Create an Account
Create an account for powerful AI tools, award-winning courses, and access to our vibrant community.
or
Already have an account?
Create an account for powerful AI tools, award-winning courses, and access to our vibrant community.
Already have an account?
Join 250,000+ professionals and teams at Microsoft, Shopify, and even NASA. 🚀
Already have an account? Login
Find the best remote jobs. Answer a few questions and we'll deploy a powerful assistant to help you search, create alerts, and more.
1 What roles are you open to?
2 Experience level
3 Work style
Did you know? If memory is enabled, Writing.io can remember your job search preferences and help you to improve your resume, craft customized outreach and more.
Category
Leads threat intelligence operations for blockchain hacks, coordinating incident response, analysis, and customer communications while building AI-powered detection systems.
Headquarters: United States
URL: https://www.trmlabs.com/
When a protocol is drained, or an exchange is compromised, our customers need to know within minutes or hours which addresses to block and where the funds are going. You will own TRM's answer to that, end-to-end.
As a Senior / Staff Threat Intelligence Analyst, you will lead TRM's hacks category: the metrics, the system that hits them, and the small contractor team that keeps it running around the clock. We align on the outcome; the approach is yours.
Take command when a big hack breaks and act as a leader. Run the response: triage, coordination across teams, internal and customer communications, and the incident report afterwards.
Get every major hack into TRM fast. Make sure every major hack is visible to customers within hours of the first credible public report, around the clock.
Keep TRM's hack data complete and accurate. Every hack, at any size, is recorded with its entity, theft addresses, date, amount, and hack type.
Follow the money at scale. Design the system, with our Data Science and engineering teams, that carries hack-specific attribution downstream as stolen funds move.
Build the machine with AI. Leverage AI to build the tools and agents to automate key parts of hacks analysis and response, while ensuring human quality control over every output.
Explain how it happened. Root-cause the most important hacks and publish best-in-industry technical analysis that makes TRM the first source cited.
See the next one coming. Build approaches that spot vulnerable contracts before they are exploited, and get them into our product.
5+ years of professional experience in blockchain intelligence, crypto investigations, cyber threat intelligence, incident response, or a closely related field.
Has owned incident response in a high-stakes environment (exchange, security firm, incident response, or CTI team): war rooms, incident reports, communications under pressure.
Strong blockchain tracing across major chains (BTC, EVM, TRON, Solana), including bridges, cross-chain swaps, and mixers.
Understands how DeFi, bridge, and exchange exploits work, and how attackers behave after the theft.
Applied AI fluency. We expect you to already be building AI-assisted or agentic workflows in your daily analytical work, to be able to show how you validate their outputs and where they fail, and to treat AI as a force multiplier.
Experience managing contractors or leading a small team.
Writes and briefs clearly, from technical deep-dives to executive summaries.
Hands-on and highly accountable: does the hardest work, not only coordinates it.
Smart-contract reverse-engineering (Solidity).
Experience at a security auditor or blockchain analytics firm.
Experience following specific well-known hacker groups.
The hacks function sits within TRM's Primary Intelligence organization, alongside the Facilitation & Money Laundering (F&ML) pod. You will work closely with the Nation States, Cyber Threat Intelligence, and Global Investigations teams, as well as with Data Science and Engineering on automation, and with Marketing on publications.
Monthly metrics review with your manager.
Weekly operating sync with your team.
Regular syncs with your team across time zones.
A war room, run by you, whenever a major hack breaks.
On-call responsibilities
If you’re interested in joining TRM, we encourage you to apply directly. Every application is reviewed by our Talent team.
Before applying, review the job description carefully and highlight the experience and impact that best demonstrate the required qualifications. Please also provide thoughtful and accurate answers to the application questions, as these will be used to evaluate your skills and qualifications for the role.
If you send your resume directly to someone at TRM, we can’t guarantee it will reach the appropriate hiring team. Applying directly is the best way to ensure your application will be considered.
Our process is designed to understand how you think, solve problems, and deliver impact, while allowing you to evaluate TRM. Most interview processes include a case study, an AI skills assessment, and a Leadership Principles interview.
Recruiter Intro: Qualifications, motivations, and alignment with the role.
Hiring Manager: Deep dive into your relevant experience, skills, and impact.
First Round: 1–2 interviews focused on the skills most critical to the role.
Final Round: Hands-on case study. This is usually a panel-style session where we go deeper into your craft, problem-solving, and alignment with TRM.
References: Former colleagues who can provide insight into your work and impact.
Offer: Congrats! Your recruiter will present the offer and compensation details.
Welcome to TRM: We're excited to build a safer world with you!
Your recruiter will share your specific interview plan and preparation guidance along the way.
AI fluency is a baseline expectation at TRM.
We believe AI meaningfully changes how top performers operate. We expect every team member to use AI to accelerate and reimagine their craft, not just automate surface tasks.
At TRM, AI fluency means you are among the top 10 percent of operators in your function in how you apply AI to:
Accelerate repeatable workflows
Structure and solve problems
Improve output quality
Increase speed and leverage
You will be evaluated on applied AI fluency during the interview process.
We are building a safer world. That promise shows up in how we work every day.
TRM moves FAST. We are a high-velocity, high-ownership team that expects clarity, follow-through, and impact. People who thrive here are energized by hard problems, experimentation, and continuous feedback. If something takes months elsewhere, it will ship here in days.
Our work sits at the intersection of AI, national security, and fighting crime. The problems are complex, the stakes are real, and the environment evolves quickly. The pace and intensity of the work reflect the importance of the mission. As a result, the way we operate requires a high level of ownership, adaptability, collaboration, and creative problem-solving.
At TRM, you should expect:
Priorities and targets to change quickly
Operating with a high degree of ambiguity
A high level of personal ownership and accountability
Close collaboration across teams and functions
Frequent, high-touch communication
Creative problem-solving and out-of-the-box thinking
A pace that rewards urgency, adaptability, and outcomes
This environment is energizing for people who enjoy building, solving hard problems, and making progress in situations that are not always fully defined. It also requires thriving in ambiguity, adjusting course as new information emerges, and maintaining focus and positivity in a fast-moving and intense environment.
We also recognize that this style of operating is not for everyone. If you are primarily optimizing for predictability or a consistently balanced workload, we encourage you to use the interview process to pressure-test whether this environment is truly the right fit. We want teammates who thrive here, not just survive here.
If you are excited by meaningful problems, motivated by ambitious goals, and energized by working alongside mission-driven colleagues, there is a good chance you will find TRM to be an exceptional place to grow and contribute.
We hire and grow against three leadership principles. They’re the standards for how we operate, treat each other, and make decisions.
Impact-Oriented Trailblazer: We put customers first and move with speed, focus, and adaptability. We treat every plan like an experiment – test, ship, measure, and iterate quickly.
Master Craftsperson: We care deeply about our craft. We balance speed with high standards, own outcomes end‑to‑end, and invest in getting better everyday.
Inspiring Colleague: We add clarity and energy, not noise. We bring humility, candor, and a one‑team mindset — giving and receiving feedback to make the team stronger.
