be required

Working Hours

• Monday to Thursday:
• Arrival 06:00 to 09:00
• Lunch break Minimum 30 minutes 11:45 – 13:45
• Departure 16:15 to 20:00
• Friday
• Arrival 6:00 to 9:00
• Departure 12:15 to 17:00
• Public Holiday of Luxenberg will be applicable
• Some on-call duties and weekend work will be required on a rotation basis

Project Duration

• 3 years + 2 Years

 Mandatory Requirements

1. Professional Experience
1. Proven experience of at least 5 years in IT Cyber Security.
2. Proven experience of at least 1 year in a NATO environment.
2. Proven experience and skills (Minimum 8 of the below)
1. Next Generation Firewalls (including Intrusion Detection/Prevention System), 
2. Web Application Firewalls and Reverse Proxies, 
3. Web Proxies
4. E-mail gateways
5. Vulnerability Management
6. Anti-malware, sandboxing and endpoint protection technologies
7. Public Key Infrastructures (PKIs), smartcards and user authentication technologies
8. Mobile Device Management (MDM)
9. Apple infrastructure and iOS management
10. Security Incident Event Management (SIEM) 
11. Multi-Factor authentication
12. Privileged Access Management
13. Good Knowledge - Ability to troubleshoot and solve issues involving the aforementioned technologies
3. Skills
1. Good Knowledge - Web application penetration testing
2. Good Knowledge - Mobile application penetration testing
3. Good Knowledge - Source code vulnerability analysis
4. Good Knowledge - Ability to identify and exploit web vulnerabilities  (XSS, CSRF, SQLi, SSRF, arbitrary file upload, etc.) 
5. Good Knowledge - Ability to identify and exploit mobile vulnerabilities  (API issues, insecure storage, memory corruption, deep links, etc.) 
6. Good Knowledge - Network penetration testing experience 
7. Good Knowledge - Protocol analysis 
8. Good Knowledge - CTF experience
9. Good Knowledge - Secure coding practices 
10. Good Knowledge - Cryptography 
11. Good Knowledge - Red and Blue team experience
4. Proven knowledge of
1. Good Knowledge - Cloud Architecture and Security
2. Good Knowledge - Operating System (Windows and Linux) security and of Active Directory security
3. Good Knowledge - Networking protocols
4. Good Knowledge - Application Security
5. Experience allowing to write scripts efficiently - Programming Skills in Bash or Python or Perl
6. Good Knowledge - Offensive security tactics, techniques, tools and procedures
7. Triage, following, procedures pro-active pivoting and hunting - Handling security alerts (ex: antivirus alert, suspicious email report)
8. Good Knowledge - Handling security incident/intrusion 
5. Language
1. Proficiency in English, written and oral, equivalent to CEFR B2 or higher
2. Ability to write clear and concise reports and technical documentation with proper justification
3. Ability to explain issues at different levels of the hierarchy and in particular to management
6. Security Clearance
1. Hold a valid NATO SECRET (or higher) security clearance

Introduction

NSPA are looking for engineers to support their Cyber Security infrastructure to covering day to day and project activities, in addition providing Cyber Security services to NSPA customers or partners from across the NATO nations.

Day to Day Activities

• Planning and carrying out the replacement of products or technologies within the infrastructure. This will involve developing time schedules, collaborating with the helpdesk, communicating with the customers, configuring the new equipment and performing the actual migration work. Following this, documentation and diagrams will have to be updated.
• Operating and maintaining a wide variety of different cyber security solutions on a day-to-day basis, including but not limited to: Network firewall, web proxy, mail proxy and anti-spam, antivirus for servers, DMZ segregation, web application firewall, intrusion prevention, SIEM log correlation and reporting, managed file transfer, certificates, strong authentication etc.
• Providing support on various cyber security tasks and operations, such as incident response, troubleshooting, change management, write and implement security procedures for operating security solutions, lifecycle management, security and risk assessments, etc.

Project Activities

• Assessment of new cyber security products or technologies. This will involve researching the product, liaising with the manufacturer, arranging for a lab trial, conducting a test phase and then writing a report and making recommendations to NSPA.
• Design and implementation of new secure solutions for various projects and to ensure that NSPA Cyber Security posture remains adequate and aligned with best practices.
• Operating effectiveness testing and improvement of existing cyber security controls involving various cyber security technologies (including but not limited to network firewalls, Web Application firewalls, SIEM, Network IPS, e-mail protection, web browsing protection, Public Key Infrastructure, Medium and Strong authentication, etc.).
• Cyber Security advisory and support provided for various customer projects.
• Cyber Security penetration testing project.

Working Location

• Main working location: Capellen, Luxembourg (NSPA HQ)
  • Some projects may require business travel to other NSPA Locations
  • Some remote/hybrid work may be required

Working Hours

• Monday to Thursday:
  • Arrival 06:00 to 09:00
  • Lunch break Minimum 30 minutes 11:45 – 13:45
  • Departure 16:15 to 20:00
• Friday
  • Arrival 6:00 to 9:00
  • Departure 12:15 to 17:00
• Public Holiday of Luxembourg will be applicable
• Some on-call duties and weekend work will be required on a rotation basis

Project Duration

• 3 years + 2 Years

Mandatory Requirements

Professional Experience

• Proven experience of at least 5 years in IT Cyber Security.
• Proven experience of at least 1 year in a NATO environment.

Proven experience and skills (Minimum 8 of the below)

• Next Generation Firewalls (including Intrusion Detection/Prevention System),
• Web Application Firewalls and Reverse Proxies,
• Web Proxies
• E-mail gateways
• Vulnerability Management
• Anti-malware, sandboxing and endpoint protection technologies
• Public Key Infrastructures (PKIs), smartcards and user authentication technologies
• Mobile Device Management (MDM)
• Apple infrastructure and iOS management
• Security Incident Event Management (SIEM)
• Multi-Factor authentication
• Privileged Access Management
• Good Knowledge - Ability to troubleshoot and solve issues involving the aforementioned technologies

Proven knowledge of:

• Good Knowledge - Cloud Architecture and Security
• Good Knowledge - Operating System (Windows and Linux) security and of Active Directory security
• Good Knowledge - Networking protocols
• Good Knowledge - Application Security
• Experience allowing to write scripts efficiently - Programming Skills in Bash or Python or Perl
• Good Knowledge - Offensive security tactics, techniques, tools and procedures
• Triage, following, procedures pro-active pivoting and hunting - Handling security alerts (ex: antivirus alert, suspicious email report)
• Good Knowledge - Handling security incident/intrusion

Language

• Proficiency in English, written and oral, equivalent to CEFR B2 or higher
• Ability to write clear and concise reports and technical documentation with proper justification
• Ability to explain issues at different levels of the hierarchy and in particular to management

Security Clearance

• Hold a valid NATO SECRET (or higher) security clearance

Introduction

NSPA are looking for engineers to support their Cyber Security infrastructure to covering day to day and project activities, in addition providing Cyber Security services to NSPA customers or partners from across the NATO nations.

Day to Day Activities

• Planning and carrying out the replacement of products or technologies within the infrastructure. This will involve developing time schedules, collaborating with the helpdesk, communicating with the customers, configuring the new equipment and performing the actual migration work. Following this, documentation and diagrams will have to be updated.
• Operating and maintaining a wide variety of different cyber security solutions on a day-to-day basis, including but not limited to: Network firewall, web proxy, mail proxy and anti-spam, antivirus for servers, DMZ segregation, web application firewall, intrusion prevention, SIEM log correlation and reporting, managed file transfer, certificates, strong authentication etc.
• Providing support on various cyber security tasks and operations, such as incident response, troubleshooting, change management, write and implement security procedures for operating security solutions, lifecycle management, security and risk assessments, etc.

Project Activities

• Assessment of new cyber security products or technologies. This will involve researching the product, liaising with the manufacturer, arranging for a lab trial, conducting a test phase and then writing a report and making recommendations to NSPA.
• Design and implementation of new secure solutions for various projects and to ensure that NSPA Cyber Security posture remains adequate and aligned with best practices.
• Operating effectiveness testing and improvement of existing cyber security controls involving various cyber security technologies (including but not limited to network firewalls, Web Application firewalls, SIEM, Network IPS, e-mail protection, web browsing protection, Public Key Infrastructure, Medium and Strong authentication, etc.).
• Cyber Security advisory and support provided for various customer projects.
• Cyber Security penetration testing project.

Working Location

• Main working location: Capellen, Luxembourg (NSPA HQ)
• Some projects may require business travel to other sites
• Some remote/hybrid work may be required

Working Hours

• Monday to Thursday:
• Arrival 06:00 to 09:00
• Lunch break Minimum 30 minutes 11:45 – 13:45
• Departure 16:15 to 20:00
• Friday
• Arrival 6:00 to 9:00
• Departure 12:15 to 17:00
• Public Holiday of Luxenberg will be applicable
• Some on-call duties and weekend work will be required on a rotation basis

Project Duration

• 3 years + 2 Years

 Mandatory Requirements

1. Professional Experience
1. Proven experience of at least 5 years in IT Cyber Security.
2. Proven experience of at least 1 year in a NATO environment.
2. Proven experience and skills (Minimum 8 of the below)
1. Next Generation Firewalls (including Intrusion Detection/Prevention System), 
2. Web Application Firewalls and Reverse Proxies, 
3. Web Proxies
4. E-mail gateways
5. Vulnerability Management
6. Anti-malware, sandboxing and endpoint protection technologies
7. Public Key Infrastructures (PKIs), smartcards and user authentication technologies
8. Mobile Device Management (MDM)
9. Apple infrastructure and iOS management
10. Security Incident Event Management (SIEM) 
11. Multi-Factor authentication
12. Privileged Access Management
13. Good Knowledge - Ability to troubleshoot and solve issues involving the aforementioned technologies
3. Skills
1. Good Knowledge - Web application penetration testing
2. Good Knowledge - Mobile application penetration testing
3. Good Knowledge - Source code vulnerability analysis
4. Good Knowledge - Ability to identify and exploit web vulnerabilities  (XSS, CSRF, SQLi, SSRF, arbitrary file upload, etc.) 
5. Good Knowledge - Ability to identify and exploit mobile vulnerabilities  (API issues, insecure storage, memory corruption, deep links, etc.) 
6. Good Knowledge - Network penetration testing experience 
7. Good Knowledge - Protocol analysis 
8. Good Knowledge - CTF experience
9. Good Knowledge - Secure coding practices 
10. Good Knowledge - Cryptography 
11. Good Knowledge - Red and Blue team experience
4. Proven knowledge of
1. Good Knowledge - Cloud Architecture and Security
2. Good Knowledge - Operating System (Windows and Linux) security and of Active Directory security
3. Good Knowledge - Networking protocols
4. Good Knowledge - Application Security
5. Experience allowing to write scripts efficiently - Programming Skills in Bash or Python or Perl
6. Good Knowledge - Offensive security tactics, techniques, tools and procedures
7. Triage, following, procedures pro-active pivoting and hunting - Handling security alerts (ex: antivirus alert, suspicious email report)
8. Good Knowledge - Handling security incident/intrusion 
5. Language
1. Proficiency in English, written and oral, equivalent to CEFR B2 or higher
2. Ability to write clear and concise reports and technical documentation with proper justification
3. Ability to explain issues at different levels of the hierarchy and in particular to management
6. Security Clearance
1. Hold a valid NATO SECRET (or higher) security clearance

Introduction

NSPA are looking for engineers to support their Cyber Security infrastructure to covering day to day and project activities, in addition providing Cyber Security services to NSPA customers or partners from across the NATO nations.

Day to Day Activities

• Planning and carrying out the replacement of products or technologies within the infrastructure. This will involve developing time schedules, collaborating with the helpdesk, communicating with the customers, configuring the new equipment and performing the actual migration work. Following this, documentation and diagrams will have to be updated.
• Operating and maintaining a wide variety of different cyber security solutions on a day-to-day basis, including but not limited to: Network firewall, web proxy, mail proxy and anti-spam, antivirus for servers, DMZ segregation, web application firewall, intrusion prevention, SIEM log correlation and reporting, managed file transfer, certificates, strong authentication etc.
• Providing support on various cyber security tasks and operations, such as incident response, troubleshooting, change management, write and implement security procedures for operating security solutions, lifecycle management, security and risk assessments, etc.

Project Activities

• Assessment of new cyber security products or technologies. This will involve researching the product, liaising with the manufacturer, arranging for a lab trial, conducting a test phase and then writing a report and making recommendations to NSPA.
• Design and implementation of new secure solutions for various projects and to ensure that NSPA Cyber Security posture remains adequate and aligned with best practices.
• Operating effectiveness testing and improvement of existing cyber security controls involving various cyber security technologies (including but not limited to network firewalls, Web Application firewalls, SIEM, Network IPS, e-mail protection, web browsing protection, Public Key Infrastructure, Medium and Strong authentication, etc.).
• Cyber Security advisory and support provided for various customer projects.
• Cyber Security penetration testing project.

Working Location

• Main working location: Capellen, Luxembourg (NSPA HQ)
• Some projects may require business travel to other sites
• Some remote/hybrid work may be required

Working Hours

• Monday to Thursday:
• Arrival 06:00 to 09:00
• Lunch break Minimum 30 minutes 11:45 – 13:45
• Departure 16:15 to 20:00
• Friday
• Arrival 6:00 to 9:00
• Departure 12:15 to 17:00
• Public Holiday of Luxembourg will be applicable
• Some on-call duties and weekend work will be required on a rotation basis

Project Duration

• 3 years + 2 Years

 Mandatory Requirements

1. Professional Experience
1. Proven experience of at least 3 years in IT Cyber Security.
2. Proven experience of at least 1 year in a NATO environment.

