Trabajos offensive security en New York, New YorkCrear alertas

Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. We are looking for a cybersecurity expert to lead our efforts to prevent AI misuse in the cyber domain. As a Cyber Harms Technical Policy Manager, you will lead a team applying deep technical expertise to inform the design of safety systems that detect harmful cyber behaviors and prevent misuse by sophisticated threat actors. Working closely with Research Engineers who build these safety systems, you and your team will provide the critical cybersecurity domain knowledge needed to ensure our safeguards are effective against real-world threats. You will be at the forefront of defining what responsible AI safety looks like in the cybersecurity domain, working across research, policy, and engineering to translate complex cyber threat concepts into concrete technical safeguards and actionable policies. This is a unique opportunity to shape how frontier AI models handle dual-use cybersecurity knowledge—balancing the tremendous potential of AI to advance legitimate security research and defensive capabilities while preventing misuse by malicious actors. • Lead and grow a team of technical specialists focused on cyber threat modeling and evaluation frameworks, • Design and oversee execution of capability evaluations ("evals") to assess the cyber-relevant capabilities of new models, • Create comprehensive cyber threat models, including attack vectors, exploit chains, precursor identification, and weaponization techniques, • Develop and iterate on usage policies that govern responsible use of our models for emerging capabilities and use cases related to cyber harms, • Serve as the primary domain expert on cyber harms, advising cross-functional teams on threat landscapes and mitigation strategies, • Collaborate closely with internal and external threat modeling experts to develop training data for safety systems, and with ML engineers to train these systems, optimizing for both robustness against adversarial attacks and low false-positive rates for legitimate security researchers, • Analyze safety system performance in traffic, identifying gaps and proposing improvements, • Conduct regular reviews of existing policies and enforcement systems to identify and address gaps and ambiguities related to cybersecurity risks, • Develop rigorous stress-testing of safeguards against evolving cyber threats and product surfaces, • Partner with Research, Product, Policy, Security Team, and Frontier Red Team to ensure cybersecurity safety is embedded throughout the model development lifecycle, • Translate cybersecurity domain knowledge into actionable safety requirements and clearly articulated policies, • Contribute to external communications, including model cards, blog posts, and policy documents related to cybersecurity safety, • Monitor emerging technologies and threat landscapes for their potential to contribute to new risks and mitigation strategies, and strategically address these, • Mentor and develop team members, fostering a culture of technical excellence and responsible AI development, • An M.S. or PhD in Computer Science, Cybersecurity, or a related technical field, OR equivalent professional experience in offensive or defensive cybersecurity, • 5+ years of hands-on experience in cybersecurity, with deep expertise in areas such as vulnerability research, exploit development, network security, malware analysis, or penetration testing, • 2+ years of experience managing technical teams or leading complex technical projects with multiple stakeholders, • Experience in scientific computing and data analysis, with proficiency in programming (Python preferred), • Deep expertise in modern cybersecurity, including both offensive techniques (vulnerability research, exploit development, penetration testing, malware analysis) and defensive measures (detection, monitoring, incident response), • Demonstrated ability to create threat models and translate technical cyber risks into policy frameworks, • Familiarity with responsible disclosure practices, vulnerability coordination, and cybersecurity frameworks (e.g., MITRE ATT&CK, NIST Cybersecurity Framework, CWE/CVE systems), • Strong analytical and writing skills, with the ability to navigate ambiguity and explain complex technical concepts to non-technical stakeholders, • Experience developing policies or guidelines at scale, balancing safety concerns with enabling legitimate use cases, • A passion for learning new skills and an ability to rapidly adapt to changing techniques and technologies, • Comfort working in a fast-paced environment where priorities may shift as AI capabilities evolve, • Track record of translating specialized technical knowledge into actionable safety policies or enforcement guidelines, • Background in AI/ML systems, particularly experience with large language models, • Experience developing ML-based security systems or adversarial ML research, • Experience working with defense, intelligence, or security organizations (e.g., NSA, CISA, national labs, security contractors), • Published security research, disclosed vulnerabilities, or participated in bug bounty programs, • Understanding of Trust & Safety operations and content moderation at scale, • Certifications such as OSCP, OSCE, GXPN, or equivalent demonstrating technical depth, • Understanding of dual-use security research concerns and ethical considerations in AI safety The annual compensation range for this role is below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Our total compensation package for full-time employees includes equity and benefits. Annual Salary: $320,000 - $405,000 USD Education requirements: We require at least a Bachelor's degree in a related field or equivalent experience. Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit _ directly for confirmed position openings. We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about _ for using AI in our application process