At TRM, we care deeply about our craft. We are looking for individuals who want their work to matter, who experiment with speed and rigor, and who take pride in building a safer world for billions of people. If you’re excited by TRM’s mission but don’t check every box, we encourage you to apply — we hire for slope, judgment, and the will to learn fast.
TRM is a Series C company with $220M in total funding, backed by Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo, and others. Headquartered in San Francisco, TRM operates as a distributed-first company with hubs in Los Angeles, San Francisco, New York, Washington D.C., London, and Singapore.
By submitting your application, you agree to allow TRM Labs to process your personal information in accordance with our Privacy Policy.
We collect the information you provide (such as your resume, work history, and contact details) solely for the purpose of evaluating your candidacy for current and future roles at TRM.
Because our hiring cycles for certain positions may span 24 to 36 months, we retain your personal information for up to 36 months from the date of your application. After that period, your data is deleted unless a different retention period is required or permitted by law.
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection laws, you have the right to access, correct, or request deletion of your personal data at any time before that period ends. To exercise any of these rights, contact us at privacy@trmlabs.com.
To notify TRM Labs that you believe this job posting is non-compliant, please submit a report through this form(opens in a new tab). No response will be provided to inquiries unrelated to job posting compliance.
The use of AI tools of any kind (including but not limited to notetakers, interview assistants, and real-time coaching tools such as Otter.ai, Fireflies, Fathom, Cluey, or similar) during TRM interviews is not permitted without prior approval from TRM. TRM uses its own internal tools for note-taking to ensure a consistent and confidential experience for all candidates.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this form(opens in a new tab).
TRM Labs does not accept unsolicited agency resumes. Please do not forward resumes to TRM employees. TRM Labs is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company without a signed agreement.
To apply: https://weworkremotely.com/remote-jobs/trm-labs-senior-staff-threat-intelligence-analyst-hacks
Manages a red team that identifies critical security vulnerabilities and attack paths before adversaries exploit them.
Lead and manage a team of four security engineers while overseeing incident management, threat detection, SIEM optimization, and cloud security posture across AWS, Azure, and GCP.
We are seeking a proactive and experienced Lead Information Security Engineer to join our Information Security team. In this role, you will take ownership of incident management, threat detection, and the continuous improvement of our security posture, while leading and managing our team of four Information Security Engineers. You will be responsible for setting priorities, providing technical guidance, developing team capabilities, and ensuring the effective execution of our Security Operations strategy.
You will play a pivotal role in safeguarding Job&Talent’s systems, data, and operations, fostering a culture of security excellence, and ensuring our security capabilities evolve ahead of emerging threats. Combining hands-on technical expertise with people management, you will drive operational excellence, strengthen our detection and response capabilities, and collaborate closely with DevOps and other teams across the business.
This is a fully remote position with flexibility within ±1 hour of CET.
Team Leadership and Management: Lead and manage a team of four security professionals, providing direction, technical guidance, mentoring, and support to drive individual development and overall team performance.
SecOps and Threat Detection: Own and continuously improve incident management processes, ensuring effective investigation, response, and resolution of security incidents.
Detection and Response: Improve threat detection capabilities, optimize SIEM alerting to reduce noise and false positives, develop and maintain incident response playbooks, and strengthen email security.
Security Policies and Standards: Develop security guides and define, implement, and monitor security measures to protect Job&Talent’s systems, data, and operations.
Security Tooling and Processes: Drive the continuous improvement of security tools, processes, and standards to provide consistent security assurance across the business.
Cloud Security: Use our Cloud Security Posture Management (CSPM) tool to monitor and improve cloud security configurations across AWS, Azure, and Google Cloud Platform.
Cross-functional Collaboration: Work closely with DevOps teams to integrate security into cloud deployment environments, infrastructure, and CI/CD pipelines.
Risk Management: Perform risk assessments, threat modeling, and security reviews, ensuring risks are identified, prioritized, and addressed effectively.
Logging and Visibility: Improve logging, monitoring, visibility, and evidence collection across corporate and production systems.
Continuous Improvement: Establish best practices, identify opportunities to improve operational efficiency, and ensure the team continuously develops its technical capabilities in response to evolving threats.
5+ years of experience in SecOps, cloud security, incident response, security engineering, or a similar role.
Previous experience leading or managing a security team, including mentoring engineers, setting priorities, and coordinating workloads. Experience managing a team of a similar size is a plus.
At least 3 years of experience in threat analysis, SIEM alert investigation, detection engineering, noise reduction, and incident management.
At least 2 years of experience working with CSPM tools.
At least 3 years of experience working for a cloud-based, global technology product company.
Hands-on experience with EDR/XDR tools and endpoint investigation.
Experience with vulnerability management and risk-based prioritization.
Strong understanding of cloud security principles and experience working with AWS, Azure, and/or Google Cloud Platform.
Ability to combine hands-on technical expertise with team leadership, ensuring effective execution while supporting the development of team members.
Strong communication and collaboration skills, with the ability to work effectively with technical teams and stakeholders across the business.
About us
Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries. We help companies boost productivity and efficiency at scale, while giving workers the tools they need to thrive. Our mission is simple: to empower the people who make the world go round.
Built on deep industry expertise, cutting-edge technology, and smart AI agents, our end-to-end platform covers the entire workforce lifecycle — from recruitment and planning to time and attendance, performance, cost management, and communication.
It delivers measurable improvements in the areas that matter most: fulfilment, attendance, retention, and workforce quality. Our platform strength is rooted in unique experience: placing millions of workers over the years and serving thousands of blue-chip clients across delivery, logistics, manufacturing, e-commerce, retail, and hospitality.
Headquartered in Madrid, the company operates in 10 countries across Europe, the US, and Latin America and is backed by leading investors including Atomico, Goldman Sachs, Kinnevik, BlackRock, and SoftBank.
Join our community and make an impact
Innovation, high standards, and analytical thinking are in our DNA. Everyone has a voice here, and that voice matters. It’s how we stay sharp, move fast, and make decisions that keep us ahead of the curve.
You’ll take full ownership of your work, collaborate across borders, and grow by doing. Around here, you’ll hear a lot about 10x experiences, human-centered design, and the power of AI. But what truly sets us apart is our people: Our diverse team brings unique perspectives, deep commitment and real-world experience to the table.
We champion empathy, honesty, and inclusion. Because when people can be their authentic selves, incredible things happen—for our workers, our clients, and for each other.
And we reward that impact—with competitive pay, meaningful benefits, and the opportunity to shape what work looks like for millions around the globe.
If you’re ready to make a real impact at scale, you’re in the right place.
Proud to champion equality
At Job&Talent we value diversity and we’re an Equal Opportunity Employer. We welcome applications from all suitably qualified people regardless of national origin, race, disability, religious beliefs or sexual orientation. Come join us. We look forward to your application.
#LI-ML2
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Monitors public sources and social media to investigate threats, fraud, safety risks, and persons of interest using OSINT techniques.
Are you interested in joining an organization with a global reach? In a world of shifting threats, Concentric is your trusted ally. Powered by elite professionals from military, government, and intelligence backgrounds. If you are passionate about intelligence, risk analysis, threat management, executive protection, security operations, or business resiliency, Concentric may be the organization you’ve been searching for!