1. Proven experience and skills (Minimum 4 of the below)
1. Next Generation Firewalls (including Intrusion Detection/Prevention System), 
2. Web Application Firewalls and Reverse Proxies, 
3. Web Proxies
4. E-mail gateways
5. Vulnerability Management
6. Anti-malware, sandboxing and endpoint protection technologies
7. Public Key Infrastructures (PKIs), smartcards and user authentication technologies
8. Mobile Device Management (MDM)
9. Apple infrastructure and iOS management
10. Security Information and Event Management (SIEM) 
11. Multi-Factor authentication
12. Privileged Access Management
13. Basic Knowledge - Ability to troubleshoot and solve issues involving the aforementioned technologies

1. Proven knowledge of
1. Basic Knowledge - Cloud Architecture and Security
2. Basic Knowledge - Operating System (Windows and Linux) security and of Active Directory security
3. Basic Knowledge - Networking protocols
4. Basic Knowledge - Application Security
5. Basic Knowledge - Programming Skills in Bash or Python or Perl
6. Basic Knowledge - Offensive security tactics, techniques, tools and procedures
7. Triage following procedures - Handling security alerts (ex: antivirus alert, suspicious email report)
8. Basic Knowledge - Handling security incident/intrusion 

1. Language
1. Proficiency in English, written and oral, equivalent to CEFR B2 or higher
2. Security Clearance

Hold a valid NATO SECRET (or higher) security clearance

About the Role:

We’re a growing SaaS startup building our security team from the ground up. We’re looking for a hands-on Product Security Engineer who enjoys breaking things (responsibly) and helping teams fix them fast.

This role is very practical and impact-driven. You’ll be embedded close to the product and engineering teams, proactively attacking our own systems before anyone else does. If you like moving fast, owning problems end-to-end, and thinking like a real attacker, this role is for you.

What You'll Do:

• Actively test our SaaS product for security vulnerabilities across web apps, APIs, and cloud infrastructure.
• Perform manual security testing and targeted penetration tests (beyond automated scanners).
• Implement and help implement automated security test suites.
• Identify abuse cases, business logic flaws, and real-world attack paths.
• Work directly with engineers to reproduce issues and drive fixes.
• Help introduce lightweight security practices into the development process (threat modeling, secure design reviews).
• Validate fixes and ensure issues are fully resolved.
• Stay current on new vulnerabilities, attack techniques, and SaaS-relevant threats.

What You'll Bring:

• 5+ years of experience in application security, offensive security, or penetration testing.
• Strong understanding of web and API security (OWASP Top 10, auth, sessions, access control).
•  Experience testing modern SaaS products.
• Comfort working in cloud environments (AWS / GCP / Azure at a practical level).
• Experience with common security testing tools (Burp Suite, Nuclei, etc.).
• Ability to communicate findings clearly and pragmatically to engineers.
• Self-starter mindset — comfortable operating with limited process and high ownership.

Preferred, but not required:

• Startup experience or early-stage product exposure.
• Bug bounty or responsible disclosure experience.
• Secure code review experience (any major language).
• Familiarity with CI/CD and modern SDLC security.
• Offensive security certifications (OSCP, GWAPT, etc.).

ABOUT THE TEAM

Anduril's Space team is dedicated to expanding our AI-powered capabilities into the final frontier, enhancing Space Domain Awareness, Space Control, and Command and Control for U.S. military and allied partners. We're developing fully integrated hardware and software systems, including Lattice for Space Missions and modular payloads, to address growing threats in space and ensure our Guardians maintain a decisive advantage in this contested war-fighting domain.

ABOUT THE JOB

We are looking for a Senior Systems Engineer, Space to join our rapidly growing team in Costa Mesa, CA. In this role, you will be help lead development of technical strategy and roadmapping in conjunction with the Chief Engineer of Space Missions and the Growth/Strategy leads of the Orbital Systems team that effectively leverages current Anduril technologies and newly developed technologies to serve the customer mission areas. This role will address pre-award demonstrations, early contract phases, and full-contract execution. The Senior Systems Engineer, working with a multi-disciplinary engineering team, will ensure the efficient development and delivery of hardware and software solutions for the customer.

These efforts will include leading complex, integrated systems for on-orbit operations and demonstrations to include sub-contracted teammates and strategic partnerships. The systems engineer will need to facilitate effective technical development and integration that spans company-boundaries in an agile development approach in the context of a continuous integration/continuous deployment paradigm. They will need to balance development of new capabilities with the incorporation of several pre-existing Anduril capabilities and need to effectively communicate the development status to customers.

The Senior Systems Engineer will be responsible for technical oversight of all aspects of program execution from proposals to SRR, PDR, CDR, MRR, TRR, assembly, qualification testing, and delivery of flight units for launch. The Senior Systems Engineer in conjunction with the Chief Engineer of Space Missions will assist in building out the necessary infrastructure for Anduril to execute on all necessary aspects of satellite and payload build and test to include working with external vendors for establishing test requirements and pass/fail criteria. The Senior Systems Engineer will also work closely with the Anduril Space C2 team to enable and deliver Space Ground C2 products to both the customer and to further Anduril’s penetration into customer ecosystems.

WHAT YOU’LL DO

• Drive technical expertise across multiple spacecraft subsystems including bus and payloads
• Leverage strategic partnerships and teammates for building out new products to satisfy customer requirements in new and challenging mission areas
• Provide space industry expertise to refine and advance the Anduril Space and Orbital Systems strategy for growing the organization
• Generate technical inputs to proposals to include engineering execution plans
• Provide oversight to a multi-disciplinary team of engineers through all phases of program execution up to and including delivery and operation of capabilities on-orbit
• Perform mission and system level trade studies and analysis to balance risk, cost, and performance

REQUIRED QUALIFICATIONS

• Advanced experience in architecting, developing, and delivering defense/IC satellite and space hardware and software systems
• Thorough understanding of the recent/current technical state of key USSF and IC space systems and mission areas
• Demonstrated ability to decompose complex systems with competing objectives (e.g., performance, schedule, openness, cybersecurity, MLS) into executable requirements and execution then delivering on those to meet government expectations
• Experience with spacecraft standards for qualification testing and acceptance testing to include the use of GEVS, SMC-S-016 (MIL- STD-1540), etc
• Experience with US government space mission areas and associated CONOPS for successfully executing missions to enable space for the warfighter
• Design and development of space vehicle and payload architectures and detailed mission solutions to complex space domain challenges
• Strong technical communication skills, providing the ability to deliver critical technical briefings and conclusions to technical leadership, company leadership, and customers
• Strong technical fundamentals in space systems, space ground infrastructure, and product development
• Technical experience leading US Government contracts
• Eligible to obtain and maintain an active U.S. security clearance

PREFERRED QUALIFICATIONS

• Previous experience delivering spacecraft flight hardware
• On-orbit mission operations of satellites and/or associated payloads

ABOUT THE TEAM

Anduril's Space team is dedicated to expanding our AI-powered capabilities into the final frontier, enhancing Space Domain Awareness, Space Control, and Command and Control for U.S. military and allied partners. We're developing fully integrated hardware and software systems, including Lattice for Space Missions and modular payloads, to address growing threats in space and ensure our Guardians maintain a decisive advantage in this contested war-fighting domain.

ABOUT THE JOB

We are looking for a Systems Engineer, Space to join our rapidly growing team in Costa Mesa, CA. In this role, you will be responsible for developing a technical strategy and roadmap in conjunction with the Chief Engineer of Space Missions and the Growth/Strategy leads of the Orbital Systems team that effectively leverages current Anduril technologies and newly developed technologies to serve the customer mission areas. This role will address pre-award demonstrations, early contract phases, and full-contract execution. The Systems Engineer, working with a multi-disciplinary engineering team, will ensure the efficient development and delivery of hardware and software solutions for the customer.

These efforts will include leading complex, integrated systems for on-orbit operations and demonstrations to include sub-contracted teammates and strategic partnerships. The systems engineer will need to facilitate effective technical development and integration that spans company-boundaries in an agile development approach in the context of a continuous integration/continuous deployment paradigm. They will need to balance development of new capabilities with the incorporation of several pre-existing Anduril capabilities and need to effectively communicate the development status to customers.

The Systems Engineer will be responsible for technical oversight of all aspects of program execution from proposals to SRR, PDR, CDR, MRR, TRR, assembly, qualification testing, and delivery of flight units for launch. The Systems Engineer in conjunction with the Chief Engineer of Space Missions will assist in building out the necessary infrastructure for Anduril to execute on all necessary aspects of satellite and payload build and test to include working with external vendors for establishing test requirements and pass/fail criteria. The Systems Engineer will also work closely with the Anduril Space C2 team to enable and deliver Space Ground C2 products to both the customer and to further Anduril’s penetration into customer ecosystems.

WHAT YOU’LL DO

• Provide technical expertise across multiple spacecraft subsystems including bus and payloads
• Leverage strategic partnerships and teammates for building out new products to satisfy customer requirements in new and challenging mission areas
• Provide space industry expertise to refine and advance the Anduril Space and Orbital Systems strategy for growing the organization
• Contribute technical inputs to proposals to include engineering execution plans
• Provide oversight to a multi-disciplinary team of engineers through all phases of program execution up to and including delivery and operation of capabilities on-orbit
• Perform mission and system level trade studies and analysis to balance risk, cost, and performance

REQUIRED QUALIFICATIONS

• Experience in architecting, developing, and delivering defense/IC satellite and space hardware and software systems
• Understanding of the recent/current technical state of key USSF and IC space systems and mission areas
• Demonstrated ability to decompose complex systems with competing objectives (e.g., performance, schedule, openness, cybersecurity, MLS) into executable requirements and execution then delivering on those to meet government expectations
• Experience with spacecraft standards for qualification testing and acceptance testing to include the use of GEVS, SMC-S-016 (MIL- STD-1540), etc
• Experience with US government space mission areas and associated CONOPS for successfully executing missions to enable space for the warfighter
• Design and development of space vehicle and payload architectures and detailed mission solutions to complex space domain challenges
• Strong technical communication skills, providing the ability to deliver critical technical briefings and conclusions to technical leadership, company leadership, and customers
• Strong technical fundamentals in space systems, space ground infrastructure, and product development
• Technical experience leading US Government contracts
• Eligible to obtain and maintain an active U.S. security clearance

PREFERRED QUALIFICATIONS

• Previous experience delivering spacecraft flight hardware
• On-orbit mission operations of satellites and/or associated payloads

ABOUT THE JOB

We are looking for a Chief Engineer to to join our rapidly growing space team in Costa Mesa, CA. In this role, you will be responsible for serving as a technical lead on a wide berth of emerging developments geared towards an all-encompassing spacecraft mission focused around dynamic space operations and highly maneuverable satellites. This will include driving technology developments through design, build, test and delivery for on-orbit operations across high dV propulsion systems, optical sensor suites, closed loop guidance and navigation and systems engineering in close concert with new and legacy ground software enterprises. The Chief Engineer will develop a technical strategy and roadmap in conjunction with the Head of Engineering for Space Missions and the Growth/Strategy leads of the Space team that effectively leverages current Anduril technologies and newly developed technologies to serve the customer mission areas. This role will address pre-award demonstrations, early contract phases, and full-contract execution. The Chief Engineer, working with a multi-disciplinary engineering team, will ensure the efficient development and delivery of hardware and software solutions for the customer.

These efforts will include leading complex, integrated systems for on-orbit operations and demonstrations to include sub-contracted teammates and strategic partnerships. The chief engineer will need to facilitate effective technical development and integration that spans company-boundaries in an agile development approach in the context of a continuous integration/continuous deployment paradigm. They will need to balance development of new capabilities with the incorporation of several pre-existing Anduril or industry capabilities and need to effectively communicate the development status to internal and external stakeholders.

The Chief Engineer will be responsible for technical oversight of all aspects of program execution from proposals to SRR, PDR, CDR, MRR, TRR, assembly, qualification testing, and delivery of flight units for launch. The Chief Engineer in conjunction with the Head of Engineering for Space Missions will assist in building out the necessary infrastructure for Anduril to execute on all necessary aspects a space based interceptor consisting of satellite and payload build and test to include working with external vendors for establishing test requirements and pass/fail criteria. The Chief Engineer will also work closely with the Anduril Space C2 team to enable and deliver Space Ground C2 products to both the customer and to further Anduril’s penetration into customer ecosystems.

WHAT YOU’LL DO

• Provide technical expertise across multiple spacecraft subsystems and ground systems
• Leverage strategic partnerships and teammates for building out new products to satisfy customer requirements in new and challenging mission areas
• Provide space industry expertise to refine and advance the Anduril Space Based Interceptor strategy for customer engagements and demonstrations
• Contribute technical inputs to proposals to include engineering execution plans
• Provider oversight to a multi-disciplinary team of engineers through all phases of program execution up to and including delivery and operation of capabilities on-orbit
• Perform mission and system level trade studies and analysis to balance risk, cost, and performance

REQUIRED QUALIFICATIONS

• Experience in architecting, developing, and delivering defense/IC satellite and space hardware and software systems.
• Experience in high dV spacecraft, dynamic space operations, space based sensing and understand mission operations for surveillance and reconnaissance at multiple orbits.
• Understanding of the recent/current technical state of key USSF and IC space systems and mission areas
• Demonstrated ability to decompose complex systems with competing objectives (e.g., performance, schedule, openness, cybersecurity, MLS) into executable requirements and execution then delivering on those to meet government expectations
• Experience with spacecraft standards for qualification testing and acceptance testing to include the use of GEVS, SMC-S-016 (MIL-STD-1540), etc.
• Experience with US government space mission areas and associated CONOPS for successfully executing missions to enable space for the warfighter
• Design and development of space vehicle and payload architectures and detailed mission solutions to complex space domain challenges
• Strong technical communication skills, providing the ability to deliver critical technical briefings and conclusions to technical leadership, company leadership, and customers
• Strong technical fundamentals in space systems, space ground infrastructure, and product development
• Technical experience leading US Government contracts
• Eligible to obtain and maintain an active U.S. Secret security clearance

About Procare

For over 30 years, Procare Solutions has been dedicated to empowering early childhood educators by providing products and services that enable them to focus on the care, safety and education of children.  We recognize the responsibility that comes with nurturing and educating children, which is why our child care management solutions are designed to automate business processes, help ensure safety and compliance, communicate with families and provide educational resources and training to help teachers and children thrive.