ISE is hiring an Embedded AI Content Security Engineer to partner with the team at select clients in the media and entertainment industry. This role is particularly focused on AI and machine learning security, though responsibilities extend across the technology stack, including infrastructure and application security. The term “embedded” refers to the collaborative, integrated nature of the work, not embedded systems or IoT devices. What you’ll do at ISE: • Act as a subject matter expert on AI security, advising internal teams and external partners on best practices related to AI/ML technologies, • Stay ahead of emerging trends in AI threats, particularly those relevant to media and entertainment workflows, • Lead initiatives to build and enhance offensive testing capabilities for both AI and non-AI applications, • Conduct in-depth technical assessments of AI-enabled systems and deliver actionable insights to technical and non-technical stakeholders, • Support broader security reviews, including infrastructure (on-prem and cloud), appli-cations, content editing/transfer platforms, and media workflows., • Publish secure configuration guidance and work with vendors to assess and improve their content protection strategies., • Dedicate 50%-100% of time per week to one large client, • Travel to the Los Angeles, CA area on a regular basis: once every one or two months What you bring to the table: • Bachelor's degree in Computer Science, Engineering, Data Science, or a related field (Master’s degree preferred), • 7+ years of experience in cybersecurity, preferably with a focus on offensive security and technical assessments, • Demonstrated experience designing and securing infrastructure and cloud-native applications, • Proficiency with major cloud platforms (AWS, Azure, GCP), especially with respect to deploying and evaluating AI/ML solutions, • Ability to distill complex security findings for a non-technical audience, • Solid understanding of traditional infrastructure security technologies, including storage, VPNs, firewalls, directory services, and endpoint protection, • AI/ML certifications (e.g., AWS Certified ML, Azure AI Engineer) are a plus, • Information security certifications such as CISSP, CCSP, OSCP are also beneficial. Salary: $140K-$170K, depending on experience. If you don't think you meet all the criteria above but are still interested in the job, please apply. Nobody checks every box, and we're looking for someone excited to join the team. What we bring to the table: • Check out joinise.io for full details, • Work that matters; projects that impact people’s everyday life and wellbeing, • Quality, integrity, dedication, and education: our core values, • Life balance: flexible schedule, work from home options, unlimited vacation, • $0 health premium plan option, including spouse and family, • Opportunities to research and publish, speak at major security events and conferences, • Leadership and peers that support and mentor you: your growth is our growth, your success is our success, • Relaxed and fun environment: ditch the suit and tie, sit or stand at your desk or find a sofa How you’ll learn at ISE: Everyone has a mentor, or two or three sometimes. We hold you and ourselves accountable for your advancement. You’ll learn directly from your mentor, your colleagues, resources vetted by the team, and at regular firetalk lunches by your peers – oh, and lunch is on us once a week in the office. You also have access to paid training, workshops, university courses, certification courses, and we’ll pay for the certs too. Want to learn a new skill that you aren’t currently using but want to? Great! Innovation is key–new technology is important. About ISE: ISE is an independent security consulting and software firm headquartered in Baltimore, Maryland, dedicated to securing high value assets for global enterprises and performing groundbreaking security research. Using an adversary-centric perspective driven by our elite team of analysts and developers, we improve our clients’ overall security posture, protect digital assets, harden existing technologies, secure infrastructures, and work with development teams to ensure product security prior to deployment. Our team enjoys working in a creative, educational, and comfortable environment where they can thrive professionally. Building a Better Community: We value different viewpoints and fresh perspectives. We embrace people who challenge our thinking and question the status quo. We are opposed to narrow minded, exclusionary, and discriminatory viewpoints or practices that inherently undermine our creative process, hinder growth, and impede innovation. Need more info? Be sure you spend some time at www.ise.io. Make sure you look through all the perks on the Careers page, then check out our Research and Blog, our events page for the IoT Village, and About page. Follow us on Twitter @ISEsecurity and @IoTvillage