Concentric is a risk consultancy specializing in delivering strategic security and intelligence services. We provide holistic, intelligent security solutions for private clients and corporations globally. Concentric offers strategic advisory services, risk assessments, physical protection, threat intelligence, open-source monitoring, program audits, secure embedded staffing, and training for security teams and intelligence analysts.
Our ultimate goal is to be recognized as the most innovative, capable, and trusted Risk Management partner in the world, and we do this by following these core values:
Integrity – Collaboration - Relationships – Excellence – Creativity - Results
Join Us,
Concentric - “Your World Secured”
We are currently looking to hire a Junior Open-Source Intelligence Analyst to join our team embedded with our client in Singapore!
*This is a full-time, remote position open to candidates based in Singapore. Applicants must be authorized to work in Singapore without employer sponsorship.
JOB DESCRIPTION
The Open-Source Intelligence (OSINT) Analyst will be responsible for monitoring all source information to proactively identify and assess risks and threats to the client, its hosts, and their guests. This position requires excellent communication skills and the ability to synthesize intelligence from multiple sources into products that clearly communicate risk and opportunity. “Open source investigation” includes ongoing, persistent monitoring for threats; person of interest (POI) investigations; and social media analysis. This position sits under the organization’s Global Investigations (GI) program and within Fraud & Safety Operations, which drives proactive detection, investigation, and enforcement against organized platform abuse and severe safety threats.
RESPONSIBILITIES
REQUIRED QUALIFICATIONS
PREFERRED QUALIFICATIONS
COMPENSATION & BENEFITS
Singapore Pay Range
$75,000—$80,000 SGD
Concentric and SPS Global acknowledge the systemic barriers in the security industry and recognize that removing those barriers will require a collaborative and conscious effort. Concentric and SPS Global are committed to programs and initiatives that promote diversity, equity, and inclusion, enhancing our organization and the broader community. We are creating a diverse environment and are proud to be an equal opportunity employer. We encourage people from all backgrounds to apply. All qualified applicants will receive consideration for employment regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Concentric Advisors and SPS Global are committed to protecting the privacy and security of all applicants who submit personal information to us. You can access our GDPR and CCPA policy by clicking the GDPR button at the bottom of our career page.
Leads a security engineering team while managing incident response, threat detection, cloud security, risk assessments, and security operations improvements.
We are seeking a proactive and experienced Lead Information Security Engineer to join our Information Security team. In this role, you will take ownership of incident management, threat detection, and the continuous improvement of our security posture, while leading and managing our team of four Information Security Engineers. You will be responsible for setting priorities, providing technical guidance, developing team capabilities, and ensuring the effective execution of our Security Operations strategy.
You will play a pivotal role in safeguarding Job&Talent’s systems, data, and operations, fostering a culture of security excellence, and ensuring our security capabilities evolve ahead of emerging threats. Combining hands-on technical expertise with people management, you will drive operational excellence, strengthen our detection and response capabilities, and collaborate closely with DevOps and other teams across the business.
This is a fully remote position with flexibility within ±1 hour of CET.
Team Leadership and Management: Lead and manage a team of four security professionals, providing direction, technical guidance, mentoring, and support to drive individual development and overall team performance.
SecOps and Threat Detection: Own and continuously improve incident management processes, ensuring effective investigation, response, and resolution of security incidents.
Detection and Response: Improve threat detection capabilities, optimize SIEM alerting to reduce noise and false positives, develop and maintain incident response playbooks, and strengthen email security.
Security Policies and Standards: Develop security guides and define, implement, and monitor security measures to protect Job&Talent’s systems, data, and operations.
Security Tooling and Processes: Drive the continuous improvement of security tools, processes, and standards to provide consistent security assurance across the business.
Cloud Security: Use our Cloud Security Posture Management (CSPM) tool to monitor and improve cloud security configurations across AWS, Azure, and Google Cloud Platform.
Cross-functional Collaboration: Work closely with DevOps teams to integrate security into cloud deployment environments, infrastructure, and CI/CD pipelines.
Risk Management: Perform risk assessments, threat modeling, and security reviews, ensuring risks are identified, prioritized, and addressed effectively.
Logging and Visibility: Improve logging, monitoring, visibility, and evidence collection across corporate and production systems.
Continuous Improvement: Establish best practices, identify opportunities to improve operational efficiency, and ensure the team continuously develops its technical capabilities in response to evolving threats.
5+ years of experience in SecOps, cloud security, incident response, security engineering, or a similar role.
Previous experience leading or managing a security team, including mentoring engineers, setting priorities, and coordinating workloads. Experience managing a team of a similar size is a plus.
At least 3 years of experience in threat analysis, SIEM alert investigation, detection engineering, noise reduction, and incident management.
At least 2 years of experience working with CSPM tools.
At least 3 years of experience working for a cloud-based, global technology product company.
Hands-on experience with EDR/XDR tools and endpoint investigation.
Experience with vulnerability management and risk-based prioritization.
Strong understanding of cloud security principles and experience working with AWS, Azure, and/or Google Cloud Platform.
Ability to combine hands-on technical expertise with team leadership, ensuring effective execution while supporting the development of team members.
Strong communication and collaboration skills, with the ability to work effectively with technical teams and stakeholders across the business.
About us
Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries. We help companies boost productivity and efficiency at scale, while giving workers the tools they need to thrive. Our mission is simple: to empower the people who make the world go round.
Built on deep industry expertise, cutting-edge technology, and smart AI agents, our end-to-end platform covers the entire workforce lifecycle — from recruitment and planning to time and attendance, performance, cost management, and communication.
It delivers measurable improvements in the areas that matter most: fulfilment, attendance, retention, and workforce quality. Our platform strength is rooted in unique experience: placing millions of workers over the years and serving thousands of blue-chip clients across delivery, logistics, manufacturing, e-commerce, retail, and hospitality.
Headquartered in Madrid, the company operates in 10 countries across Europe, the US, and Latin America and is backed by leading investors including Atomico, Goldman Sachs, Kinnevik, BlackRock, and SoftBank.
Join our community and make an impact
Innovation, high standards, and analytical thinking are in our DNA. Everyone has a voice here, and that voice matters. It’s how we stay sharp, move fast, and make decisions that keep us ahead of the curve.
You’ll take full ownership of your work, collaborate across borders, and grow by doing. Around here, you’ll hear a lot about 10x experiences, human-centered design, and the power of AI. But what truly sets us apart is our people: Our diverse team brings unique perspectives, deep commitment and real-world experience to the table.
We champion empathy, honesty, and inclusion. Because when people can be their authentic selves, incredible things happen—for our workers, our clients, and for each other.
And we reward that impact—with competitive pay, meaningful benefits, and the opportunity to shape what work looks like for millions around the globe.
If you’re ready to make a real impact at scale, you’re in the right place.
Proud to champion equality
At Job&Talent we value diversity and we’re an Equal Opportunity Employer. We welcome applications from all suitably qualified people regardless of national origin, race, disability, religious beliefs or sexual orientation. Come join us. We look forward to your application.
#LI-ML2
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Builds security observability, compliance, control management systems, and defensive tools for a cloud-native organization.
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X.
We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.
We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity.