Over 40,000 satisfied customers have chosen Procare Solutions as their trusted partner in providing exceptional care for young minds.   

A Little About the Role

The VP Information Security is a senior leader responsible for establishing and executing Procare’s enterprise-wide information security strategy, program, and culture. Reporting to the CTO this role will serve as the company's top security leader — translating complex cyber risk into business language, protecting customer data, enabling compliant product growth, and building a world-class security organization.

This is an operationally engaged, high-visibility role that blends strategic vision with operational execution. The ideal candidate is a proven security leader who thrives in a fast-moving SaaS environment, understands how security is changing in an AI first world, and can operate confidently in the boardroom while remaining deeply trusted by engineering and product teams.

Procare's security organization protects 40,000+ childcare centers and millions of families who depend on our platform daily. Our program includes:

• Mature compliance posture: SOC 2 Type II certified across all products; PCI DSS v4.0.1 Level 1 Service Provider; TX-RAMP authorized
• Enterprise security tooling: CrowdStrike NextGen-SIEM, Contrast Security/Veracode for application security, Automox for patch management, Barracuda/Abnormal.ai for email security
• Proactive security culture: Monthly product security meetings, CSIRT incident response team, public trust center (SafeBase), quarterly Security Steering Committee with C-suite participation
• Parent company support: Member of Roper Technologies family with access to shared security resources, threat intelligence, and enterprise tooling

What you’ll do:

Security Strategy & Leadership

• • Define, own, and continuously evolve a multi-year enterprise security roadmap aligned to business 
  objectives, growth stage, and risk appetite
• • Serve as the primary security advisor to the executive leadership team, present security posture, risk 
  metrics, and investment cases with clarity
• Lead a high-performing security organization including Security Operations, GRC, AppSec, and Cloud 
  Security functions
• • Champion a security-first culture across the company through education, executive sponsorship, and 
  accountability
• • Translate technical risk into business impact using quantitative risk frameworks (e.g., FAIR) to influence 
  budget and strategic decisions
• • Navigate Roper Technologies cybersecurity framework, maintaining compliance with mandatory 
  foundational controls and implementing selected optional controls to achieve maturity targets; serve as 
  primary security liaison to parent company
• • Establish AI security governance program to evaluate, approve, and manage AI tool adoption across the 
  organization; implement controls for AI-specific risks including data leakage, prompt injection, and model 
  security
• • Manage security across diverse product portfolio (5+ applications) with varying technology stacks, 
  customer bases, and compliance requirements; ensure consistent security standards while 
  accommodating product-specific needs
• • Build and maintain executive cybersecurity dashboards providing real-time visibility into security posture, 
  risk metrics, and program progress for board, parent company, and executive leadership

Cloud & Product Security

• • Secure the company's SaaS platform and cloud environments (AWS/Azure/GCP) by driving secure SDLC, 
  vulnerability management, remediation SLAs, and penetration testing programs
  • Partner with Product and Engineering leadership to embed security by design — shifting security left into 
  development workflows without impeding velocity
  • Oversee Identity and Access Management (IAM), Zero Trust architecture, data encryption, and cloud 
  security posture management (CSPM/CNAPP)
  • Define and maintain security standards for APIs, microservices, container security, and third-party 
  integrations

Governance, Risk & Compliance (GRC)

• Own and maintain the company's Information Security Management System (ISMS), risk register, and policy framework
• Lead and maintain Type II and PCI DSS v4.0.1 certifications; oversee ISO 27001, TX-RAMP, GDPR, CCPA, and other applicable regulatory frameworks
• Manage customer security questionnaires, enterprise security reviews, and security-related RFP/procurement processes in partnership with Sales and Legal
• Develop and enforce vendor and third-party risk management programs to minimize supply chain exposure
• Ensure compliance with applicable federal, state, and international data privacy and security regulations
• Manage state-specific compliance programs including TX-RAMP certification with quarterly vulnerability reporting and evidence submission requirements
• Implement and maintain customer trust center and security documentation portal to streamline enterprise security reviews and RFP processes
• Lead supply chain security and vendor breach response program; assess impact of third-party compromises and coordinate remediation across affected systems
• Ensure compliance with child data protection requirements and education sector-specific regulations; implement specialized controls for sensitive family and student information

Security Operations & Incident Response

• Lead a 24/7-capable security operations capability including SIEM, EDR, XDR, and threat intelligence platforms
• Own the cyber incident response program: detection, investigation, containment, communication, and post-incident review (PIR) processes
• Test business continuity and disaster recovery plans with cross-functional stakeholders
• Monitor emerging threat intelligence; proactively brief leadership on ransomware, social engineering, supply chain, and AI-driven threat vectors
• Lead Zero Trust architecture planning and implementation across corporate and product environments as multi-year strategic initiative: coordinate with infrastructure, network, and identity teams

Corporate Security & IT Risk Management

• Oversee corporate IT security including endpoint protection, patch management, and corporate network security controls
• Implement enterprise patch management programs using automated tools to ensure timely remediation of vulnerabilities across workstations and servers
• Direct Active Directory security assessments and identity hygiene programs across all domain instances
• Ensure MFA enforcement for all privileged accounts and coordinate rollout of authentication requirements for staff and customers

People & Organizational Leadership

• Recruit, develop, and retain a diverse security team including Security Engineers, Analysts, GRC Specialists, and an AppSec function
• Define team structure, career ladders, OKRs, and budget for the security organization
• Manage external security vendors, MSSPs, auditors, and counsel relationships

Our ideal candidate will have:

• 12+ years' of progressive experience in information security, with at least 4 years' in a CISO, Deputy CISO, or VP of Security role
• Proven track record leading security at a B2B SaaS or cloud-native technology company; experience scaling security programs from growth stage to enterprise maturity
• Deep expertise in cloud security architecture (AWS, Azure, and/or GCP), secure SDLC, and modern threat detection and response
• Hands-on leadership of SOC 2 Type II and PCI audits; direct experience with ISO 27001, GDPR, CCPA
• Demonstrated ability to communicate security risk to non-technical executives and board members; experience presenting to audit committees or governance boards
• Experience managing security through enterprise sales cycles including customer trust reviews, penetration test sharing, and security questionnaire programs
• Track record of building and scaling security teams from the ground up, including hiring, organizational design, and vendor management
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field required; Master's degree or MBA preferred
• One or more industry certifications strongly preferred: CISSP, CISM, CCSP, CISA, CRISC, CEH
• Executive presence with the ability to build trust at board level and peer-level across the C-suite
• Strong business acumen — understands how security decisions impact revenue, customer trust, and company valuation
• Exceptional communication skills: able to explain complex security concepts in plain language to diverse audiences
• Collaborative, low-ego leader who can influence without authority and build bridges between security, engineering, legal, and sales
• Resilient under pressure; sound judgment in high-stakes incident scenarios
• Skilled at managing competing priorities across multiple compliance programs, product teams, and parent company requirements; able to sequence initiatives and communicate trade-offs effectively

Security Technology Experience

Core Security Platforms:

• Cloud security: Wiz, Orca, Prisma Cloud, or equivalent CSPM/CNAPP solutions
• Endpoint/XDR: CrowdStrike, SentinelOne, Microsoft Defender, or equivalent
• SIEM/SOAR: CrowdStrike NextGen-SIEM, Splunk, Sumo Logic, or equivalent
• Identity/IAM: Okta, Auth0, Azure AD, or equivalent

Specialized Security Tools:

• Email security: Proofpoint, Mimecast, Abnormal.ai, or equivalent next-gen solutions
• Application security: Veracode, Checkmarx, Contrast Security, Snyk, or equivalent SAST/DAST platforms
• GRC/Compliance: Vanta, Drata, OneTrust, or equivalent automation platforms
• Trust & transparency: SafeBase, Whistic, or equivalent trust center solutions
• Patch management: Automox, Ivanti, or equivalent endpoint management platforms

Emerging Security Categories:

• AI security and governance tools (familiarity with landscape preferred)
• Zero Trust architecture frameworks and implementation tools

Physical Requirements:

• This position works most of the time in a fixed office location and may involve sitting and/or standing for prolonged periods
• Frequently required to communicate verbally and in writing (mostly email) with customers, prospects, and other employees
• Use of computer, telephone, and other office equipment for the greater part of the workday
• Occasional travel may be required for this position

Why Procare?

• Excellent comprehensive benefits packages including: medical, dental, & vision plans
• HSA option with employer contributions
• Vacation time, holidays, sick days, volunteer & personal days
• 401K Plan with employer match and immediate vesting
• Employee Stock Purchase Plan
• Employee Discount Program
• Medical, Dependent Care, and Transportation FSA Plans
• Company paid Short and Long-Term disability and Life Insurance
• RTD EcoPass for all Denver employees
• Tuition Reimbursement and continued Professional Development
• Fast paced, high energy workplace environment in prime downtown location
• Regular company provided meals

Salary

$200,000 - $250,000/year DOE

Location

This position is based in our Denver, CO office. We are currently in a hybrid in-office/remote working model based on business needs. Candidates must be willing and able to work from our Denver, CO office a minimum of 3 days a week.

As a key member of the Quality Assurance team, you will be responsible for ensuring the reliability, performance, and security of our software products. You will design, develop, and execute comprehensive test plans that allow our development teams to ship high-quality code with confidence and speed.

Key Responsibilities

• Quality Strategy: Develop and implement robust test strategies and test cases for new and existing features.
• Test Automation: Design, write, and maintain automated test scripts (UI and API) to increase testing efficiency and coverage.
• Agile Collaboration: Participate in Agile ceremonies (Sprint Planning, Stand-ups, Retrospectives) to provide "QA perspective" from the start of the development cycle.
• Defect Management: Identify, document, and track software defects to resolution using bug-tracking tools (e.g., Jira).
• Cross-Functional Communication: Communicate effectively with developers, product owners, and stakeholders to clarify requirements and report on software health.
• CI/CD Integration: Integrate automated tests into CI/CD pipelines to ensure continuous quality and rapid feedback loops.
• Root Cause Analysis: Perform thorough regression testing and root cause analysis when bugs are identified in production.
• Continuous Improvement: Proactively suggest improvements to the development process to prevent defects before they occur.
• Soft Skills: Demonstrate a detail-oriented mindset, professional curiosity, and a "quality-first" attitude.

Requirements

• Experience: Proven experience in Software Quality Assurance (Manual and Automated testing).
• Language: English proficiency is mandatory.
• Programming Skills: Proficiency in at least one programming language (e.g., Java, Python, or JavaScript) for automation purposes.
• Testing Frameworks: Hands-on experience with automation tools such as Selenium, Cypress, Playwright, or Appium.
• API Testing: Experience testing RESTful APIs using tools like Postman, SoapUI, or RestAssured.
• Databases: Basic to intermediate knowledge of SQL for data validation and backend testing.
• Version Control: Proficiency in Git and/or BitBucket.
• Documentation: Excellent skills in writing clear, concise, and comprehensive test plans and bug reports.

Preferred Qualifications (Pluses)

• Experience with Performance/Load Testing (e.g., JMeter, Locust).
• Knowledge of Security/Penetration Testing principles.
• Experience with Cloud Infrastructure (AWS, Azure, or GCP).
• Familiarity with Docker and Kubernetes for managing test environments.

LI-DC1

As a key member of the Quality Assurance team, you will be responsible for ensuring the reliability, performance, and security of our software products. You will design, develop, and execute comprehensive test plans that allow our development teams to ship high-quality code with confidence and speed.

Key Responsibilities

• Quality Strategy: Develop and implement robust test strategies and test cases for new and existing features.
• Test Automation: Design, write, and maintain automated test scripts (UI and API) to increase testing efficiency and coverage.
• Agile Collaboration: Participate in Agile ceremonies (Sprint Planning, Stand-ups, Retrospectives) to provide "QA perspective" from the start of the development cycle.
• Defect Management: Identify, document, and track software defects to resolution using bug-tracking tools (e.g., Jira).
• Cross-Functional Communication: Communicate effectively with developers, product owners, and stakeholders to clarify requirements and report on software health.
• CI/CD Integration: Integrate automated tests into CI/CD pipelines to ensure continuous quality and rapid feedback loops.
• Root Cause Analysis: Perform thorough regression testing and root cause analysis when bugs are identified in production.
• Continuous Improvement: Proactively suggest improvements to the development process to prevent defects before they occur.
• Soft Skills: Demonstrate a detail-oriented mindset, professional curiosity, and a "quality-first" attitude.

Requirements

• Experience: Proven experience in Software Quality Assurance (Manual and Automated testing).
• Language: English proficiency is mandatory.
• Programming Skills: Proficiency in at least one programming language (e.g., Java, Python, or JavaScript) for automation purposes.
• Testing Frameworks: Hands-on experience with automation tools such as Selenium, Cypress, Playwright, or Appium.
• API Testing: Experience testing RESTful APIs using tools like Postman, SoapUI, or RestAssured.
• Databases: Basic to intermediate knowledge of SQL for data validation and backend testing.
• Version Control: Proficiency in Git and/or BitBucket.
• Documentation: Excellent skills in writing clear, concise, and comprehensive test plans and bug reports.

Preferred Qualifications (Pluses)

• Experience with Performance/Load Testing (e.g., JMeter, Locust).
• Knowledge of Security/Penetration Testing principles.
• Experience with Cloud Infrastructure (AWS, Azure, or GCP).
• Familiarity with Docker and Kubernetes for managing test environments.

LI-DC1

As a key member of the Quality Assurance team, you will be responsible for ensuring the reliability, performance, and security of our software products. You will design, develop, and execute comprehensive test plans that allow our development teams to ship high-quality code with confidence and speed.