At Hack The Box, we don’t just build cybersecurity training — we empower organizations to defend critical systems and national infrastructure. As a Federal BDR, you will play a frontline role in helping U.S. government agencies elevate their cyber workforce capabilities. This is your opportunity to directly impact national cyber resilience. 🇺🇸🔐🚀 The Federal BDR is responsible for building and qualifying pipeline across U.S. Federal Civilian, DoD, and related agencies. You will: • Identify and research target agencies aligned to HTB’s Federal ICP (DoD, DHS, DOJ, Treasury, Intelligence Community, etc.), • Map agency buying centers (CIO, CISO, Cyber Workforce Leads, Training Command, SOC Leadership), • Navigate contract vehicles (GSA, SEWP, IDIQs, primes/subs), • Engage in compliant outbound activity aligned to Federal acquisition cycles, • Qualify inbound and outbound opportunities using MEDDPICC, • Multi-thread across technical, operational, and procurement stakeholders, • Partner closely with Federal AEs and leadership to strategically build accounts, • Federal selling is strategic. It’s deliberate. It requires patience, research, and persistence. This role is classified as non-exempt and is eligible for overtime. The expected schedule for this role is Monday - Friday, 40 hours a week. Additional hours must be approved in advance. HTB follows all federal and state overtime regulations. • US – East Coast / Central US preferred, • Fully Remote, • Full-time, non-exempt You’ll report to the US BDR Leadership and work in tight alignment with the Federal AE team to execute strategic territory plans. This is not transactional outbound — this is strategic public sector engagement. You'll be part of a diverse revenue team, consisting of BDRs, AEs, Solution Engineers, Customer Success, and Marketing professionals. As a Business Development Representative at HTB, you'll report to our BDR Head (US-based), who will guide your growth in the role, while working closely with AEs in your region. Your Federal arsenal includes: • HubSpot, • Apollo, • LinkedIn Sales Navigator, • GovWin / public contract databases (where applicable), • Gong, • MEDDPICC frameworks, • Target account mapping tools, • You’ll combine modern outbound methodology with structured Federal account research., • Experience in B2B sales (Federal/Public Sector exposure preferred), • Understanding of U.S. Federal procurement processes (highly desirable), • Experience selling into or researching: DoD, Civilian agencies, Intelligence community, Federal system integrators, • Familiarity with structured sales methodologies (MEDDIC, SPICED, Challenger, Solution Selling), • Strong written communication skills tailored to government audiences, • Excellent account research and organizational discipline, • Comfort navigating long sales cycles, • Resilience, consistency, and intellectual curiosity Bonus points for: • Experience working alongside primes or resellers, • Understanding of Federal cybersecurity frameworks (NIST, FedRAMP, etc.), • 🎯You'll have the exhilarating opportunity to contribute to a product that is highly appreciated by users and the cybersecurity community at large., • 🎯 You'll experience a highly supportive and caring environment, fostering growth, flexibility, and autonomy., • 🎯 You'll embark on an exciting journey of continuous learning and problem-solving, leveling up as our organization grows., • 🎯 Most importantly, you'll have a blast at HTB 🥳 because fun is an essential ingredient in our recipe for success! Just wait until you see our global meet-ups!, • USD 85,000-100,000 OTE (70/30 split), • Medical, Dental & Vision (employee coverage 100% paid for by Hack The Box), • 401K w/ employer match, • Employer-paid Life and AD&D Insurance, • Supplemental Life Insurance, • Short-term and Long-term Disability, • Healthcare and Dependent Care FSA, • Paid paternity & maternity leave, • 25 annual leave days, • Home Office Allowance, • Dedicated budget for training and professional development, participation in conferences, • State-of-the-art equipment, • Full access to the Hack The Box lab offerings; so you can learn how to hack 😉, • Level 1: To complete level one’s objective, submit your application., • Level 2: Complete an asynchronous video interview, • Level 3: Meet the hiring team. Level’s objective: connect with the hiring team and share with them your achievements., • Level 4: Meet the hiring team, once again, to explore your sales skills and fit with the US Sales team, • Level 5: Connect with the Talent Acquisition team to close the loop, • Level 6: You've officially received an offer from HTB! To complete the last level and the Quest, all you need to do is accept the offer., • Quest complete. Congratulations, you’re officially one of us 🥳🎉🎇Your next quest: complete the onboarding. Hack The Box (HTB) is the cybersecurity upskilling and talent development platform trusted by individuals, enterprises, and government agencies to sharpen offensive and defensive capabilities. Powered by a vibrant global community and hands‑on, real‑world training, HTB helps security teams practice like attackers, validate skills continuously, and move faster against emerging threats. We’re scaling rapidly across the enterprise market—especially in Financial Services, MSSPs, and Technology—and we’re just getting started. If you’re excited to turn technical depth into crisp stories, to shape a category, and to fuel measurable growth in a fast, collaborative environment—come build with us. 🚨 Exciting News: • We are super proud to share that Hack The Box’s entities in the US, the UK & Greece have been certified as a Great Place to Work (2024-2026)., • Furthermore, Hack The Box’s Greek entity has been listed by the Great Place to Work Institute in the Top 5 of Best Workplaces for three consecutive years (4th, 2nd, 3rd), • On the European level, the Greek entity has been listed as Best Workplace in Europe for three consecutive years, • Take a sneak peek at and our . Get more insights about our HTB culture and employee experience by visiting the “” section of our site, our , and _. At Hack The Box, we are committed to fostering a diverse, inclusive, and equitable workplace. We believe that diversity enriches our performance, services, and the communities we serve. As such, we ensure that all job applications are considered solely based on merit, skills, and qualifications. We do not discriminate on grounds of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We are dedicated to providing a fair and respectful work environment that reflects our values. Hack The Box participates in E-Verify. For more information, please click and