To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work.
The Opportunity:
You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.
This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus.
What You’ll Be Doing:
What Makes You a Great Fit:
Bonus Points For:
In Germany, the base compensation range for this role is €97,034 - €116,441. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs’ success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.
*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.
Why You’ll Thrive at Grafana Labs:
Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.
Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
#LI-Remote
For information about how your personal data is used once you’ve applied to a job, check out our privacy policy.
Builds security assurance, observability, compliance, and control-management services and tools for a cloud-native organization.
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X.
We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.
We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity.
To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work.
The Opportunity:
You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.
This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus.
What You’ll Be Doing:
What Makes You a Great Fit:
Bonus Points For:
In Sweden, the base compensation range for this role is SEK 775,444 - SEK 930,533. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs’ success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.
*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.
Why You’ll Thrive at Grafana Labs:
Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.
Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
#LI-Remote
For information about how your personal data is used once you’ve applied to a job, check out our privacy policy.
Monitors customer traffic for cyber threats, investigates incidents, tunes security policies, deploys mitigations, and communicates findings to stakeholders.
Headquarters: Australia (Remote)
Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including GitHub, Yelp, Paramount, and JetBlue.
We're building a more trustworthy Internet. Come join us.
Threat Detection Analyst - (Japanese speaking desirable)
Fastly is seeking a Threat Detection Analyst to join our dedicated Customer Security Operations Centre. In this role, you will be a frontline defender for Fastly’s global enterprise customers. You will leverage our edge cloud platform and an array of security products in monitoring traffic, detect sophisticated anomalies, and deploy real-time mitigations against DDoS, Bot, and Web Application attacks.
This is a high-impact role where you act as a strategic partner for our Managed Security Service (MSS) clients, providing the expert visibility and rapid response necessary to address internet-scale threats.
Work Hours:
Work Location(s) & Travel Requirements
This position is a remote position based out of (locality), with the possibility of becoming a hybrid position as Fastly expands its presence in the region.
This position will require travel to the US and Internationally, as required by your role or requested by your manager.
Benefits:
We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with Fastly. Curious about our offerings?
We offer a comprehensive benefits package designed to meet your needs. Our offerings may vary depending on the country where you work and are subject to change.
Why Fastly?
We have a huge impact. Fastly is a small company with a big reach. Not only do our customers have a tremendous user base, but we also support a growing number of open source projects and initiatives. Outside of code, employees are encouraged to share causes close to their heart with others so we can help lend a supportive hand.
We value diversity. Growing and maintaining our inclusive and diverse team matters to us. We are committed to being a company where our employees feel comfortable bringing their authentic selves to work and have the ability to be successful -- every day.
We are passionate. Fastly is chock full of passionate people and we’re not ‘one size fits all’. Fastly employs authors, pilots, skiers, parents (of humans and animals), makeup geeks, coffee connoisseurs, and more. We love employees for who they are and what they are passionate about.
We’re always looking for humble, sharp, and creative folks to join the Fastly team. If you think you might be a fit please apply! A fully completed application and resume or CV are required when applying.
All job applications must be submitted through our official careers site at www.fastly.com/about/careers. We will never request sensitive information, such as your Social Security number, bank account or credit card information during the application process. All official communication will come from an @fastly.com or @recruiting.fastly.com email address.
Fastly is committed to ensuring equal employment opportunity and to providing employees with a safe and welcoming work environment free of discrimination and harassment. Our employment decisions are based on business needs, job requirements and individual qualifications. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, family or parental status, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.
Consistent with the Americans with Disabilities Act (ADA) and federal or state disability laws, Fastly will provide reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact your Recruiter, or the Fastly Employee Relations team at candidateaccommodations@fastly.com or 501-287-4901.
Fastly collects and processes personal data submitted by job applicants in accordance with our Privacy Policy. Please see our privacy notice for job applicants.
To apply: https://weworkremotely.com/remote-jobs/fastly-threat-detection-analyst-japanese-speaking-desirable
Leads hands-on threat analysis, malware and exploit investigation, and development of production security detections and mitigations.
CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful.
Check out our website for more information: cloudlinux.com
We are currently hiring a Staff Security Engineer within the Imunify360 product.
Imunify360 is CloudLinux’s security suite for Linux web servers. It protects hundreds of thousands of hosting servers and the websites running on them, so it sees most large-scale web attacks early — often in the first hours.
Check out our website for more information: https://imunify360.com/
At Imunify360, protecting customers from evolving cyber threats requires close collaboration between security research, engineering, and other teams. Responding to complex attack campaigns involves more than identifying threats — it requires understanding attack techniques, developing effective detection and mitigation strategies, and ensuring customers are protected.
As a Staff Security Engineer, you’ll take end-to-end technical ownership of complex security challenges, from initial threat discovery and analysis to detection, mitigation, and post-incident review.
This is a hands-on technical leadership role focused on practical security engineering rather than SOC monitoring, compliance, or purely theoretical research. You’ll analyze malware and exploit code, develop detection and mitigation tools, anticipate emerging attack techniques, and ensure security findings translate into production-ready detections, mitigations, and fixes.
You’ll work closely with engineering, security research, support, external partners, and the broader security community to coordinate responses and drive continuous improvements in our security capabilities.
As an individual contributor, you won’t have direct reports or people management responsibilities. All security research and testing are conducted within authorized boundaries, with clearly defined scope and responsible disclosure practices.
Your mission is to strengthen Imunify360’s ability to detect, prevent, and respond to emerging threats, delivering measurable security improvements that protect customers at scale.
Malware and campaign mitigation
Security response coordination
Offensive security on our own product
Detection engineering and tooling
People multiplier (no direct reports)
Background in hosting or large web ecosystems.
Detection authoring at scale (signatures, WAF/IDS rules).
Kernel-level monitoring and rootkit detection.
Threat intelligence practice and actor tracking.
ML for malware classification.
Public track record: CVEs, published research, talks, CTFs, open-source security tools.
Relevant certifications are a plus, not a requirement.
What’s in it for you?
By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.
Supports security compliance, audit evidence collection, vulnerability reporting, phishing simulations, penetration testing, and GRC workflow automation.
About OpenSesame
OpenSesame is transforming workforce development with an AI-powered marketplace of skill-building courses and learning pathways. We help organizations build skills and stay compliant through a high-quality content catalog, seamless LMS/LXP integrations, and advanced capabilities like skills-based curation and multilingual content creation. More than 2,000 companies, including 150+ of the Global 2000, rely on OpenSesame to develop the world’s most productive and admired workforces.
Learn more: www.opensesame.com/about
Internship Overview
OpenSesame seeks passionate, driven students to join us for a paid summer internship program. Suppose you’re intelligent, curious, and full of fresh ideas. In that case, this is your chance to collaborate with an exceptional team and gain hands-on experience in a fast-paced, growth-focused environment.
As a Security Analyst Intern, you’ll work on real-world compliance and security challenges, contribute to impactful solutions, and collaborate with teams across OpenSesame to strengthen our security and compliance posture.
About the Security and Compliance Team
At OpenSesame, our Security and Compliance Team ensures our company meets the highest industry standards and regulatory requirements. We focus on compliance with ISO 27001, SOC 2, GDPR, ISO 42001 and other security frameworks, vendor risk assessments, incident response, and policy enforcement.