Key Responsibilities

• Quality Strategy: Develop and implement robust test strategies and test cases for new and existing features.
• Test Automation: Design, write, and maintain automated test scripts (UI and API) to increase testing efficiency and coverage.
• Agile Collaboration: Participate in Agile ceremonies (Sprint Planning, Stand-ups, Retrospectives) to provide "QA perspective" from the start of the development cycle.
• Defect Management: Identify, document, and track software defects to resolution using bug-tracking tools (e.g., Jira).
• Cross-Functional Communication: Communicate effectively with developers, product owners, and stakeholders to clarify requirements and report on software health.
• CI/CD Integration: Integrate automated tests into CI/CD pipelines to ensure continuous quality and rapid feedback loops.
• Root Cause Analysis: Perform thorough regression testing and root cause analysis when bugs are identified in production.
• Continuous Improvement: Proactively suggest improvements to the development process to prevent defects before they occur.
• Soft Skills: Demonstrate a detail-oriented mindset, professional curiosity, and a "quality-first" attitude.

Requirements

• Experience: Proven experience in Software Quality Assurance (Manual and Automated testing).
• Language: English proficiency is mandatory.
• Programming Skills: Proficiency in at least one programming language (e.g., Java, Python, or JavaScript) for automation purposes.
• Testing Frameworks: Hands-on experience with automation tools such as Selenium, Cypress, Playwright, or Appium.
• API Testing: Experience testing RESTful APIs using tools like Postman, SoapUI, or RestAssured.
• Databases: Basic to intermediate knowledge of SQL for data validation and backend testing.
• Version Control: Proficiency in Git and/or BitBucket.
• Documentation: Excellent skills in writing clear, concise, and comprehensive test plans and bug reports.

Preferred Qualifications (Pluses)

• Experience with Performance/Load Testing (e.g., JMeter, Locust).
• Knowledge of Security/Penetration Testing principles.
• Experience with Cloud Infrastructure (AWS, Azure, or GCP).
• Familiarity with Docker and Kubernetes for managing test environments.

LI-DC1

Territory: DC, PA, MD, DE, WV & VA

We’re looking for a driven Clinical Oncology Specialist (COS) to join our newly established Cutaneous Oncology specialty team. This is a high-impact, tumor-specific role focused on accelerating the adoption and growth of Signatera—our groundbreaking, first-in-class MRD ctDNA test. As a COS, you’ll act as a strategic field partner and a key representative of Natera Oncology, collaborating cross-functionally to engage key opinion leaders (KOLs) across integrated delivery networks, academic medical centers, hospital systems, and select community oncology practices.

Primary stakeholders include Medical Oncologists, Oncology Surgeons, and Pathologists. Success in this role demands a deep understanding of the skin cancer/cutaneous space, strong clinical acumen, and the ability to navigate complex healthcare systems while fostering trusted, value-driven relationships.

We’re seeking individuals who thrive in a fast-paced, entrepreneurial environment and are driven by purpose, passion, and the pursuit of clinical excellence. Frequent travel is required.

Key Responsibilities

• Develop and execute a strategic territory plan focused on growth and account penetration

• Identify and engage KOLs and key accounts to integrate Signatera into clinical decision-making

• Drive new business development while expanding and deepening existing relationships

• Maximize return on investment through consistent sales activity and cross-functional collaboration

• Deliver impactful clinical education to physicians and care teams

• Serve as a trusted resource in a fast-paced, startup-like environment

• Build deep understanding of Natera’s oncology solutions, internal processes, and competitor landscape

• Call on targeted physicians and practices to promote Natera’s oncology products and services

• Drive product adoption by influencing clinical decision-making at the provider and system level

• Monitor account performance and market trends; escalate issues and identify new opportunities

• Consistently conduct business in an ethical, transparent, and professional manner

Qualifications

• Bachelor’s degree required

• 5+ years of experience with consistent success in Cutaneous, Surgical or molecular diagnostics preferred

• Deep knowledge of academic and community oncology markets, precision medicine, and reimbursement landscape

• Ability to travel frequently, including overnight travel as needed

• Valid driver’s license and safe driving record

• Proven leadership, business acumen, and strong communication skills

• Travel: ~75% (combination of road and air travel)

Key Competencies

• Excellent verbal, written, and presentation skills

• Strategic, forward-thinking, and data-driven mindset

• Ability to work independently and collaboratively in team environments

• Strong clinical understanding of oncology and molecular diagnostics

• Comfortable navigating complex healthcare systems and engaging senior stakeholders

Why Natera?
At Natera, we’re transforming the way cancer is detected and monitored. Join us and be part of an innovative, mission-driven team committed to improving patient outcomes in oncology.

Total compensation includes a competitive base salary and uncapped quarterly commissions. In addition we offer a car allowance and Restricted Stock Units (RSUs).

Location: Mississauga (Onsite) 

Role Type: Full-time (New Opening)  

About e-Zinc 

e-Zinc is an energy storage venture based in Toronto with a breakthrough technology poised to disrupt the market. As the global energy grid moves to higher levels of penetration of renewable energy, there is a surging need for affordable, flexible, long-duration energy storage. e-Zinc is uniquely positioned to meet this demand as the first company in the world to “metalize” electricity.  

Backed by over CAD $80 million in funding from leading global strategic and financial investors - such as Toyota Ventures, Mitsubishi Heavy Industries, Eni, Evok Innovations, and BDC - e-Zinc has garnered international recognition for its proprietary technology and visionary roadmap. Highlights include: 

• Named to the Global Cleantech 100 for four consecutive years (2022–2025) 

• $1M Grand Prize winner of the Impact Canada Charging the Future Challenge 

• Awarded a $1.6M grant from Breakthrough Energy Solutions Canada 

• Secured over $12M in funding across three projects from Sustainable Development Technology Canada (SDTC) 

• Recipient of a USD $1.3M grant from the California Energy Commission 

As e-Zinc moves toward commercialization, e-Zinc is expanding its team to bring our transformative technology to market and support the future of renewable energy. 

Opportunity 

e-Zinc is seeking an experienced and talented Mechanical Engineer to join the Product Development team. 

Position Scope and Responsibilities 

 Design & Analysis 

• Lead mechanical design of battery cells and packs, including enclosures, interconnects, and structural components 
• Design external enclosures for DC-BESS units, covering component placement, fixing and racking strategy, fluid and electrical routing, and IP compliance 
• Create detailed 3D models, engineering drawings, and BOMs in SolidWorks 
• Conduct tolerance stack-ups and FEA to validate design integrity and performance 
• Select and qualify materials and components against thermal, structural, environmental, and regulatory requirements 

Cross-Functional Integration 

• Collaborate with electrical, controls, electrochemical, and manufacturing teams to ensure designs meet functional, integration, and DFM requirements
• Lead discussions with external vendors and fabricators for custom component designs and assemblies
• Drive engineering sample assembly and participate in hands-on functional testing 

Engineering Process 

• Lead and contribute to design reviews, DFMEA, root cause analysis, and continuous improvement initiatives 
• Drive development of test fixtures, jigs, and assembly processes to support pack and BESS validation 
• Support safety and compliance testing to applicable regulatory standards (UL, IEC, CE) 
• Champion the full engineering cycle through integration of internal, field, and commercial feedback 

 Qualifications 

Required: 

• Bachelor's degree in Mechanical Engineering or a related engineering discipline  

• 5+ years of mechanical design experience in energy storage, automotive, robotics, or industrial systems  

• Registered with Professional Engineers of Ontario (PEO), or eligible for registration is an asset. 

• Demonstrated expertise in mechanical system design for high-power devices, thermal management, or structural analysis  

• Proficiency in SolidWorks, PDM and simulation tools (ANSYS, CFX, or equivalent)  

• Hands-on experience with prototyping, testing, and working with external vendors and fabricators  

• Strong working knowledge of DFM/DFA, GD&T, and materials selection for mechanical systems  

• Strong communication skills and ability to work effectively in a multidisciplinary environment 

 Additional Assets: 

• Experience in battery, fuel cell, or energy storage system design and packaging  
• Familiarity with regulatory standards relevant to energy storage (UL 9540, IEC 62619, CE marking)
• Background in electrochemical device packaging or fluid-handling mechanical systems 

 At e-Zinc, how we work matters just as much as what we build. The qualities below reflect how our team turns our core values into action every day. 

Safety: You prioritize safety in everything you do and understand the deep responsibility we have to our people, our customers, and our planet. 

Truth: You are honest, transparent, and authentic—with yourself, your teammates, and our customers. 

Results: You approach challenges with curiosity and creativity, troubleshoot thoughtfully, and focus on delivering meaningful outcomes. 

Team: You contribute to an open and trusting workplace, empower others, and hold yourself and your teammates accountable. 

Mastery: You are committed to building domain expertise, bring a strong work ethic, and continuously invest in your own growth and improvement. 

Value: You act responsibly with time, financial resources, and effort, always aiming to create the greatest impact and long-term value. 

Why Join e-Zinc? 

At e-Zinc, your work has purpose. You’ll be part of a pioneering team building transformative technology that will help shape the future of clean energy. We offer a dynamic work environment, meaningful projects, and the opportunity to grow your career alongside passionate, purpose-driven colleagues. 

Note: At e-Zinc, every application is personally reviewed by our People & Talent team to understand your motivation, experience, and alignment with our mission. 

Compensation & Total Rewards: 

 The expected annual salary range for this role is $80,000–$100,000 Final compensation will be determined based on the candidate’s skills, experience, and overall fit for the position. 

 Successful employees will be offered a comprehensive Total Rewards package, which can include: 

• Competitive compensation
• Comprehensive Employer-paid benefits
• Retirement savings plans with employer contributions
• Equity grants and opportunity for company ownership
• Paid vacation time to refresh, plus additional paid time off for special events such as birthdays or religious holidays 

Encouragement to Apply 

Studies show that individuals in underrepresented groups are less likely to apply for jobs unless they meet every qualification. If you find you are passionate about this role and meet many of the items listed, we encourage you to apply! 

e-Zinc is proud to be an equal opportunity employer that celebrates and supports diversity. We thrive in an environment of mutual respect and welcome all applicants. 

 If you require accommodations at any stage in the hiring process, please contact us at careers@e-zinc.ca 

OTR Solutions is an innovator in the transportation industry providing a suite of factoring, fuel, and business management focused solutions. We help new and established companies get fast access to the funds they need for daily operations. As a Private Equity backed FinTech company, we are looking to grow our best-in-class financial organization. We are at the beginning of the development of a new Cloud-Native platform that will drive the next wave of innovation in the industry and fuel OTR’s growth. We are looking for growth minded, collaborative technologist who love to create, innovate, and learn cutting-edge solutions on the latest and greatest technology. 

OTR has been recognized as a “Top Workplace” by the Atlanta Journal-Constitution since 2016! 

As a Senior Software Development Engineer in Test, you will ensure the quality and integrity of all software products produced for distribution. You will monitor processes and procedures in product development and design. You will develop and analyze master test plans, cases, and schedules prior to implementation into production.  

Please note: We do not sponsor work-related visas.** 

Responsibilities: 

• Design, develop, and maintain robust automated test suites for UI/E2E, API, and business rules engine testing using Playwright with TypeScript.
• Develop and execute testing strategies for our business rules engine, ensuring rule logic is validated accurately and comprehensively.
• Build and maintain automated API test suites, validating RESTful and other API protocols for functionality, reliability, and performance.
• Design and execute performance/load tests to identify bottlenecks and ensure system scalability under real-world conditions.
• Collaborate with the team to identify security vulnerabilities and incorporate security testing practices into the automation pipeline.
• Contribute to the evolution of our test automation frameworks, tools, and overall QA strategy.
• Integrate automated tests into CI/CD pipelines to enable continuous quality feedback.
• Provide technical guidance and mentorship to junior and mid-level SDETs, fostering growth and best practices across the team.
• Work closely with developers, product managers, and stakeholders in an Agile environment to understand requirements and define test coverage.
• Identify, document, and track defects with clear reproduction steps and impact analysis.

What we look for: 

• 6+ years of experience in test automation engineering (SDET or equivalent role).
• Strong proficiency in TypeScript and modern test automation frameworks.
• Hands-on experience with Playwright and/or Cypress for UI/E2E test automation.
• Solid experience with API testing and a strong understanding of API protocols (REST, GraphQL, etc.).
• Experience with performance testing tools and methodologies.
• Experience with security testing tools and methodologies (e.g., OWASP, penetration testing basics)
• Strong understanding of software development lifecycle (SDLC) and Agile/Scrum practices.
• Ability to design test automation architectures and frameworks from the ground up.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong communication skills with the ability to mentor and collaborate across teams.
• Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent practical experience).

• Paid Certifications
• Certification Bonus
• Eligibility for Individual and Company bonus programs 
• Medical, Dental, Vision, Life/ AD&D Insurance, Short-Term Disability  
• Pet Insurance, Paid Family Leave, Employee Assistance Program  
• Fully Paid Maternity Leave  
• 401(k) with Company Matching  
• Generous PTO, Sick/Mental Health Days, Flex Holidays + Company Paid Holidays
• Travel Stipend to support Work Life Balance
• Leadership Development and Training
• Continuous Learning + Professional enhancements
• Weekly Catered Lunches + Casual Dress Code 
• Company Paid Fitness Membership  
• Volunteer Days and Opportunities with Company-Partnered Charities  
• Internal Inclusion programs  

OTR’s mission is to create exceptional value for our clients by providing industry leading financing and back-office solutions. Three pillars that are crucial to supporting that mission are outstanding customer service, technology that creates efficiency for ourselves and our customers, and a culture that provides the opportunity for employees to achieve greatness.  

OTR Solutions is an Equal Opportunity Employer 

#LI-Hybrid

Senior Security Engineer

Our Engineering Standards at Karbon:

Balance Speed and Quality

Engineers are expected to balance delivery speed with a strong commitment to quality, meeting agreed timelines while producing reliable, maintainable, and well-tested solutions. Sound judgment in making trade-offs between velocity and long-term sustainability is essential.