Our security program is driven by our collective offensive security experience: breaking into systems at other companies (in white-hat capacities), responding to real security incidents, and learning from other companies’ data breaches. Excellent communication and collaboration skills, particularl

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, _, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. HackerOne is looking for a Director, Product Design to lead and scale our design function as we build the next generation of AI-native security products. In this role, you will guide a team of designers responsible for shaping intuitive, high-impact experiences across the HackerOne platform while helping organizations discover and remediate vulnerabilities faster and more effectively. Reporting to the Chief Product Officer, you will play a central role in defining how design evolves in a world where software creation is becoming increasingly AI-driven. You will help inspire and lead the organization toward a design-first mindset—one where design thinking becomes a core pillar of how complex systems are imagined, built, and operated. As HackerOne evolves its platform around Continuous Threat Exposure Management (CTEM), you will help define the next generation of human-computer interaction, where intelligent agents increasingly act as the primary workforce. In this future, systems will be designed for agent-to-agent interaction at scale, while humans serve as trusted partners providing oversight, accountability, and strategic decision-making. Your work will also focus on designing visualization and interaction models that simplify complex workflows, enable confident decision-making, and make advanced security workflows accessible to both machines and humans. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston, MA; Seattle, WA; San Francisco Bay Area; Austin, TX; Washington, DC; or London, UK. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. Success in the Director, Product Design role will be accomplished by delivering on the responsibilities below in alignment with the principles that define how we work at HackerOne. Inspire and guide the organization toward a design-first mindset, helping teams embrace design thinking as a core discipline in building complex AI-native systems and shaping the future of HackerOne’s platform. Lead and develop a team of product designers, creating the systems, processes, and leadership culture that Multiply Your Impact across the product organization while enabling designers to deliver high-quality experiences at scale. Partner with Product, Engineering, and executive leadership to define the long-term vision for how design shapes AI-native security platforms, ensuring teams consistently Own the Outcome for product usability, clarity, and customer impact. Champion an AI First approach to product design by creating interaction models, workflows, and experiences where intelligent agents perform the majority of operational work while humans provide trust, oversight, and strategic decision-making. Design the future of human-computer interaction in HackerOne platform by defining patterns for agent-to-agent interactions, human-in-the-loop oversight, and transparent AI systems that support trust and accountability. Lead the development of visualization strategies that simplify complex security use cases, enabling users to understand risk, prioritize actions, and make informed decisions across highly complex workflows. Apply First Principles Problem Solving to rethink traditional security workflows, designing systems that simplify complexity and unlock new ways for humans and AI agents to collaborate effectively. Use Data-Driven Decision Making to guide design priorities, evaluate product experience outcomes, and continuously improve usability, adoption, and platform effectiveness. Establish and scale a product design system that enables consistent user experiences, accelerates product development, and supports the evolution of AI-native product interactions across the HackerOne platform. 10+ years of experience in product design, including leadership roles within B2B SaaS product organizations Demonstrated experience leading and developing high-performing product design teams Experience designing AI-enabled or AI-native product experiences, including human-in-the-loop workflows, automation systems, or intelligent decision-support tools Experience scaling design functions within high-growth SaaS environments Proven success building or scaling product design systems for complex software platforms Experience designing products for developer platforms, security platforms, or technical user audiences Background working in the cybersecurity or security research ecosystem Experience designing AI-assisted workflows that combine automation with expert human decision-making Background in Human–Computer Interaction (HCI) or experience designing interaction models for complex systems, human-AI collaboration, or agent-driven workflows Compensation Bands: San Francisco $270K – $300K • Offers Equity $243K – $297K • Offers Equity $137K – $168K • Offers Equity #LI-remote Health (medical, vision, dental), life, and disability insurance* Equity stock options Retirement plans Paid public holidays and unlimited PTO Paid maternity and parental leave Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act) Employee Assistance Program *Eligibility may differ by country We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with _ as our Employer of Record (EOR). Visa/work permit sponsorship is not available. Employment at HackerOne is contingent on a background check. HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws. This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time. For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