Our team partners across departments to mitigate risks, respond to security threats, and maintain a strong security culture. Through continuous learning and innovation, we protect the organization and help drive secure business growth.
Performance Objectives
Additional Program Details
Eligibility:
Application Closes:
Program Dates:
Commitment:
Compensation:
Fully Remote Role: Interns must have access to a reliable, high-speed internet connection during working hours. OpenSesame will provide a company laptop for use throughout the internship, which must be returned at the conclusion of the internship.
Ready to make an impact? Apply now and bring your creativity, energy, and problem-solving skills to OpenSesame. We’re excited to see what you’ll bring to the table!
We use AI. For real. Every team at OpenSesame works with AI tools daily, not as a buzzword, but as practice. You’ll build fluency that most companies are still talking about adopting, with hands-on training and clear guardrails to experiment responsibly. AI amplifies your creativity and judgment. It doesn’t replace them. The skills you build here travel with you.
Location: This position can be based anywhere in the U.S.
Equal Employment Opportunity: OpenSesame is an Equal Employment Opportunity and Affirmative Action employer that values and welcomes diversity. We do not discriminate on the basis of various legally protected characteristics, including criminal history, and strive to provide reasonable accommodations to qualified individuals with disabilities. We prioritize safety and security and may use your information accordingly, and you can contact us for assistance or accommodations during the job application process.
CPRA (California Candidates): When you submit your application, OpenSesame may collect and use your personal information in accordance with our privacy policy and the CPRA. This may include personal details and employment history, and will only be used for employment-related purposes. We may share this information with third-party service providers, but we will not sell it to third parties. If you have any questions or concerns, please contact us, and for more information on your rights under the CPRA, refer to our privacy policy or the California Attorney General’s website.
We Care About Your Security: We’ve been made aware of a phishing scam involving individuals impersonating OpenSesame recruiters. All legitimate communication from our team will come from @opensesame.com email addresses. If you receive a suspicious message, please contact us directly at careers@opensesame.com. Your security matters to us, thank you for staying vigilant.
Supports security compliance, audit evidence collection, vulnerability reporting, phishing simulations, penetration testing, and GRC workflow automation.
About OpenSesame
OpenSesame is transforming workforce development with an AI-powered marketplace of skill-building courses and learning pathways. We help organizations build skills and stay compliant through a high-quality content catalog, seamless LMS/LXP integrations, and advanced capabilities like skills-based curation and multilingual content creation. More than 2,000 companies, including 150+ of the Global 2000, rely on OpenSesame to develop the world’s most productive and admired workforces.
Learn more: www.opensesame.com/about
Internship Overview
OpenSesame seeks passionate, driven students to join us for a paid summer internship program. Suppose you’re intelligent, curious, and full of fresh ideas. In that case, this is your chance to collaborate with an exceptional team and gain hands-on experience in a fast-paced, growth-focused environment.
As a Security Analyst Intern, you’ll work on real-world compliance and security challenges, contribute to impactful solutions, and collaborate with teams across OpenSesame to strengthen our security and compliance posture.
About the Security and Compliance Team
At OpenSesame, our Security and Compliance Team ensures our company meets the highest industry standards and regulatory requirements. We focus on compliance with ISO 27001, SOC 2, GDPR, ISO 42001 and other security frameworks, vendor risk assessments, incident response, and policy enforcement.
Our team partners across departments to mitigate risks, respond to security threats, and maintain a strong security culture. Through continuous learning and innovation, we protect the organization and help drive secure business growth.
Performance Objectives
Additional Program Details
Eligibility:
Application Closes:
Program Dates:
Commitment:
Compensation:
Fully Remote Role: Interns must have access to a reliable, high-speed internet connection during working hours. OpenSesame will provide a company laptop for use throughout the internship, which must be returned at the conclusion of the internship.
Ready to make an impact? Apply now and bring your creativity, energy, and problem-solving skills to OpenSesame. We’re excited to see what you’ll bring to the table!
We use AI. For real. Every team at OpenSesame works with AI tools daily, not as a buzzword, but as practice. You’ll build fluency that most companies are still talking about adopting, with hands-on training and clear guardrails to experiment responsibly. AI amplifies your creativity and judgment. It doesn’t replace them. The skills you build here travel with you.
Location: This position can be based anywhere in the U.S.
Equal Employment Opportunity: OpenSesame is an Equal Employment Opportunity and Affirmative Action employer that values and welcomes diversity. We do not discriminate on the basis of various legally protected characteristics, including criminal history, and strive to provide reasonable accommodations to qualified individuals with disabilities. We prioritize safety and security and may use your information accordingly, and you can contact us for assistance or accommodations during the job application process.
CPRA (California Candidates): When you submit your application, OpenSesame may collect and use your personal information in accordance with our privacy policy and the CPRA. This may include personal details and employment history, and will only be used for employment-related purposes. We may share this information with third-party service providers, but we will not sell it to third parties. If you have any questions or concerns, please contact us, and for more information on your rights under the CPRA, refer to our privacy policy or the California Attorney General’s website.
We Care About Your Security: We’ve been made aware of a phishing scam involving individuals impersonating OpenSesame recruiters. All legitimate communication from our team will come from @opensesame.com email addresses. If you receive a suspicious message, please contact us directly at careers@opensesame.com. Your security matters to us, thank you for staying vigilant.
Supports digital forensic investigations, analyzes evidence for malicious activity, and assists with containment, eradication, and incident response reporting.
Junior Incident Response Consultant
Hybrid (McLean, VA)
About the Role:
Do you want to influence real change? Do you want to be part of the solution? Then join Pondurance in ensuring every organization is ableto detect and respond to cyber threats – regardless of size, industry, or current in-housecapabilities.
As a Junior Incident Response Consultant, you will support forensic investigations alongside Principal, Senior, and standard Consultants within the Incident Response program. Your goal will be to assist in stopping compromises through containment, eradication, and data access forensic efforts. You will leverage our tech stack and support our clients during incident response.
This is a hybrid role, and candidates must be located in the McLean, VA area. Employees are expected to work in the McLean office approximately 20% of the time for device collection and other business needs.
Responsibilities:
Technologies:
Knowledge and Skills:
Compensation:
The anticipated base salary range for this position is $85,000 - $92,000 annually
Actual compensation will be determined in good faith based on factors such as relevant experience, technical expertise, certifications, geographic location (where applicable), and internal equity. This position may also be eligible for bonus or other incentive compensation, as well as the benefits described below.
Who we are:
At Pondurance, we embrace, educate, and protect people by helping make our world a better and safer place. We believe in inviting good people into our company who are driven to become great!
Every person at Pondurance is encouraged to focus and grow in their individual areas of interest, passion, and career path. We have accessible leaders as mentors who believe “None of us are as smart as all of us” (R. Pelletier).
We believe everyone has the freedom to be themselves, especially at work, and so we embrace, support, and celebrate each other. Each one of us influences our company’s direction through speaking up; you have a voice,and we want you to use it.
Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape.
What We Offer:
The opportunity to apply your expertise, take on new challenges, and help customers address their biggest security objectives.