Collaborate Effectively

Engineering is collaborative by default. Team members are expected to contribute constructively in design discussions, reviews, and planning, communicate clearly about progress and risks, and support shared team outcomes in both hybrid and distributed environments.

Build and Maintain Systems

Engineers are responsible for building new capabilities while maintaining and improving existing systems. This includes designing scalable solutions, reducing technical debt, supporting operational stability, and contributing to continuous improvement.

Operate with Autonomy

A high degree of autonomy is expected. Given clear objectives, engineers should independently translate problems into actionable technical approaches, proactively identify improvements, and continuously expand relevant technical expertise.

Ownership and Accountability

Ownership is fundamental. Engineers are accountable for the quality, performance, and customer impact of their work from design through post-release support, and are expected to follow through on commitments.

AI-Enabled Engineering

AI is reshaping how software is built, and we are committed to leveraging it as a force multiplier for creativity, impact, and capability. Engineers are expected to confidently apply strong technical fundamentals while embracing AI tools and approaches to enhance productivity, problem-solving, and innovation. Curiosity, adaptability, and enthusiasm for integrating AI into meaningful product development are essential.

Contribute to Team Culture

Engineers contribute positively to a culture of professionalism, transparency, low bureaucracy, and mutual respect, strengthening team performance through authenticity, curiosity, and collaboration.

About the Role! 

Seeking a development & cloud focused Senior Security Engineer to join our expanding security team.

The ideal candidate will have passion for AppSec, Cloud and AI. They will be a skilled communicator and relationship builder capable of promoting and building security practices across the organization and into our development processes.

AI is reshaping practices across the board and at Karbon we’re fully committed. We don’t see AI as a replacement but as a force multiplier. We’re looking for Security Engineers who are confident in network & security fundamentals, driven to grow, and excited by the challenges and opportunities AI brings.

What You’ll Own:

• Partner with different areas within Karbon - You will make sure security is embedded from the start from feature design and development to participating in design reviews and threat modelling.
• Balance Security and Delivery - You know how to balance delivery needs with security and can communicate security risks and issues to non technical stakeholders. You understand when it's important to push back, when to compromise and how to work with delivery teams to reach a great outcome.
• You keep up to date on the latest technologies and approaches - You are excited by the new developments such as AI bring to security but also understand the importance of security foundational practices such as good account hygiene, least privilege, attack surface reduction and MFA.
• Identify and assess security risks introduced by AI tools - You’ll assist with reviewing the risks of AI tooling usage & Integration and AI-generated code.
• Apply AI-assisted tooling to accelerate security work - you understand the impact AI can have and utilize it across many areas including triage, threat detection, code review, and documentation.
• Flexibility and confidence to work across multiple security domains - We’re a small team responsible for Security at a fast moving company and you’ll get exposure to many different security domains; you could be assisting with refining and investigating corporate IT security processes in the morning, reviewing a cloud hosted system after lunch and then tweaking detection rules!
• Work effectively as part of a team - Security is a team sport and you understand the need to build relationships and trust across the organization to enhance Karbon’s security posture. You are happy to answer questions and offer advice to teams that will reach out for your assistance.
• Own your work - You take pride in your work, feeling a deep sense of responsibility for the products we develop and ensuring we keep our customers' valuable data secure. This sense of ownership is paramount, and you share this commitment.
• Bring your passion and personality - Your creativity, curiosity, and authentic self make the team stronger. If you've worked in highly political environments, you'll find our culture, free from office politics and valuing openness and authenticity, a refreshing change.
• Help us measure improvement and steer our roadmap - Contribute to Security Metrics so we can track progress and feedback into our roadmap.

What Sets You Apart

4+ years experience in a security or development role across most of the following:

• Collaborating with teams to review designs & implementations for security issues and embedding good security practices across software development
• Triaging issues and reports, assisting teams to remedy items and testing fixes
• Working with external penetration test companies to validate and prioritize findings
• Conducting risk and vulnerability assessments of web applications and APIs and third party suppliers and integrations
• Configuring and tuning SAST, SCA and DAST Tooling
• Working with build/deployment pipelines to incorporate security tooling (Github Actions or Azure Devops YAML based pipelines)
• Assisting with implementing security focused alerting and detections and automations
• Conducting and facilitating organizational & developer focused security training
• Assisting with operational security items such as EDR alerts and MDM
• Contributing to our security roadmap

In addition you’ll need:

• Strong communication skills (spoken and written) 
• Some of the following Languages/Frameworks: Microsoft .NET/C#, JavaScript (we use React and EmberJS frameworks and, Python)
• At least one cloud platform: Azure, AWS or GCP (we use Azure predominantly)
• Working knowledge of PowerShell or Bash and Python
• Working knowledge of at least one AI development tool e.g. Claude Code, GitHub Co-Pilot etc
• Portswigger Burp or similar
• Certifications such as Offsec OSCP & AWAE, GIAC, Burp Practitioner, PJPT, Microsoft/AWS development and cloud related are nice to have
• Experience with securing AI applications, systems and AI tooling would be highly regarded

Why Work at Karbon?

• Gain global experience across Australia, New Zealand, UK, and Canada
• Strong benefits package including:
• Flexible Time Off with an encouraged 4 weeks use per year
• Company paid medical for you and eligible spouse/partner and dependents
• Paid dental and vision and eligible spouse/partner and dependents
• 401(k) with company matching
• Flexible Spending Account
• Up to 8 weeks paid parental leave
• Work-from-home stipend
• Work with (and learn from) an experienced, high-performing team
• A collaborative, team-oriented culture that embraces diversity, invests in development and provides consistent feedback
• Be part of a fast-growing company that firmly believes in promoting high performers from within

• A team-oriented, collaborative professional who enjoys working with others.
• Passionate about security and knowledgeable about security principles, understanding their value to an organization.
• Passionate about long-term solutions that drive lasting security improvements, prioritizing sustainable change over quick fixes.

At Qualia, we've built the leading B2B real estate technology that transforms the home buying and selling experience into a simple, secure, and enjoyable process. Our SMB and Enterprise products bring together users from across the real estate ecosystem---homebuyers and sellers, lenders, title and escrow agents, and real estate agents---onto a single shared digital closing platform, providing greater clarity and transparency to real estate transactions. Today, through our business customers across the country, millions of consumers use Qualia to close on homes every year.

WHAT YOU'LL WORK ON

We are hiring an entrepreneurial Engineering Manager to lead Qualia's Application Security team. This is a builder's role. You won't just run a team - you'll redesign how a modern AppSec function operates when AI can do the first pass on nearly everything we used to do by hand.

The team today owns secure design reviews, vulnerability triage, internal penetration testing, incident response support, and security tooling across a JavaScript/NodeJS and Kubernetes stack. Your mandate is to scale that surface area vertically - growing output and coverage per engineer - by making AI-assisted workflows the default. That means automated pen testing pipelines, AI-driven triage of findings from SAST/DAST/SCA, agentic review of engineering proposals and design docs, and continuous red-teaming exercises that test both our systems and our assumptions.

You'll partner closely with Platform, Infra, and product engineering leaders to embed security earlier in the development lifecycle, and you'll be the team's voice when we set the security vision for the next two years - including anomaly detection across production traffic, model-driven threat hunting, and how we defend against (and responsibly use) AI-enabled attackers.

Securing that platform - the money, the identities, and the documents flowing through it - is what the Application Security team does every day. We're hiring an Engineering Manager to lead this team into its next chapter: one where AI is a force multiplier for every part of our security program.

RESPONSIBILITIES

• Lead and grow the Application Security team - coaching senior AppSec engineers, setting goals, and owning delivery against the security roadmap
• Build the automated pen-testing program. Stand up pipelines that run continuous, AI-assisted offensive testing against our services, APIs, and web properties - and turn the output into a triaged, actionable queue
• Scale triage with AI. Design the workflows and tooling that let the team handle 10x the volume of findings (bug bounty, scanner output, customer reports) without 10x the headcount
• Review engineering proposals. Sit at the front of the design process with engineering leaders across Core, Clear, Shield, Connect, and Atlas - reviewing RFCs and proposals, flagging risk early, and helping teams ship securely by default
• Run red-teaming exercises. Drive recurring red team engagements - both internal exercises and coordinated vendor work - and close the loop into detection, response, and product hardening
• Own the AppSec vision. Partner with the leadership team to set multi-quarter strategy across anomaly detection, threat modeling, and AI-augmented defense
• Fight fires when they happen. Lead incident response from the application security side, and be the person engineering trusts to make the call in the room
• Mentor and hire. Recruit strong AppSec engineers, mentor the ones you have, and build a team culture where people are pushed and supported in equal measure

YOUR BACKGROUND THAT LIKELY MAKES YOU A MATCH

• 5+ years as a security or full-stack engineer working on production systems, with 2+ years managing a security or platform engineering team
• Hands-on depth in application security: threat modeling, code review, and at least one offensive-security discipline (pen testing, red team)
• Track record of shipping automation that changed how a team worked - ideally including meaningful use of LLMs, agents, or ML in a security or engineering workflow
• Comfort operating across the full security lifecycle: prevention, detection, response, and recovery
• Strong written communication. You can write the design doc, the post-mortem, and the board-ready summary - and you can tell a product engineer why their proposal needs to change without shutting down the conversation
• Keen product sense and a bias toward measurable impact. You care whether the risk actually went down, not whether a ticket got closed
• Experience in fintech, real estate tech, or another regulated, high-liability domain preferred

NICE TO HAVE

• Background designing or operating anomaly-detection systems on production traffic, auth logs, or financial transactions
• Published research, CVEs, or conference talks in AppSec, offensive security, or AI security.
• Familiarity with the evolving landscape of AI-enabled offense (prompt injection, model abuse, agent exploitation) and defense

THE TECH STACK YOU'LL USE

• JavaScript / NodeJS / Typescript  / Meteor
• Microservice architecture / Kubernetes Operators
• AWS
• MongoDB
• Modern AppSec tooling: SAST/DAST/SCA and an expanding AI-assisted security automation layer that you'll help build

While this role is remote work eligible, we have three office locations: San Francisco, California; Concord, New Hampshire; and Austin, Texas.

This role has a base annual salary of $210,000-$240,000 plus a competitive equity and benefits package. (Salary to be determined by relevant experience, location, knowledge, and skills of the applicant, internal equity, and alignment with market data.)

WHY QUALIA

Qualia is made up of incredibly bright, mission-driven coworkers who are passionate about using technology to solve real-world problems---and we're growing quickly. In order to continue building an engaging and dynamic organization, we're committed to giving everyone the support they need to do great work.

Our benefits package is designed to allow our team members to be their best selves, both in and out of the workplace. In addition to comprehensive health plans, a 401k program, and commuter benefits, we prioritize family and personal well-being through professional development, parental leave, and a flexible time off policy. Qualia offers a robust online onboarding program to train new hires, biweekly all hands meetings, and a variety of internal virtual events to keep employees connected.

We believe diverse perspectives and backgrounds are critical to building great technology, and our goal is to cultivate an environment where people feel equally valued and respected. Qualia is proud to be an equal-opportunity workplace, and we welcome applicants from all backgrounds regardless of race, color, ancestry, religion, gender identity or expression, sexual orientation, marital status, age, citizenship, socioeconomic status, disability, or veteran status.

By submitting your application, you acknowledge and agree to the collection, processing, and use of your personal information as described in our Employee Data Privacy Notice.

#LI-Remote

Who you are:

We are always looking for amazing talent who can contribute to our growth and deliver results! Geotab is seeking a Senior Account Based Marketing Manager who will own and execute highly personalized, segment-focused account-based marketing strategies targeting Geotab's most strategic enterprise accounts. Supporting 1–2 assigned segments, this individual contributor role is accountable for driving net-new pipeline and accelerating deal progression through a coordinated mix of digital marketing, executive gifting, VIP experiences, and industry roadshows. If you love technology, and are keen to join an industry leader — we would love to hear from you!

What you'll do:

As a Senior Account Based Marketing Manager your key area of responsibility will be to serve as the primary marketing partner to segment Business Development Executives (BDEs), aligning marketing investment directly to account-level priorities, buying stages, and revenue goals. Success is measured by pipeline revenue sourced and influenced, account engagement, and program ROI within the assigned segments

How you'll make an impact:

• Own the 1:1 and 1:few ABM strategy for strategic accounts across 1–2 assigned segments, aligned to sales priorities and pipeline targets 

• Partner with sales teams to identify, tier, and map named accounts, including org structure, key decision-makers, and buying signals

• Build tailored account plans that connect marketing investment to deal stages, intent signals, and pipeline forecasts

• Run a regular ABM sync with assigned BDEs to pressure-test account plans, review engagement signals, and adjust program priorities

• Translate company and segment narratives into account-specific messaging and ABM plays

• Design and execute multi-channel digital ABM campaigns, including LinkedIn paid social, programmatic display, content syndication, and email, targeting named accounts and personas

• Leverage ABM platforms (e.g., 6sense) to orchestrate personalized account experiences, serve intent-based advertising, and measure account-level engagement

• Build account-specific landing pages and personalized content assets that address industry-specific pain points

• Use intent data and behavioral signals to prioritize accounts, optimize campaign timing, and trigger coordinated outreach with sales

• Apply AI tools to automate account research, generate personalized content variants, and scale 1:1 personalization across target accounts

• Execute strategic gifting programs tied to deal stages and account milestones to reinforce relationships and accelerate pipeline

• Plan and deliver VIP executive experiences, including executive dinners and hosted industry engagements, directly tied to deal advancement and account plans

• Develop and manage targeted roadshow programs that bring Geotab's value proposition to regional stakeholder clusters within strategic accounts

• Coordinate pre- and post-program follow-up sequences with sales, ensuring every experiential touchpoint maps to a deal milestone rather than existing as a standalone activity

• Serve as the primary marketing liaison to assigned Business Development Executives (BDEs), embedding into planning cadences and account reviews

• Build and maintain account-level marketing playbooks that guide outreach sequencing, content delivery, and program coordination

• Align marketing investment to pipeline priorities, forecast commitments, and account penetration goals

• Build credibility with BDEs and sales leaders through data, account insights, and a clear POV on marketing's role in each deal

• Track pipeline sourced and influenced, account engagement, and program ROI for assigned segments on a regular reporting cadence

• Manage ABM budget across channels and programs for assigned segments

What you'll bring to the role:

Why job seekers choose Geotab:

What We Need

We’re looking for a driven Commercial Account Executive focused on new business acquisition—someone who thrives in a true hunter role and knows how to build pipeline from scratch, land new logos, and consistently exceed quota. This role requires a proactive, high-activity seller who can manage the full sales cycle, generate pipeline through outbound efforts and partners, and effectively engage senior IT stakeholders. This particular role requires candidates to be located in the Mountain or Pacific Time Zone. Ideal candidates bring a proven track record of creating new opportunities and closing net-new business.