Job DescriptionCoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com.What You'll Do: CoreWeave is going through very significant growth as we scale to support our customers, and we need to build the next generation security tools to help us defend against vulnerabilities as they arise. We are seeking an experienced leader to join our team as Senior Manager, Vulnerability Management. This person is responsible for running, evolving, and operating CoreWeave's vulnerability management program and personnel, working with cross-functional teams as well as peer engineering stakeholders to measure, maintain, and improve the security posture of CoreWeave. In this role, you will: • Create and oversee the execution of vulnerability management policies and procedures (e.g. patching), • Establish and meet Service Level Objectives for both enterprise security and product impacting vulnerabilities, • Create and ensure adherence to procedures for notifying both the business and clients (where applicable) about risk and impacts from security vulnerabilities, • Communicate and coordinate with other teams to triage and remediate vulnerabilities in first and third-party software and software dependencies, • Act as a liaison between other teams (Hardware, Application Security, Offensive Security) to appropriately assign, follow, and close security ticketsWho You Are:, • Experience establishing and maintaining a vulnerability management program at scale, • Ability to drive a team of vulnerability security engineers and analysts to focus on identifying, triaging, and assisting in remediating vulnerabilities, • Ability to risk assess and distinguish what a critical or high impacting vulnerability is within CoreWeave's environment and drive appropriate remediations across multiple engineering and IT teams when necessary, • Knowledge and experience with the identification and remediation of CVEs within a large infrastructure deployment, • Extensive experience with Linux OS environments, • Hands-on experience managing security tool servers in a large environment, including routine Linux and Windows patching and application patching/upgrades, • Experience managing/troubleshooting server, workstation, local EDR, anti-virus software, and log analysis as it relates to security compliance, • Strong technical background and experience with cyber toolingPreferred:, • Experience operating and maintaining enterprise-level information security tools, • Proven experience in Systems Administration, including server & workstation troubleshooting, • Knowledge and experience with cloud-based infrastructures and network concepts/protocols, • Familiarity with Linux operating systems, • Security+, Network+ certifications, • Experience with container orchestration technologies such as Kubernetes, • Familiarity with sending Requests for Proposals (RFPs) for new cyber tooling, • Experience creating and presenting technical strategies and solution recommendations, • Experience designing, implementing, and integrating new technologies into existing portfolios, • Experience collaborating with cross-functional teams, including engineering, • Any of the following certifications: GREM, GPEN, GCED, CEH, GSEC, OSCP Wondering if you're a good fit? We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren't a 100% skill or experience match. Why CoreWeave? At CoreWeave, we work hard, have fun, and move fast! We're in an exciting stage of hyper-growth that you will not want to miss out on. We're not afraid of a little chaos, and we're constantly learning. Our team cares deeply about how we build our product and how we work together, which is represented through our core values: • Be Curious at Your Core, • Act Like an Owner, • Empower Employees, • Deliver Best-in-Class Client Experiences, • Achieve More Together We support and encourage an entrepreneurial outlook and independent thinking. We foster an environment that encourages collaboration and enables the development of innovative solutions to complex problems. As we get set for takeoff, the organization's growth opportunities are constantly expanding. You will be surrounded by some of the best talent in the industry, who will want to learn from you, too. Come join us! The base salary range for this role is $188,000 to $275,000. The starting salary will be determined by job-related knowledge, skills, experience, and the market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings; for roles in other locations, benefits vary and are shared during the hiring process. These include: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment, • A work culture focused on innovative disruption California Applicants California Consumer Privacy Act Equal Opportunity & Accommodations CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: careers@coreweave.com. Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job DescriptionCompany Description Sia is a next-generation, global management consulting group. Founded in 1999, we were born digital. Today our strategy and management capabilities are augmented by data science, enhanced by creativity and driven by responsibility. We’re optimists for change and we help clients initiate, navigate and benefit from transformation. We believe optimism is a force multiplier, helping clients to mitigate downside and maximize opportunity. With expertise across a broad range of sectors and services, our 3,000 consultants serve clients worldwide from 48 locations in 19 countries. Our expertise delivers results. Our optimism transforms outcomes. Sia’s Cybersecurity team is the powerhouse of our firm’s innovation. With over 350 experts worldwide, we tackle projects from proof-of-concept to large-scale deployment, always pushing the boundaries of AI capabilities. By joining Sia’s Cybersecurity team, you’ll step into a vibrant, collaborative environment that nurtures professional growth and empowers you to shape the future of consulting. Job Description You will join Sia Partners’ Cybersecurity, Data Protection and Resilience Global Business Line. In accordance with your skills and expertise, you will work - in Consulting, Implementation and Audit - on one or more of our following offers: Strategy, Risk, Compliance, Operations, Data Protection, Offensive Security, Resilience and Training. Key Responsibilities • Manage end-to-end projects or be responsible for sub-projects of a complex and/or international project, on which you will ensure relevant, proactive and regular reporting to the Manager and Client to ensure that our commitments are met., • Take part in business development through the design and development of commercial proposals, as well as by identifying new opportunities and clients., • Manage the client relationship on your missions and build a solid relationship with your contacts on the client side, at middle management level, who recognize you as an expert for your assigned tasks., • You will be responsible for the management of consultants in the context of missions or internal projects, where you will act as a reference and relay for the Manager/Senior Manager regarding the follow-up of projects, the validation of deliverables, the evaluation of achievements, and above all you will ensure the development of their soft and hard skills. In addition, as part of your participation in the internal development of the firm, you will contribute to: • Innovation within our Sia CyberLab, where you will work on the development of new offers and SaaS solutions around advanced technologies and capitalizing on our unique know-how in AI. You will also carry out benchmarks and PoC of Cyber solutions on the market, while participating in the active monitoring of Cyber news., • The firm's eminence, around our Cybersecurity expertise, by actively contributing to the publication plan (articles, white papers, studies, webinars, etc.), and represent the firm at various professional clubs, trade shows and events. Qualifications Graduated with a Cybersecurity degree or a related field from an accredited college/university, you have at least 3 years of experience with a consulting firm or a Cybersecurity solutions/services provider/integrator. • You master some Cybersecurity standards, norms and/or reference systems of the market, notably ISO 270xx, SANS, NIST, etc., • You have actively participated in successful projects/missions where you have developed a solid knowledge of at least two of our 8 offerings listed above;, • You have a general knowledge of IP networks, operating systems (Unix/Linux, Windows and/or MacOs), Cloud (AWS, Azure and/or GCP), applications (Web Server, DB, Middleware, etc.) as well as cryptography; knowledge in Blockchain would be a real plus;, • You are familiar with the major market solutions and technologies of: Endpoint Security, VPN, VSX, Proxy/Reverse Proxy, EDR, IAM, MDM, DLP, CASB, Office 365 Security, etc.;, • CISSP, Security + OSCE, OSEE, OSCP, OSWE, CCSP, SSCP, CSSLP, HCISPP, CISM, C-CISO, CISA, SANS SECXXX, CEH, LTP, GCIH, GCFA, GPEN, GXPN, GWAPT, GCFE, GCIA, ISO 27001 LI/LA, ISO 27005 RM, ISO 22301 LI/LA, AWS Certified Security, M-AZ 500 Preferred *An exception will be made for high potential profiles who do not have these certifications. They will join our internal Cyber Training program within the Sia Cyber Institute for the preparation of Cybersecurity certifications. Attributes for Success • You actively participated in successful projects where you have developed expertise around the missions listed in the job description, • You have an excellent culture in Cybersecurity and dispose of a strong appetite for solving complex technical problems, • You are a supportive team player who actively develops relationships and is eager to share knowledge with colleagues and our clients, • You are intellectually curious and have the entrepreneurial spirit to invest in the development of innovative offers and solutions, • You wish to join a stimulating and fulfilling professional environment, where you will share the values of expertise, innovation, customer satisfaction and a results-oriented culture, • You wish to evolve quickly and take responsibilities on high stakes subjects within a young, dynamic and supportive team, • You have a strong drive and commitment to deliver high quality work while ensuring that client expectations and deadlines are met. Additional Information Compensation & Benefits We believe in supporting our team professionally and personally. Here’s a snapshot of the comprehensive benefits you’ll enjoy as part of Sia. Competitive Compensation Annual base salary between $130,600 to $135,700 (commensurate with experience and qualifications) Annual performance based discretionary bonus Robust Health Coverage 3 Medical plans Dental and Vision Life, AD&D and other voluntary insurance Tax-Advantaged Accounts 401K retirement plan 4% matching and 100% vested upon enrollment Health Savings Account (HSA) Flexible Spending Account (FSA) Health, Dependent Care, Commuter Family Friendly Benefits 100% paid parental leave for all new parents with eligible tenure Building Healthy Families program if enrolled through Medical plan Time Off to