An inclusive culture of teamwork that embraces the diversity of our people and communities in which we work.
Some of the corporate benefits (there are more) for full-time employees include:
To promote a healthy and safe work community, we require background and drug screenings as part of our hiring process. Details of our process will be provided upon request.
We are an equal opportunity employer focused on celebrating diversity and inclusion. We believe that each individual should be treated equally without regard to race, color, identity, national origin, protected veteran status, religion, sex, including sexual orientation and gender identity, disability, or any other characteristic protected by law.
Monitors networks and systems for cyber threats, investigates suspicious activity, and supports incident detection and response.
Conducts proactive threat hunting, fraud kill-chain analysis, adversary research, and agentic simulations to identify and eliminate Stripe product vulnerabilities.
Headquarters: Remote from the US
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
Abuse Research Group (ARG) handles proactive threat hunting and adversary behavior analysis across Stripe products. Rather than reacting to alerts, the team maps end-to-end fraud and abuse paths, validates novel attack vectors, and identifies product conditions that enable fraud. Using agentic automated testing and simulation tools, ARG translates research into actionable threat advisories, strategic control recommendations, and regression scenarios to systematically eliminate vulnerabilities.
As an Abuse Research Engineer in the Abuse Research Group, you will play a critical role in safeguarding Stripe’s financial ecosystem by proactively hunting for advanced threats, dissecting complex fraud vectors, and extracting actionable adversary intelligence. Rather than relying solely on reactive alerts, you will develop and execute hypothesis-driven threat hunting operations across internal telemetry and external sources to uncover fraudulent tools, tactics, and techniques (TTPs) before they impact Stripe’s platform. Central to this work is FT3 (Fraud Taxonomy 3.0), Stripe’s multi-layered taxonomy that decomposes monolithic fraud into structured kill chains. Collaborating cross-functionally with Fraud Ops, Strategy, Risk, Onboarding, and Security, you will integrate threat intelligence, build agentic simulation workflows, and systematically eliminate product vulnerabilities.
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
To apply: https://weworkremotely.com/remote-jobs/stripe-abuse-research-engineer
Investigates customer security incidents, performs forensic analysis, coordinates response efforts, develops playbooks, and reports remediation findings.
Leads trust and safety for an AI education platform, overseeing LLM guardrails, evaluations, incident response, compliance, and a safety team.
WHO WE ARE: MagicSchool is the premier generative AI platform for teachers. We’re just over 2 years old, and more than 7 million teachers from all over the world have joined our platform. Join a top team at a fast growing company that is working towards real social impact. Make an account and try us out at our website and connect with our passionate community on our Wall of Love.
Own the safety of AI output to teachers and students: policy, model-level guardrails, evals, red-teaming, and incident response.
Own the trust posture with districts: safety documentation, RFP and school-board responses, and alignment with state AI-in-education guidance.
Develop safety evaluations and monitoring as integral components of product infrastructure; ensure that each new tool includes safety acceptance criteria established during the scoping phase, rather than at launch.
Own student-facing safety specifically: age-appropriate content, self-harm and crisis handling, and escalation paths to educators.
Run the safety incident process end to end and own the postmortem loop back into product and engineering.
Partner with Legal on COPPA, FERPA, state privacy laws, and emerging AI regulation. T&S owns the operational reality; Legal owns the legal position.
Build and lead a small team (1–3 to start), scaling the function through 2027.
Must Haves
Has owned trust & safety or responsible AI for a consumer or youth-facing product at scale: real incidents, real policy decisions, real regulators.
Hands-on with LLM safety: evals, classifiers, prompt/system-level guardrails, red-teaming. Can read an eval result and say what to change.
Has made safety a velocity enabler, not friction — builds guardrails as infrastructure so teams ship faster with confidence.
Makes judgment calls under ambiguity and owns them publicly, to districts and to the exec team.
Strong writer: safety docs, district-facing explainers, incident communications.
Operates hypothesis-first and escalates one-way doors fast rather than sitting on them.
Nice to Haves
K-12 or youth-platform experience (GoGuardian, Securly, Roblox, Discord, YouTube Kids, Epic Games).
Familiarity with state AI-in-education frameworks and district procurement questionnaires.
Prior work with child-safety NGOs or standards bodies (Common Sense Media, NCMEC, Thorn, ISTE).
Data/ML fluency to partner directly with engineering on classifiers and eval pipelines.
Comfortable being the external face of safety at conferences, with press, and in front of district boards.
Proven ownership of trust & safety or responsible AI at a consumer or youth-facing product at scale.
Hands-on experience with LLM safety tooling: evals, classifiers, and red-teaming.
Experience handling live incidents involving minors or vulnerable users.
Track record of building safety as product infrastructure, not a gate.
Demonstrated ability to communicate safety tradeoffs clearly to executive and district-level audiences.
LLM layer: multi-provider (OpenAI / Anthropic / Google via GCP Vertex); moderation APIs and custom classifiers.
Eval and red-team tooling (to be built out); Datadog for output observability and alerting.
Product stack context: TypeScript / Next.js on Vercel, Supabase (PostgreSQL) backend.
Incident and knowledge tooling: Linear, Slack workflows, Notion.
Why Join Us?
Work on cutting-edge AI technology that directly impacts educators and students.
Join a mission-driven team passionate about making education more efficient and equitable.
Flexibility of working from home, while fostering a unique culture built on relationships, trust, communication, and collaboration with our team - no matter where they live.
For full time employees:
Unlimited time off to empower our employees to manage their work-life balance. We work hard for our teachers and users, and encourage our employees to rest and take the time they need.
Choice of employer-paid health insurance plans so that you can take care of yourself and your family. Dental and vision are also offered at very low premiums.
Every employee is offered generous stock options, vested over 4 years.
401k match & monthly wellness stipend.
Our Values:
Educators are Magic: Educators are the most important ingredient in the educational process - they are the magic, not the AI. Trust them, empower them, and put them at the center of leading change in service of students and families.
Joy and Magic: Bring joy and magic into every learning experience - push the boundaries of what’s possible with AI.
Community: Foster community that supports one another during a time of rapid technological change. Listen to them and serve their needs.
Innovation: The education system is outdated and in need of innovation and change - AI is an opportunity to bring equity, access, and serve the individual needs of students better than we ever have before.
Responsibility: Put responsibility and safety at the forefront of the technological change that AI is bringing to education.
Diversity: Diversity of thought, perspectives, and backgrounds helps us serve the wide audience of educators and students around the world.
Excellence: Educators and students deserve the best - and we strive for the highest quality in everything we do.
Builds and operates the application security program, secure SDLC, threat modeling, code review, and security testing tooling.
Fingerprint empowers enterprises to detect and stop online fraud with the world’s most accurate device intelligence. We lead our industry with bleeding-edge identification capabilities and work on turning new ideas and discoveries in the fraud detection space into reality. Our customers range from innovative startups to leading enterprise companies, including Plaid, Dropbox, and Booking.com.
Fingerprint is a globally dispersed, 100% remote company. We were named on on the 2026 Forbes Best Startup Employers list and ranked #803 on the 2026 Inc. 5000 list of America’s fastest-growing private companies.