What You'll Do

• Meet or exceed assigned new business sales quotas and pipeline generation targets.
• Identify, prospect, and develop new customer opportunities within an assigned territory or market segment.
• Execute a territory strategy that prioritizes high-value prospects and drives consistent pipeline development.
• Leverage partners to maximize penetration and scale within your target market.
• Manage the full sales cycle from prospecting through negotiation and deal closure.
• Maintain ownership of newly acquired customers during the first year, ensuring strong adoption and customer satisfaction.
• Collaborate with Sales Engineers, Business Development Representatives, and partner organizations to advance opportunities and deliver effective solutions.
• Develop compelling commercial and technical proposals aligned with customer business needs.
• Maintain accurate pipeline management, forecasting, and activity tracking in Salesforce.
• Develop an understanding of customer priorities, including CIO and IT leadership initiatives such as digital transformation.
• Coordinate the successful transition of accounts to the Named Accounts team after the first year.

What You Bring

• Bachelor’s degree in Business, Marketing, Communications, or related field (or equivalent experience)
• 4+ years of experience in account management, sales, customer success, or a related client-facing role
• Proven track record of meeting or exceeding revenue, retention, or expansion targets
• Experience managing a portfolio of customer accounts in a B2B environment
• Familiarity with CRM tools such as Salesforce or similar systems
• Demonstrated ability to identify and close upsell and cross-sell opportunities
• Experience developing and executing account growth strategies or account plans
• Strong stakeholder management skills, including experience working with senior decision-makers
• Ability to build trust and maintain long-term customer relationships
• Willingness to travel within your territory as required.
• Manual Dexterity: Repetitive motion of wrists, hands and fingers for using a computer.
• Stationary Tasks: Sitting for extended periods, remaining in a stationary position.

What We Offer

Our comprehensive compensation package is vital in how we recognize our people for the impact they make on us reaching our goals as a company.

For this role, the estimated OTE is $140,000 – $160,000 on a 50/50 base/variable split. The actual salary may vary based on a range of factors, including market and individual qualifications objectively assessed during the interview process.

The range listed above is a guideline and may be modified. People Experience offers a comprehensive benefits package in addition to cash compensation that includes but is not limited to 401k and medical/dental coverage. Speak with your Recruiter for more details on our Total Rewards philosophy.

ABOUT THE TEAM

We're seeking a senior systems security engineer to will drive security engineering principles into design and integration with other systems internal and external to Anduril to ultimately secure our suite of advanced technologies including artificial intelligence systems, command and control platforms, aerospace vehicles, and long range sensors.

The ideal candidate has a background in systems of systems, systems, electrical and/or software engineering with deep expertise in embedded systems security. They will perform in-depth security architecture assessments, identify and mitigate vulnerabilities and exploits, and work cross-functionally to bake security into Anduril products.

ABOUT THE JOB

WHAT YOU’LL DO

• This is not an ISSO or ISSM role.
• Own security end-to-end for assigned products—derive and decompose security requirements from customer needs and threat intelligence, design security architectures, and manage security through the full product lifecycle
• Implement security features and capabilities, develop and execute comprehensive security test strategies at multiple integration levels, and support major milestone deliveries (SRR, PDR, CDR, TRR, PRR)
• Brief security architectures and approaches to government customers and program leadership, translating complex security concepts for diverse audiences
• Collaborates and builds solutions with engineering teams to meet and exceed industry-standard security goals
• Collaborate with security assessment teams to assess Anduril’s products and integrated components to uncover potential weaknesses
• Collaborate cross-functionally with engineering teams to translate architectural requirements into implementations, and coordinate with security teams on threat modeling, validation, and testing

REQUIRED QUALIFICATIONS

• 8+ years of experience and a Bachelor's degree or equivalent education/work experience.
• Evidence of leading a team to solve complex security engineering challenges.
• Able to evaluate trade spaces and offer optimal security solutions against program risks using advanced knowledge and sound judgement.
• Experience in one or more of the following fields: Systems Security Engineering, Cybersecurity, Systems Engineering, Electrical Engineering, Software Engineering, Computer Engineering, Computer Science.
• Familiarity with security-relevant features on embedded hardware / FPGAs (e.g., secure boot, key management, etc.)
• Previous work on security engineering and architecture for defense / national security systems and/or complex embedded commercial systems.
• Ability to effectively brief and interact regularly with highly technical government customers.
• Strong understanding of the “why” behind the product, systems, and security design.
• A sincere commitment to a positive, inclusive, and collaborative culture.
• Excellent verbal & written communication skills.
• Currently possesses and is able to maintain at least a final active US Secret security clearance with SAP eligibility.
• Must be able to obtain a Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Excels at the above listed Requirements
• Possesses and able to maintain a U.S. TS Security clearance with SCI and/or SAP eligibility
• Strong skills in one or more programming languages (e.g., Python, Rust, Go, C/C++).
• Experience assessing security of firmware, applications, network, IoT, or embedded systems
• Fluency in modern USG cyber methodologies, including Cyber Survivability guidance and related policy (JSIG, ICD 503, CSEIG, SSECG, NIST SP 800-160, Cyber T&E Guidebook, CMMC, etc.)
• Experience developing cyber documentation for USG customers
• Proven track record of excelling across the broader Systems Security Engineering domain, encompassing embedded Systems Engineering, Cybersecurity, Cyber Resiliency, Software Security
• Experience creating and integrating with system design documentation in MBSE tools
• Experience integrating with Software Assurance, Supply Chain Risk Management, Configuration Management, and System Test
• Experience executing the Anti-Tamper process and authoring associated documentation
• Experience with security testing on DoD systems (e.g. penetration testing, red teaming, vulnerability assessments)
• Experience working with unmanned aircraft Group 3 class and above
• Experience working with government or national security space systems

ABOUT THE TEAM

We're seeking a systems security engineer to will drive security engineering principles into design and integration with other systems internal and external to Anduril to ultimately secure our suite of advanced technologies including artificial intelligence systems, command and control platforms, aerospace vehicles, and long range sensors.

The ideal candidate has a background in systems of systems, systems, electrical and/or software engineering with deep expertise in embedded systems security. They will perform in-depth security architecture assessments, identify and mitigate vulnerabilities and exploits, and work cross-functionally to bake security into Anduril products.

ABOUT THE JOB

WHAT YOU’LL DO

• This is not an ISSO or ISSM role.
• Own security end-to-end for assigned products—derive and decompose security requirements from customer needs and threat intelligence, design security architectures, and manage security through the full product lifecycle
• Implement security features and capabilities, develop and execute comprehensive security test strategies at multiple integration levels, and support major milestone deliveries (SRR, PDR, CDR, TRR, PRR)
• Brief security architectures and approaches to government customers and program leadership, translating complex security concepts for diverse audiences
• Collaborates and builds solutions with engineering teams to meet and exceed industry-standard security goals
• Collaborate with security assessment teams to assess Anduril’s products and integrated components to uncover potential weaknesses
• Collaborate cross-functionally with engineering teams to translate architectural requirements into implementations, and coordinate with security teams on threat modeling, validation, and testing

REQUIRED QUALIFICATIONS

• Experience in one or more of the following fields: Systems Security Engineering, Cybersecurity, Systems Engineering, Electrical Engineering, Software Engineering, Computer Engineering, Computer Science
• Familiarity with security-relevant features on embedded hardware / FPGAs (e.g., secure boot, key management, etc.)
• Previous work on security engineering and architecture for defense / national security systems and/or complex embedded commercial systems
• Ability to effectively brief and interact regularly with highly technical government customers
• Strong understanding of the “why” behind the product, systems, and security design
• A sincere commitment to a positive, inclusive, and collaborative culture
• Excellent verbal & written communication skills
• Currently possesses and is able to maintain at least a final active US Secret security clearance with SAP eligibility
• Must be able to obtain a Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Excels at the above listed Requirements
• Possesses and able to maintain a U.S. TS Security clearance with SCI and/or SAP eligibility
• Strong skills in one or more programming languages (e.g., Python, Rust, Go, C/C++).
• Experience assessing security of firmware, applications, network, IoT, or embedded systems
• Fluency in modern USG cyber methodologies, including Cyber Survivability guidance and related policy (JSIG, ICD 503, CSEIG, SSECG, NIST SP 800-160, Cyber T&E Guidebook, CMMC, etc.)
• Experience developing cyber documentation for USG customers
• Proven track record of excelling across the broader Systems Security Engineering domain, encompassing embedded Systems Engineering, Cybersecurity, Cyber Resiliency, Software Security
• Experience creating and integrating with system design documentation in MBSE tools
• Experience integrating with Software Assurance, Supply Chain Risk Management, Configuration Management, and System Test
• Experience executing the Anti-Tamper process and authoring associated documentation
• Experience with security testing on DoD systems (e.g. penetration testing, red teaming, vulnerability assessments)
• Experience working with unmanned aircraft Group 3 class and above
• Experience working with government or national security space systems

ABOUT THE TEAM

We're seeking a staff systems security engineer to will drive security engineering principles into design and integration with other systems internal and external to Anduril to ultimately secure our suite of advanced technologies including artificial intelligence systems, command and control platforms, aerospace vehicles, and long range sensors.

The ideal candidate has a background in systems of systems, systems, electrical and/or software engineering with deep expertise in embedded systems security. They will perform in-depth security architecture assessments, identify and mitigate vulnerabilities and exploits, and work cross-functionally to bake security into Anduril products.

ABOUT THE JOB

WHAT YOU’LL DO

• This is not an ISSO or ISSM role.
• Own security end-to-end for assigned products—derive and decompose security requirements from customer needs and threat intelligence, design security architectures, and manage security through the full product lifecycle
• Implement security features and capabilities, develop and execute comprehensive security test strategies at multiple integration levels, and support major milestone deliveries (SRR, PDR, CDR, TRR, PRR)
• Brief security architectures and approaches to government customers and program leadership, translating complex security concepts for diverse audiences
• Collaborates and builds solutions with engineering teams to meet and exceed industry-standard security goals
• Collaborate with security assessment teams to assess Anduril’s products and integrated components to uncover potential weaknesses
• Collaborate cross-functionally with engineering teams to translate architectural requirements into implementations, and coordinate with security teams on threat modeling, validation, and testing

REQUIRED QUALIFICATIONS

• Typically 12+ years of experience and a Bachelors degree or equivalent education/work experience.
• Demonstrable ability to address complex, high-stakes security engineering challenges across multiple programs within a major area of business.
• Evidence of recognized expertise contributing to risk resolution on cross-functional initiatives.
• Experience in one or more of the following fields: Systems Security Engineering, Cybersecurity, Systems Engineering, Electrical Engineering, Software Engineering, Computer Engineering, Computer Science.
• Familiarity with security-relevant features on embedded hardware / FPGAs (e.g., secure boot, key management, etc.)
• Previous work on security engineering and architecture for defense / national security systems and/or complex embedded commercial systems.
• Ability to effectively brief and interact regularly with highly technical government customers.
• Strong understanding of the “why” behind the product, systems, and security design.
• A sincere commitment to a positive, inclusive, and collaborative culture.
• Excellent verbal & written communication skills.
• Currently possesses and is able to maintain at least a final active US Secret security clearance with SAP eligibility.
• Must be able to obtain a Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Excels at the above listed Requirements.
• Possesses and able to maintain a U.S. TS Security clearance with SCI and/or SAP eligibility.
• Strong skills in one or more programming languages (e.g., Python, Rust, Go, C/C++).
• Experience assessing security of firmware, applications, network, IoT, or embedded systems.
• Fluency in modern USG cyber methodologies, including Cyber Survivability guidance and related policy (JSIG, ICD 503, CSEIG, SSECG, NIST SP 800-160, Cyber T&E Guidebook, CMMC, etc.)
• Experience developing cyber documentation for USG customers.
• Proven track record of excelling across the broader Systems Security Engineering domain, encompassing embedded Systems Engineering, Cybersecurity, Cyber Resiliency, Software Security.
• Experience creating and integrating with system design documentation in MBSE tools.
• Experience integrating with Software Assurance, Supply Chain Risk Management, Configuration Management, and System Test.
• Experience executing the Anti-Tamper process and authoring associated documentation.
• Experience with security testing on DoD systems (e.g. penetration testing, red teaming, vulnerability assessments)
• Experience working with unmanned aircraft Group 3 class and above.
• Experience working with government or national security space systems.

What you'll do

As our first Product Security Engineer, you will sit at the intersection of Security and Software Engineering. You will be a "Security Builder": embedded within our engineering teams with the autonomy needed to build the automation, tools, and workflows that make security a seamless part of the software development lifecycle.

You aren't just finding bugs; you are building the systems that prevent and fix them at scale. Your work will be centered on three core strategic pillars:

• Secure architecture and auth: you will design and implement auth enhancements such as magic link improvements and access/audit log features to monitor access and improve transparency.
• Privacy engineering: you will lead the privacy engineering initiatives including DSAR integration, building automated data deletion capabilities directly into the Pomelo mobile app and our internal platform to ensure seamless compliance. You will also help improve privacy-preserving data de-identification and anonymization as needed.
• Full-cycle remediation: you will own the end-to-end pentest-to-fix lifecycle. This means you don't just triage reports; you write the code to fix penetration test findings, remediate SAST issues, and build greenkeeping systems for high-volume dependency patching with regression testing.