Recharge Generous Paid Time Off (PTO) policy 9 company holidays plus 1 floating holiday Extras that Make Life Easier College savings and student loan repayment assistance Monthly cell phone stipend Access to wellness programs at no cost if enrolled through Medical plan, including: Gym membership reimbursement LiveHealth Online virtual care Personalized support from a Well-being Coach Employee Assistance Program at no cost Free confidential counseling and emotional support services On-demand access to Emotional Well-being resources (ranging from relaxation techniques to stress management) Diversity, Equity, Inclusion & Belonging At Sia, we believe in fostering a diverse, equitable and inclusive culture where our employees and partners are valued and thrive in a sense of belonging. We are committed to recruiting and developing a diverse network of employees and investing in their growth by providing unique opportunities for professional and cultural immersion. Our commitment toward inclusion motivates dynamic collaboration with our clients, building trust by creating an inclusive environment of curiosity and learning which affects lasting impact. Please visit our website for more information. Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs. Office Workplace Guidelines Sia is committed to providing a flexible workplace environment that supports client, business, and market needs. Consultants located in our primary market office locations—New York City, Charlotte, Seattle, and San Francisco- are expected to live within a reasonable commuting distance and attend the office at least three days or more per week. For Consultants outside of our primary markets, we can offer more flexible in-person requirements in accordance with your location. Work Authorization & Sponsorship At this time, Sia does not intend to employ any applicant who will require, either now or in the future, employment visa sponsorship or sponsorship for work authorization (i.e., H1-B visa, F-1/OPT) or STEM OPT, TN, etc). Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.

*Applicants must be authorized to work in the U.S. for any employer. *We cannot sponsor employment-based visas at this time. Let’s Tango! Where Innovation Meets Impact. At Tango we’re all about helping businesses make smarter decisions through powerful technology, insightful data, and a whole lot of collaboration. Whether you're a creative thinker, a strategic planner, a tech wizard, or a customer champion, there's a place for you on our team. We believe work should be meaningful and fun — so if you're ready to make a difference while enjoying the journey, come join us and let's Tango! About the Role: We’re hiring a Staff Security Engineer, a senior, polyglot, full-stack Application Security Engineer who not only uncovers vulnerabilities but also goes into application and infrastructure codebases to fix them. You will partner with product and engineering teams to champion secure design, automate developer workflows, and scale AppSec as an engineering-first discipline. Responsibilities: • Perform hands-on security work across the stack: code reviews, threat modeling, vulnerability hunting, and remediation in production services., • Own end-to-end remediation for complex findings: from exploit proof-of-concept to code-level fixes and automated CI checks., • Build and maintain developer-first security tools, automation, and self-service capabilities (SAST rules, IaC scanning, dependency/OSS policies, CI/CD gates)., • Lead threat modeling sessions and secure design reviews for new product initiatives and platform changes., • Collaborate with SRE and Platform teams to harden runtimes, secrets management, identity, and authentication flows., • Mentor and coach engineers on secure coding, secure-by-default patterns, and incident learnings., • Contribute to security metrics and visibility (vulnerability backlog, mean time to remediate, coverage of automated tests). About You: • 10+ years software engineering and application security experience (or equivalent), with deep hands-on polyglot coding experience across at least two major languages (e.g., Java, Python, Go, JavaScript/TypeScript, C#)., • Demonstrated ability to both find security issues (offensive skills) and implement fixes across app and infra codebases (defensive skills)., • Experience building developer-friendly AppSec programs and integrating security tooling into CI/CD pipelines., • Familiarity with cloud platforms (AWS, GCP, Azure) and container/Kubernetes security practices., • Strong communication skills and experience mentoring engineers across multiple teams., • Comfort with threat modeling, secure design patterns, PKI/identity flows, OAuth/OIDC, and authentication hardening., • Experience working at scale in B2B SaaS environments; prior experience at developer-focused security companies or engineering-forward startups is a plus., • Bachelor’s degree in computer science or a related field Nice to have • Open-source security contributions, published tooling, or participation in security communities., • Experience with program-level security metrics, vulnerability triage frameworks, and compliance programs (e.g., SOC2, FedRAMP context). What We Offer We’re committed to creating an environment where you can thrive—professionally and personally. Our offerings include: • Competitive Compensation We recognize and reward your contributions with a salary package that reflects your value., • Comprehensive Benefits Including health, dental, and vision insurance, a 401(k) plan with company match, and generous paid time off to support your well-being., • Flexible Work Environment Whether remote, hybrid, or in-office, we support work arrangements that promote productivity and balance., • Inclusive & Collaborative Culture We foster a workplace where diverse perspectives are valued, teamwork is encouraged, and everyone has a voice. Tango is proud to be an equal opportunity employer. We are committed to equal opportunity regardless of race, ethnicity, religion, parental status, sexual orientation, age, citizenship, disability, or veteran status. Base pay offered is contingent on qualifications and other operational considerations. Base pay is just one piece of the full compensation structure offered at Tango. If this pay range is outside of your expectations, we still encourage you to apply and have a conversation with us. Base pay offered for this position is: $140,000 – 200,000 (USD)