We have raised $77M and are backed by Craft Ventures (Tesla, Facebook, Airbnb ), Nexus Venture Partners ( Postman, Apollo.io, MinIO, Druva) and Uncorrelated Ventures ( Redis, Rollbar, Gradle).
Fingerprint’s device intelligence platform processes billions of identification events for some of the world’s most security-conscious companies — financial institutions, fraud prevention operators, and enterprises that rely on us to stop attackers. That makes our own application security a product feature, not a back-office function: our customers’ adversaries are, by definition, motivated to probe what we build.
As we scale with large enterprise customers, we’re investing in application security as a dedicated, first-class engineering discipline. Security is already part of how our teams build — scanning in the pipeline, a Cloud Platform team that treats security as a partner, and a mature compliance posture — and we’re now standing up a focused AppSec function, led by a Senior Manager, Application Security who owns the program and strategy, to take it to the next level. You will be the founding senior engineer of that function — the person who turns strategy into a working secure SDLC, finds and fixes what matters, and raises the security bar across engineering through technical depth, tooling, and influence.
This is a hands-on Staff role. You will design, build, and operate — not just advise.
Secure SDLC & Security Engineering
Threat Modeling, Security Reviews & Vulnerability Management
Incident Response & Detection (application layer)
Security Culture & Enablement
Partnership & Customer Trust
Required
Nice to Have
This is the senior individual-contributor counterpart to the Senior Manager, Application Security. The manager owns the program, the strategy, and the team; you own the technical depth and the execution. The two roles are designed to work as a pair: you’ll bring the findings, the engineering judgment, and the ground truth from inside the codebase, and together you’ll decide what to prioritize.
As a Staff engineer, you are expected to operate with a high degree of independence — scoping ambiguous problems, setting technical direction for AppSec, and driving multi-quarter initiatives without needing day-to-day direction. As the founding engineer of a dedicated AppSec function, the patterns, tooling, and standards you establish will be the foundation the practice grows on.
This is not a role for someone who wants to primarily write policy or manage a program from a distance. It’s for an engineer who finds real bugs, builds real tooling, and earns the trust of other engineers by making their code better.
At Fingerprint, we believe in pay transparency — it’s part of how we operate as a distributed, remote-first team. Salaries are based on function, level, and geographic location, benchmarked against similar stage growth companies.
Because this role is open across the United States and can be based anywhere our team members work from, the salary range reflects that geographic breadth: $177k - $240k
Some example salaries for specific locations are below:
NYC: $209K - $240k
Chicago: $177k - $204k
Final offer amounts are determined by multiple factors, including the successful candidate’s location, experience, and expertise, and may vary from the amounts listed above.
Due to regulatory and security reasons, there’s a small number of countries where we cannot have Fingerprint teammates based. Additionally, because Fingerprint is an all-remote company and people can join our workforce from almost any country, we do not sponsor visas. Fingerprint teammates need to be authorized to work from their home location.
We are dedicated to creating an inclusive work environment for everyone. We embrace and celebrate the unique experiences, perspectives and cultural backgrounds that each employee brings to our workplace. Fingerprint strives to foster an environment where our employees feel respected, valued and empowered, and our team members are at the forefront in helping us promote and sustain an inclusive workplace. We highly encourage people from underrepresented groups in tech to apply.
If you are applying as a resident of California, please read our CCPA notice here.
If you are applying as a resident of the EU, please read our GDPR notice here.
**We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates’ personal and financial information through fake interviews and offers. All Fingerprint recruiting email communications will always come from the @fingerprint.com domain. Any outreach claiming to be from Fingerprint via other sources should be ignored.
Leads trust and safety for an AI education platform, overseeing LLM guardrails, evaluations, incident response, compliance partnerships, and a safety team.
WHO WE ARE: MagicSchool is the premier generative AI platform for teachers. We’re just over 2 years old, and more than 7 million teachers from all over the world have joined our platform. Join a top team at a fast growing company that is working towards real social impact. Make an account and try us out at our website and connect with our passionate community on our Wall of Love.
Own the safety of AI output to teachers and students: policy, model-level guardrails, evals, red-teaming, and incident response.
Own the trust posture with districts: safety documentation, RFP and school-board responses, and alignment with state AI-in-education guidance.
Develop safety evaluations and monitoring as integral components of product infrastructure; ensure that each new tool includes safety acceptance criteria established during the scoping phase, rather than at launch.
Own student-facing safety specifically: age-appropriate content, self-harm and crisis handling, and escalation paths to educators.
Run the safety incident process end to end and own the postmortem loop back into product and engineering.
Partner with Legal on COPPA, FERPA, state privacy laws, and emerging AI regulation. T&S owns the operational reality; Legal owns the legal position.
Build and lead a small team (1–3 to start), scaling the function through 2027.
Must Haves
Has owned trust & safety or responsible AI for a consumer or youth-facing product at scale: real incidents, real policy decisions, real regulators.
Hands-on with LLM safety: evals, classifiers, prompt/system-level guardrails, red-teaming. Can read an eval result and say what to change.
Has made safety a velocity enabler, not friction — builds guardrails as infrastructure so teams ship faster with confidence.
Makes judgment calls under ambiguity and owns them publicly, to districts and to the exec team.
Strong writer: safety docs, district-facing explainers, incident communications.
Operates hypothesis-first and escalates one-way doors fast rather than sitting on them.
Nice to Haves
K-12 or youth-platform experience (GoGuardian, Securly, Roblox, Discord, YouTube Kids, Epic Games).
Familiarity with state AI-in-education frameworks and district procurement questionnaires.
Prior work with child-safety NGOs or standards bodies (Common Sense Media, NCMEC, Thorn, ISTE).
Data/ML fluency to partner directly with engineering on classifiers and eval pipelines.
Comfortable being the external face of safety at conferences, with press, and in front of district boards.
Proven ownership of trust & safety or responsible AI at a consumer or youth-facing product at scale.
Hands-on experience with LLM safety tooling: evals, classifiers, and red-teaming.
Experience handling live incidents involving minors or vulnerable users.
Track record of building safety as product infrastructure, not a gate.
Demonstrated ability to communicate safety tradeoffs clearly to executive and district-level audiences.
LLM layer: multi-provider (OpenAI / Anthropic / Google via GCP Vertex); moderation APIs and custom classifiers.
Eval and red-team tooling (to be built out); Datadog for output observability and alerting.
Product stack context: TypeScript / Next.js on Vercel, Supabase (PostgreSQL) backend.
Incident and knowledge tooling: Linear, Slack workflows, Notion.
Why Join Us?
Work on cutting-edge AI technology that directly impacts educators and students.
Join a mission-driven team passionate about making education more efficient and equitable.
Flexibility of working from home, while fostering a unique culture built on relationships, trust, communication, and collaboration with our team - no matter where they live.
For full time employees:
Unlimited time off to empower our employees to manage their work-life balance. We work hard for our teachers and users, and encourage our employees to rest and take the time they need.
Choice of employer-paid health insurance plans so that you can take care of yourself and your family. Dental and vision are also offered at very low premiums.
Every employee is offered generous stock options, vested over 4 years.