Beyond these pillars, you will serve as a high-leverage engineering partner to the broader InfoSec team by:

• Building secure-by-default libraries: reducing the load on core Software Engineering by creating internal libraries and patterns that make security the default path.
• Threat modeling: partnering with engineering leads to conduct threat modeling and ensure secure design at the earliest stages of the development process.
• Scaling through collaboration: as a security resource embedded in our engineering teams, you will help engineering squads navigate complex security use cases, translating GRC requirements into elegant code rather than manual checklists.

Who you are

You’re an enthusiastic and collaborative engineer who enjoys solving meaningful problems through code. You view security as a product challenge, and you believe the best way to secure a system is to make the "secure way" the "easy way." In particular, you:

• Are a builder first: Have 5+ years of software engineering experience with a strong foundation in computer science and a track record of shipping production-grade code (Python, Go, Kotlin or similar).
• Have a security mindset: You understand the OWASP Top 10, identity flows and prompt injections, but you’d rather build a system that eliminates a class of vulnerability than manually triage individual alerts. You believe security expertise should be embedded into the development process, not bolted on at the end.
• Are an automation enthusiast: you enjoy tackling complex problems with practical automation and are keeping up with trends in LLM agents to multiply your engineering impact.
• Navigate ambiguity: as a floating resource across various engineering teams, you are comfortable context-switching and can quickly build rapport with different engineering teams to understand their needs.
• Prior experience in healthcare data: including understanding of HIPAA, SOC 2 Type 2 and HITRUST compliance requirements.

We’ll be super excited if you

• Have experience with Google Cloud Platform (GCP), Github Advanced Security (GHAS), Stytch, Sentry, Fullstory, Statsig or similar technology stack.
• Have experience building data infrastructure that supports AI/ML workloads,internal developer platforms and privacy preserving data de-identification and anonymization techniques.
• Have previously worked in a fast-paced, product-oriented startup environment.

Why you should join our team

By joining Pomelo, you will get in on the ground floor of a fast-moving, well-funded, and mission-driven startup that always puts the patient first. You will learn, grow and be challenged -- and have fun with your team while doing it.

We strive to create an environment where employees from all backgrounds are respected. We also offer:

• Competitive healthcare benefits
• Generous equity compensation
• Unlimited vacation
• Membership in the First Round Network (a curated and confidential community with events, guides, thousands of Q&A questions, and opportunities for 1-1 mentorship)

At Pomelo, we are committed to hiring the best team to improve outcomes for all mothers and babies, regardless of their background. We need diverse perspectives to reflect the diversity of problems we face and the population we serve. We look to hire people from a variety of backgrounds, including but not limited to race, age, sexual orientation, gender identity and expression, national origin, religion, disability, and veteran status.

At Asana, security is foundational to our mission of helping humanity thrive by enabling the world’s teams to work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations.

We’re looking for a security engineer to join our Security Red Team in Warsaw. You’ll be a foundational member of the security presence in a key engineering hub, partnering directly with IT, infrastructure, and product teams to ensure we design and ship secure software. You will be instrumental in scaling our security practices by performing security reviews and penetration testing assessments of our products and internal applications, eliminating entire classes of vulnerabilities, and championing a security-first mindset.

This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday.

We offer a Contract of Employment (UoP) for our employees in Poland

What you’ll achieve:

• Conduct security architecture reviews, threat modeling, and penetration testing for new features and services across our product and internal applications.
• Test software for application security vulnerabilities through various assessment methodologies, including penetration testing.
• Triage, investigate, and drive remediation of vulnerabilities from our bug bounty program, internal penetration tests, and automated security tooling.
• Influence engineering initiatives by conducting design and roadmap reviews, effectively communicating security constraints, and assisting teams in making informed trade-offs.
• Investigate product security incidents as an incident subject matter expert, using logs and monitoring tools.
• Develop and deliver training to educate engineers on secure coding best practices and emerging threats.
• Stay informed of industry trends, emerging threats, and best practices to ensure that Asana’s security posture remains robust.
• Collaborate with teammates and stakeholders to develop both short-term and long-term strategies for risk management.
• Join a collaborative Security team composed of specialists in product, application, software engineering, infrastructure and detection and response, all working together to help engineering teams design and ship secure software.

About you:

• 5+ years of experience in application security, product security, penetration assessments, or software engineering with a security focus, with significant experience in security reviews and penetration testing.
• Strong software engineering background with experience in languages like Python, Javascript/Typescript or Scala
• Deep working knowledge of the OWASP Top 10 and common web application vulnerabilities such as XSS, CSRF, SSRF, and SQL injection
• Experience with security tools for static/dynamic analysis (SAST/DAST), software composition analysis (SCA), and vulnerability management.
• Proven experience performing security design reviews and threat modeling for complex applications, as well as conducting comprehensive penetration tests.
• Excelling communication skills for collaborating effectively with both technical and non-technical partners.
• A pragmatic and collaborative mindset, with a passion for building defenses against real-world attacks and enabling other engineers to do their best, most secure work.

What we offer:

• Generous, transparent and fair compensation system (base salary and generous Restricted Stock Unit for Asana Inc.) 
• Contract of Employment (with 50% tax deductible costs for author’s rights usage for Engineers) 
• Health insurance with dental and travel coverage (Lux Med) 
• Lunch catering on the days that you work from the office
• Career growth budget 
• Home office setup budget 
• Gym/Fitness reimbursement
• Fertility healthcare and family-forming support with Carrot
• Mental health support in Modern Health
• Group life insurance
• MacBooks with all necessary accessories

For this role, the estimated base salary range is between 25,604  - 35,854 PLN gross monthly on the contract of employment (UoP). The actual base salary will vary based on various factors and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base compensation range for this role may be modified.

Our total compensation consists of base salary and equity (RSUs). 

#appsec #securityengineer #LI-Hybrid

About VulnCheck

VulnCheck is transforming vulnerability intelligence by helping security teams act faster and with more confidence. Our platform delivers early, high-quality exploit intelligence, deep asset correlation, and contextual insights to help organizations stay ahead of emerging threats.

About the Role

VulnCheck is looking for a Red Team Systems Administrator / Lab Manager to build, maintain, and operate the lab infrastructure that supports our vulnerability research team. This role is responsible for standing up and managing a research environment that includes networking equipment, IoT / OT devices, and the supporting compute, storage, and network infrastructure our researchers depend on to discover, analyze, and validate vulnerabilities.

You'll work closely with our exploit developers and threat researchers to ensure they have reliable, secure, and reproducible environments for testing against real-world hardware and software. The lab is central to VulnCheck's mission — our researchers need to move fast, and the infrastructure has to keep up. While this is a hybrid role, the position requires regular onsite management of physical lab equipment in the Fort Meade, MD area. 

What You'll Do

• Design, build, and maintain the physical and virtual lab infrastructure used by VulnCheck's vulnerability research team.
• Procure, configure, and manage networking equipment (routers, switches, firewalls, wireless access points) and IoT / OT devices used for security research and exploit validation.
• Manage lab network architecture — including segmentation, VLANs, out-of-band management, and isolated test environments to safely run exploit code against live devices.
• Administer Linux and Windows servers, hypervisors, and virtualization platforms (e.g., VMware, Proxmox, KVM) that host vulnerable software and services for testing.
• Maintain firmware libraries and device inventories, ensuring researchers have access to specific hardware and software versions needed for vulnerability analysis.
• Provide remote access infrastructure (VPN, jump hosts, remote console access) so distributed team members can interact with physical lab equipment.
• Automate environment provisioning, configuration management, and lab reset workflows using tools such as Ansible, Terraform, or similar.
• Monitor lab systems for availability, performance, and security — and respond to issues promptly.
• Collaborate with researchers to understand upcoming research targets and proactively prepare the lab environments they need.
• Manage vendor relationships for hardware procurement, warranties, and RMA processes.
• Document lab architecture, procedures, and runbooks to ensure operational continuity.

What You'll Bring

• 8+ years of experience in systems administration, lab operations, or infrastructure engineering.
• Strong hands-on experience with Linux system administration (Ubuntu, CentOS/RHEL, or similar).
• Solid networking fundamentals — TCP/IP, DNS, DHCP, VLANs, firewall configuration, and routing.
• Experience managing and configuring networking equipment (Cisco, Juniper, MikroTik, etc).
• Familiarity with IoT devices and embedded systems — comfortable working with serial consoles, JTAG, firmware flashing, and device provisioning.
• Familiarity with OT/ICS devices and protocols is a huge plus.
• Experience with virtualization and containerization technologies (VMware, Proxmox, KVM, Docker).
• Experience with configuration management and infrastructure-as-code tools (Ansible, Terraform, or similar).
• Ability to work independently and manage priorities across multiple concurrent research efforts.
• Strong documentation habits and clear written communication.
• Scripting skills in Python, Bash, or Go for automating lab workflows; familiarity with Go is a plus. 

Preferred Qualifications

• Experience using Claude or other AI models for task automation. 
• Prior experience supporting a security research, penetration testing, or red team lab environment.
• Prior cybersecurity work experience (at a vendor or in government).
• Experience managing physical lab infrastructure remotely, including out-of-band management (IPMI/iLO/iDRAC), remote PDUs, and KVM-over-IP.

*IMPORTANT NOTE: This position may involve access to technology subject to U.S. export control regulations. Employment is contingent upon the company's ability to authorize access under applicable export control, sanctions, and any other applicable legal or contractual requirements. The company does not guarantee and is under no obligation to seek such authorization if it would be necessary.

What We Offer

We believe people do their best work when they feel supported, trusted, and valued. VulnCheck offers benefits designed to meet a wide range of needs and lifestyles.

Benefits and Perks

• Competitive salary with employee equity program
• Health, dental, and vision coverage
• Unlimited PTO
• 401(k) plan
• Remote friendly environment with flexibility
• Expense reimbursement for home internet and phone
• Ongoing professional development, coaching, and learning resources
• Opportunities for career advancement within a fast-growing team

Why Join Us

Built on over two decades of cybersecurity experience, our team of experts understands the intricacies of vulnerabilities, their exploitation in the wild, and how to leverage this data to build more effective cybersecurity products that produce better outcomes for organizations.

VulnCheck gives organizations a tactical advantage by providing best-in-class exploit & vulnerability intelligence information. We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We were founded in 2021 in Lexington, Massachusetts.

VulnCheck has a transparent, collaborative, and supportive culture — we are looking for people who have a growth mindset, are curious and innovative. Our team is smart, but humble, hardworking, and supportive.

VulnCheck is proud to be an Equal Opportunity Employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. VulnCheck is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.

It’s not just about the compliance; it’s about the mission!

At Career TEAM, we work to accelerate the human condition. Our award-winning portal, Career EDGE, transforms lives across the U.S.—and behind every secure experience is a cybersecurity expert like you.

We are looking for a Senior Information Security Engineer with deep experience in StateRAMP, FedRAMP, and/or TX-RAMP to take charge of our compliance efforts and champion a culture of security from code to cloud. You'll be the linchpin in our security architecture, helping to ensure Career EDGE meets the most rigorous standards for protecting government data—while working with a purpose-driven team that values innovation and impact.

Why Join Us?

By joining this incredible company, you will be:

• A founding security leader shaping how we build trust into every layer of our product.

• Play a major role in our NIST 800-53 compliance programs and our efforts to obtain and maintain a GovRAMP verified status.

• Working on a product that directly helps thousands of individuals access workforce and educational services.

• Driving continuous improvement of security controls, policies, and architecture across cloud infrastructure.

• Mentoring engineers and advising product teams on secure-by-design principles.

• Enjoy a fully remote work environment.

Your Impact on Career TEAM’s Success:

As a Senior Information Security Engineer, your focus will be both strategic and hands-on:

Security Compliance Leadership

• Lead the end-to-end process of StateRAMP readiness, gap remediation, and authorization.

• Provide guidance and oversight for FedRAMP Moderate and TX-RAMP certification efforts.

• Manage communication with third-party assessment organizations (3PAOs) and security consultants.

• Maintain the System Security Plan (SSP), POA&M, and related documentation.

Architecture & Technical Oversight

• Design and maintain secure cloud infrastructure (primarily AWS), aligned with NIST 800-53 controls.

• Implement technical safeguards for identity & access management, vulnerability management, and incident response.

• Support DevOps teams in security automation and secure CI/CD pipelines.

• Conduct risk assessments and penetration test planning and review.

Team Enablement & Policy

• Collaborate with executive leadership on security strategy.

• Develop training materials to raise internal security awareness.

• Ensure alignment between security policies and engineering practices.

What We’re Looking For:

• Located in the Philippines with night shift work hours (to overlap with U.S. team).

• Proven experience leading or significantly contributing to StateRAMP, FedRAMP, and TX-RAMP compliance efforts.

• Expertise in NIST 800-53, FIPS 199/200, and continuous monitoring frameworks.

• Hands-on experience with AWS security services (IAM, GuardDuty, CloudTrail, Security Hub, etc.).

• Strong understanding of SOC2, GovRAMP, DevSecOps practices, and cloud infrastructure.

• Exceptional written and spoken English skills.

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; relevant certifications (e.g., CISSP, CCSP, AWS Security Specialty) are a strong plus.

• Bonus: Experience with audit response, SIEM tools, or zero trust architecture.

Ready to lead security for a platform that changes lives?
Apply today and help us build trust into every login, every connection, and every breakthrough.

It’s not just about the compliance; it’s about the mission!

At Career TEAM, we work to accelerate the human condition. Our award-winning portal, Career EDGE, transforms lives across the U.S.—and behind every secure experience is a cybersecurity expert like you.