401k match & monthly wellness stipend.
Our Values:
Educators are Magic: Educators are the most important ingredient in the educational process - they are the magic, not the AI. Trust them, empower them, and put them at the center of leading change in service of students and families.
Joy and Magic: Bring joy and magic into every learning experience - push the boundaries of what’s possible with AI.
Community: Foster community that supports one another during a time of rapid technological change. Listen to them and serve their needs.
Innovation: The education system is outdated and in need of innovation and change - AI is an opportunity to bring equity, access, and serve the individual needs of students better than we ever have before.
Responsibility: Put responsibility and safety at the forefront of the technological change that AI is bringing to education.
Diversity: Diversity of thought, perspectives, and backgrounds helps us serve the wide audience of educators and students around the world.
Excellence: Educators and students deserve the best - and we strive for the highest quality in everything we do.
Leads application security strategy, threat modeling, secure architecture reviews, and vulnerability management across Apollo’s engineering and AI-powered systems.
Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally, from rapidly growing startups to some of the world’s largest enterprises. Founded in 2015, the company is one of the fastest growing companies in SaaS, raising approximately $250 million to date and valued at $1.6 billion. Apollo.io provides sales and marketing teams with easy access to verified contact data for over 210 million B2B contacts and 35 million companies worldwide, along with tools to engage and convert these contacts in one unified platform. By helping revenue professionals find the most accurate contact information and automating the outreach process, Apollo.io turns prospects into customers. Apollo raised a series D in 2023 and is backed by top-tier investors, including Sequoia Capital, Bain Capital Ventures, and more, and counts the former President and COO of Hubspot, JD Sherman, among its board members.
Role Overview
The Staff Application Security Engineer leads application security strategy for Apollo’s Security department and delivers it through hands-on work and technical leadership. This role takes on the hardest AppSec problems across product, platform, and AI-powered features, including problems with no established playbook.
The role shapes the roadmaps of Engineering, Product, and Platform teams so secure patterns become the default, and sets the AppSec standard that helps many teams build securely without relying on any single person.
Key Responsibilities
AppSec strategy, standards, and influence
Secure architecture and vulnerability depth
Tooling, automation, and AI (AI-native by default)
What Good Looks Like (drafted from your mission and success sections)
Required Skills & Experience
Preferred Qualifications
Example Success Outcomes
Our Tech Stack
React on the front end; Ruby, Ruby on Rails, Python, MongoDB, and Elasticsearch on the backend; Kubernetes, Docker, and Terraform in infrastructure; GCP for cloud.
The listed Pay Range reflects the total cash compensation inclusive of annual base salary and annual bonus as applicable. For sales roles, the range provided is the role’s On Target Earnings (“OTE”) range, meaning that the range includes both the sales commissions/sales bonus target and annual base salary for the role. This salary range may be inclusive of several career levels at Apollo and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location. Applicants interested in this role who are not located in the US may request the annual salary range for their location during the interview process.
Additional benefits for this role may include: equity; company bonus or sales commissions/bonuses; 401(k) plan; at least 10 paid holidays per year, flex PTO, and parental leave; employee assistance program and wellbeing benefits; global travel coverage; life/AD&D/STD/LTD insurance; FSA/HSA and medical, dental, and vision benefits.
Pay Transparency Range
$225,400—$281,800 USD
Apollo.io is an AI-native company built on a culture of continuous improvement. We’re on the front lines of driving productivity for our customers—and we expect the same mindset from our team. If you’re energized by finding smarter, faster ways to get things done using AI and automation, you’ll thrive here.
At Apollo, we’re driven by a shared mission: to help our customers unlock their full revenue potential. That’s why we take extreme ownership of our work, move with focus and urgency, and learn voraciously to stay ahead.
We invest deeply in your growth, ensuring you have the resources, support, and autonomy to own your role and make a real impact. Collaboration is at our core—we’re all for one, meaning you’ll have a team across departments ready to help you succeed. We encourage bold ideas and courageous action, giving you the freedom to experiment, take smart risks, and drive big wins.
If you’re looking for a place where your work matters, where you can push boundaries, and where your career can thrive—Apollo is the place for you.
Learn more here!
Strengthens application security through threat modeling, secure SDLC reviews, vulnerability management, tooling, and developer guidance.
Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally, from rapidly growing startups to some of the world’s largest enterprises. Founded in 2015, the company is one of the fastest growing companies in SaaS, raising approximately $250 million to date and valued at $1.6 billion. Apollo.io provides sales and marketing teams with easy access to verified contact data for over 210 million B2B contacts and 35 million companies worldwide, along with tools to engage and convert these contacts in one unified platform. By helping revenue professionals find the most accurate contact information and automating the outreach process, Apollo.io turns prospects into customers. Apollo raised a series D in 2023 and is backed by top-tier investors, including Sequoia Capital, Bain Capital Ventures, and more, and counts the former President and COO of Hubspot, JD Sherman, among its board members.
The Senior Application Security Engineer is a senior individual contributor responsible for strengthening Apollo’s secure software development lifecycle and reducing application risk across product, platform, and AI-powered features.
This role blends deep code-level application security work with strong cross-functional partnership. It includes application security reviews, threat modeling, AppSec tooling, findings triage and remediation follow-through, external testing intake, and developer enablement.
This role is calibrated at the L6 senior-IC level: owning semi-annual or annual goals, solving ambiguous problems with sound judgment, improving operational processes, and driving meaningful cross-team collaboration and influence.
The listed Pay Range reflects the total cash compensation inclusive of annual base salary and annual bonus as applicable. For sales roles, the range provided is the role’s On Target Earnings (“OTE”) range, meaning that the range includes both the sales commissions/sales bonus target and annual base salary for the role. This salary range may be inclusive of several career levels at Apollo and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location. Applicants interested in this role who are not located in the US may request the annual salary range for their location during the interview process.
Additional benefits for this role may include: equity; company bonus or sales commissions/bonuses; 401(k) plan; at least 10 paid holidays per year, flex PTO, and parental leave; employee assistance program and wellbeing benefits; global travel coverage; life/AD&D/STD/LTD insurance; FSA/HSA and medical, dental, and vision benefits.
Tier 1 Pay Range (San Francisco, New York City, Seattle)
$218,600—$273,200 USD
Tier 2 Pay Range (All other US Locations)
$190,100—$237,600 USD
Apollo.io is an AI-native company built on a culture of continuous improvement. We’re on the front lines of driving productivity for our customers—and we expect the same mindset from our team. If you’re energized by finding smarter, faster ways to get things done using AI and automation, you’ll thrive here.
At Apollo, we’re driven by a shared mission: to help our customers unlock their full revenue potential. That’s why we take extreme ownership of our work, move with focus and urgency, and learn voraciously to stay ahead.
We invest deeply in your growth, ensuring you have the resources, support, and autonomy to own your role and make a real impact. Collaboration is at our core—we’re all for one, meaning you’ll have a team across departments ready to help you succeed. We encourage bold ideas and courageous action, giving you the freedom to experiment, take smart risks, and drive big wins.
If you’re looking for a place where your work matters, where you can push boundaries, and where your career can thrive—Apollo is the place for you.
Learn more here!