We are looking for a Cloud Security Architect with deep experience in GovRAMP, FedRAMP, and/or TX-RAMP to take charge of our compliance efforts and champion a culture of security from code to cloud. You'll be the linchpin in our security architecture, helping to ensure Career EDGE meets the most rigorous standards for protecting government data—while working with a purpose-driven team that values innovation and impact.

Why Join Us?

By joining this incredible company, you will be:

• A security leader shaping how we build trust into every layer of our product.

• Play a major role in our NIST 800-53 compliance programs and our efforts to obtain and maintain a GovRAMP verified status.

• Working on a product that directly helps thousands of individuals access workforce and educational services.

• Driving continuous improvement of security controls, policies, and architecture across cloud infrastructure.

• Mentoring engineers and advising product teams on secure-by-design principles.

• Enjoy a fully remote work environment.

Your Impact on Career TEAM’s Success:

As a Cloud Security Architect, your focus will be both strategic and hands-on:

Security Compliance Leadership

• Lead the end-to-end process of GovRAMP readiness, gap remediation, and authorization.

• Provide guidance and oversight for FedRAMP Moderate and TX-RAMP certification efforts.

• Manage communication with third-party assessment organizations (3PAOs) and security consultants.

• Maintain the System Security Plan (SSP), POA&M, and related documentation.

Architecture & Technical Oversight

• Design and maintain secure cloud infrastructure (primarily AWS), aligned with NIST 800-53 controls.

• Implement technical safeguards for identity & access management, vulnerability management, and incident response.

• Support DevOps teams in security automation and secure CI/CD pipelines.

• Conduct risk assessments and penetration test planning and review.

Team Enablement & Policy

• Collaborate with executive leadership on security strategy.

• Develop training materials to raise internal security awareness.

• Ensure alignment between security policies and engineering practices.

What We’re Looking For:

• Located in the Philippines with night shift work hours (to overlap with U.S. team).

• Proven experience leading or significantly contributing to GovRAMP, FedRAMP, and TX-RAMP compliance efforts.

• Expertise in NIST 800-53, FIPS 199/200, and continuous monitoring frameworks.

• Hands-on experience with AWS security services (IAM, GuardDuty, CloudTrail, Security Hub, etc.).

• Strong understanding of SOC2, GovRAMP, DevSecOps practices, and cloud infrastructure.

• Experience with audit responses

• Exceptional written and spoken English skills.

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; relevant certifications (e.g., CISSP, CCSP, AWS Security Specialty) are a strong plus.

• Bonus: SIEM tools or zero trust architecture.

Ready to lead security for a platform that changes lives?
Apply today and help us build trust into every login, every connection, and every breakthrough.

About Prezzee

Prezzee is a global leader in digital gifting and payments, having sold over 140 million gift cards through partnerships with more than 1,500 brands and serving over 6 million customers worldwide. Our mission is to change lives through the power of giving—leveraging borderless payment technology and innovative digital solutions to help people connect and create memorable moments that truly matter.

As our Head of Security, you’ll play a critical role in protecting the trust our customers, partners, and teams place in us every day. Reporting to the CTO and as a member of the IT Leadership Team, you’ll lead the evolution of Prezzee’s security, privacy, and compliance maturity -  embedding security-first thinking across the organisation while delivering practical, commercial outcomes that enable growth.

This role blends strategic leadership with hands-on impact, spanning policy and governance, technology uplift, and day-to-day security operations. Your work will directly support Prezzee’s growth ambitions and position us as a market leader in information security and privacy.

What You’ll Do

Lead Our Security Strategy

• Own and deliver a clear, ongoing security roadmap aligned to Prezzee’s risk appetite, business priorities, and growth plans.
  
  
• Continuously uplift our administrative, technical, and procedural security posture across the business.
  
  
• Stay ahead of emerging threats and evolving standards, ensuring Prezzee remains proactive rather than reactive.

Build a Security-First Culture

• Act as the Security Champion across all teams and locations, embedding security awareness into how we work every day.
  
  
• Partner closely with engineering, product, IT, and the wider business to ensure security is at the forefront of design.
  
  
• Manage and mentor a small, high-performing security team, driving engagement and alignment with Prezzee’s purpose.

Governance, Risk & Compliance

• Maintain and expand compliance with frameworks and certifications including PCI, ISO:27001, Cyber Essentials+, ISO:42001 and others as required.
  
  
• Chair and manage the ISMS Committee, ensuring stakeholders have clear visibility of risks, controls, and progress.
  
  
• Lead third-party and vendor security due diligence across tools, partners, and workplace technology.

Operational Security & Incident Management

• Oversee vulnerability management, penetration testing outcomes, and remediation within agreed SLAs.
  
  
• Coordinate security incident prevention, detection, and response across internal teams, MSPs, and partners.
  
  
• Create, maintain, and regularly test cyber security response plans and supporting playbooks.

Tools, Technology & AI Governance

• Select, implement, and manage core security tools including WAF, bot detection, PAM, code scanning, and compliance platforms.
  
  
• Establish and manage an AI security governance model that safely supports workplace enablement and customer experience innovation.
  
  
• Ensure AWS environments and system architectures align with security best practices.

Partner with the Business

• Support Sales and GTM teams with customer security questionnaires, audits, and front-line security engagement.
  
  
• Balance strong security outcomes with a pragmatic, commercial mindset that enables business velocity.
  
  

What You’ll Bring

• A degree in Computer Science, Software Engineering, or a related discipline.
  
  
• 5+ years’ experience in a senior cyber security role, ideally within a systems development or technology-led environment.
  
  
• Strong understanding of AWS technologies and modern cloud architecture models.
  
  
• Proven experience delivering strategic security programs, including policy development, risk management, BCP/DR testing, third-party risk, and end-user device security.
  
  
• Hands-on experience triaging, investigating, and resolving security and operational incidents within SLAs.
  
  
• Deep knowledge of modern cyber security principles, threat landscapes, threat intelligence, and remediation techniques.
  
  
• Experience coordinating outcomes across internal teams, external vendors, auditors, and security partners.
  
  
• A collaborative, business-minded approach with the confidence to influence at leadership level.

Why Join Prezzee?
You’ll play a key role in shaping the future of digital gifting at a global scale — working with talented people, modern technology, and a culture that genuinely values openness, excellence, and impact.
At Prezzee, Where We Don’t Just Work – We Innovate, Collaborate, And Shape The Future Of Digital Giving. As Part Of Our Dynamic Team, You’ll Contribute To a Global Company’s Growth While Enjoying a Flexible, Supportive, And Inclusive Work Environment. We Offer

Prezzeeversary Leave – Extra day of annual leave for each year you’re with us.
BirthYay Leave – Celebrate you with a paid day off during your birthday month.
Novated Car Leasing – A tax-smart way to bundle and pay for your car and running costs.
ClassPass Membership – Fully covered monthly credits for fitness, wellness, and beauty.
Office Allowance – One-time payment to upgrade your office setup.
Flexible Work Perks – Flex your hours, take Culture Swap Days, and work from anywhere for 30 days a year.
Prezzee Staff Discounts – Exclusive deals on Prezzee gift cards – just for being part of the team.
Wellbeing Support – Access to mental, social, financial, and physical wellbeing support via Telus.
Learning & Development – Grow your career with LinkedIn Learning, job shadowing, industry programs, and our Lunch & Learn sessions.
Employee Resource Groups – Be an advocate or ally and foster belonging through groups like EmpowHer and Pride.
Parental Leave – 12 weeks for primary carers and 4 weeks for secondary carers.

Prezzee has been recognised for the third consecutive year as a Computerworld Best Places to Work in IT, and as a Great Place to Work® 2026 across all of our three  regions. We value diversity, collaboration, and innovation in everything we do. Join a global team united by the core values: Give openness, Give greatness, Give magic. Give a damn &  Give Ingenuity.

Prezzee is an Equal Opportunity employer. We believe that diversity is the key to building the best products for our customers, team culture and growing our global business. Our diversity mission is for our people to be their most authentic selves, to inspire, innovate and celebrate within a culture of belonging. We do not discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status.

We are looking for people to help create human connections, make magic and shape the future of gifting so even if you don’t think you quite meet all of the skills listed or tick all the boxes, we’d still love to hear from you! Please let us know if you require any adjustments as part of the application and recruitment process, We also encourage you to let us know of your pronouns at any point of the process.

About Prezzee

Prezzee is a global leader in digital gifting and payments, having sold over 140 million gift cards through partnerships with more than 1,500 brands and serving over 6 million customers worldwide. Our mission is to change lives through the power of giving — leveraging borderless payment technology and innovative digital solutions to help people connect and create memorable moments that truly matter.

As our Head of Security, you’ll play a critical role in protecting the trust our customers, partners, and teams place in us every day. Reporting to the CTO and as a member of the IT Leadership Team, you’ll lead the evolution of Prezzee’s security, privacy, and compliance maturity -  embedding security-first thinking across the organisation while delivering practical, commercial outcomes that enable growth.

This role blends strategic leadership with hands-on impact, spanning policy and governance, technology uplift, and day-to-day security operations. Your work will directly support Prezzee’s growth ambitions and position us as a market leader in information security and privacy.

What You’ll Do

Lead Our Security Strategy

• Own and deliver a clear, ongoing security roadmap aligned to Prezzee’s risk appetite, business priorities, and growth plans.
  
  
• Continuously uplift our administrative, technical, and procedural security posture across the business.
  
  
• Stay ahead of emerging threats and evolving standards, ensuring Prezzee remains proactive rather than reactive.

Build a Security-First Culture

• Act as the Security Champion across all teams and locations, embedding security awareness into how we work every day.
  
  
• Partner closely with engineering, product, IT, and the wider business to ensure security is at the forefront of design.
  
  
• Manage and mentor a small, high-performing security team, driving engagement and alignment with Prezzee’s purpose.

Governance, Risk & Compliance

• Maintain and expand compliance with frameworks and certifications including PCI, ISO:27001, Cyber Essentials+, ISO:42001 and others as required.
  
  
• Chair and manage the ISMS Committee, ensuring stakeholders have clear visibility of risks, controls, and progress.
  
  
• Lead third-party and vendor security due diligence across tools, partners, and workplace technology.

Operational Security & Incident Management

• Oversee vulnerability management, penetration testing outcomes, and remediation within agreed SLAs.
  
  
• Coordinate security incident prevention, detection, and response across internal teams, MSPs, and partners.
  
  
• Create, maintain, and regularly test cyber security response plans and supporting playbooks.

Tools, Technology & AI Governance

• Select, implement, and manage core security tools including WAF, bot detection, PAM, code scanning, and compliance platforms.
  
  
• Establish and manage an AI security governance model that safely supports workplace enablement and customer experience innovation.
  
  
• Ensure AWS environments and system architectures align with security best practices.

Partner with the Business

• Support Sales and GTM teams with customer security questionnaires, audits, and front-line security engagement.
  
  
• Balance strong security outcomes with a pragmatic, commercial mindset that enables business velocity.
  
  

What You’ll Bring

• A degree in Computer Science, Software Engineering, or a related discipline.
  
  
• 5+ years’ experience in a senior cyber security role, ideally within a systems development or technology-led environment.
  
  
• Strong understanding of AWS technologies and modern cloud architecture models.
  
  
• Proven experience delivering strategic security programs, including policy development, risk management, BCP/DR testing, third-party risk, and end-user device security.
  
  
• Hands-on experience triaging, investigating, and resolving security and operational incidents within SLAs.
  
  
• Deep knowledge of modern cyber security principles, threat landscapes, threat intelligence, and remediation techniques.
  
  
• Experience coordinating outcomes across internal teams, external vendors, auditors, and security partners.
  
  
• A collaborative, business-minded approach with the confidence to influence at leadership level.

Why Join Prezzee?
You’ll play a key role in shaping the future of digital gifting at a global scale — working with talented people, modern technology, and a culture that genuinely values openness, excellence, and impact.
At Prezzee, Where We Don’t Just Work – We Innovate, Collaborate, And Shape The Future Of Digital Giving. As Part Of Our Dynamic Team, You’ll Contribute To a Global Company’s Growth While Enjoying a Flexible, Supportive, And Inclusive Work Environment. We Offer

Prezzeeversary Leave – Extra day of annual leave for each year you’re with us.
BirthYay Leave – Celebrate you with a paid day off during your birthday month.
Novated Car Leasing – A tax-smart way to bundle and pay for your car and running costs.
ClassPass Membership – Fully covered monthly credits for fitness, wellness, and beauty.
Office Allowance – One-time payment to upgrade your office setup.
Flexible Work Perks – Flex your hours, take Culture Swap Days, and work from anywhere for 30 days a year.
Prezzee Staff Discounts – Exclusive deals on Prezzee gift cards – just for being part of the team.
Wellbeing Support – Access to mental, social, financial, and physical wellbeing support via Telus.
Learning & Development – Grow your career with LinkedIn Learning, job shadowing, industry programs, and our Lunch & Learn sessions.
Employee Resource Groups – Be an advocate or ally and foster belonging through groups like EmpowHer and Pride.
Parental Leave – 12 weeks for primary carers and 4 weeks for secondary carers.

Prezzee has been recognised for the third consecutive year as a Computerworld Best Places to Work in IT, and as a Great Place to Work® 2026 across all of our three  regions. We value diversity, collaboration, and innovation in everything we do. Join a global team united by the core values: Give openness, Give greatness, Give magic. Give a damn &  Give Ingenuity.

Prezzee is an Equal Opportunity employer. We believe that diversity is the key to building the best products for our customers, team culture and growing our global business. Our diversity mission is for our people to be their most authentic selves, to inspire, innovate and celebrate within a culture of belonging. We do not discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status.

We are looking for people to help create human connections, make magic and shape the future of gifting so even if you don’t think you quite meet all of the skills listed or tick all the boxes, we’d still love to hear from you! Please let us know if you require any adjustments as part of the application and recruitment process, We also encourage you to let us know of your pronouns at any point of the process.