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, _, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. As a Customer Success Manager at HackerOne, you will own a portfolio of customers, driving retention, satisfaction, and long-term value. You will partner closely with customers to understand their goals, guide them in maximizing the value of HackerOne’s platform, and ensure successful renewals. This role is critical to delivering a seamless customer experience and strengthening HackerOne’s position as a trusted security partner. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Austin, TX or Seattle, WA. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. Success in this role will be accomplished by delivering on the responsibilities below in alignment with the Values and Principles that define how we work at HackerOne: Manage a portfolio of customer accounts, strengthening engagement and retention by proactively identifying risks and opportunities, demonstrating Own the Outcome for customer success metrics and renewal performance. Build scalable workflows and leverage automation tools to improve efficiency and consistency in customer interactions, applying an AI First mindset to enhance productivity and customer outcomes. Adapt to evolving customer needs and organizational priorities with Change Agility, maintaining strong relationships and continuity during periods of change or ambiguity. Use Data-Driven Decision Making to monitor account health, analyze usage trends, and inform strategies that improve retention, expansion, and customer satisfaction. Apply First Principles Problem Solving to identify root causes of customer challenges, simplifying complex issues and developing clear, effective solutions. Partner cross-functionally with Sales, Product, and Engineering to advocate for customer needs, share insights, and improve the overall customer experience. Lead onboarding and adoption efforts, ensuring customers successfully integrate HackerOne’s solutions and realize value quickly. 2–3 years of experience in Customer Success, Account Management, or a related role in SaaS or technology environments Experience managing customer relationships and supporting renewals or retention strategies Proficiency with CRM tools and ability to analyze customer data to inform decisions Strong communication skills, with the ability to explain technical or complex concepts clearly Experience in cybersecurity or security-focused SaaS environments Familiarity with data analysis and reporting tools to track customer performance and outcomes Experience supporting onboarding or customer adoption programs Basic project management experience coordinating cross-functional initiatives Compensation Bands: _ Tier B: $100k base plus 10% variable #LI-Remote #LI-KM1 Health (medical, vision, dental), life, and disability insurance* Equity stock options Retirement plans Paid public holidays and unlimited PTO Paid maternity and parental leave Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act) Employee Assistance Program *Eligibility may differ by country We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with _ as our Employer of Record (EOR). Visa/work permit sponsorship is not available. Employment at HackerOne is contingent on a background check. HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws. This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time. For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

Finite State partners with product security teams, the guardians of our connected world, to create transparency for their connected devices and supply chains. Our platform handles connected devices and embedded systems across all industries, including those found in enterprises, healthcare, utilities, connected vehicles, manufacturing facilities, critical infrastructure, and government entities. We are a fast-growing series-B company with a fully distributed workforce. Led by a team of seasoned experts, we are a mission-driven team passionate about arming our customers with the actionable insights, critical vulnerability data, and remediation guidance necessary to mitigate product risk and protect the connected attack surface. We are committed to a remote first culture. MANAGER, PRODUCT SECURITY TECHNICAL MANAGED SERVICES SUMMARY • Operational leader accountable for hands-on management, planning, and delivery of all Finite State Product Security Technical Managed Services binary firmware analysis, device penetration testing, threat and risk assessments (TARAs), SBOM/SCA generation, vulnerability response coordination, triage and remediation, and long-term engagement support for connected product OEMs and manufacturers (strategic accounts), • Drives operational design, build-out, and scale of new and emerging managed services PSIRT-as-a-Service (PSIRTaaS), EU Cyber Resilience Act (CRA) sustainable compliance, and adjacent offerings with Finite State's AI Product Security Automation Platform as the delivery spine, • Direct people manager for the Technical Services team, accountable for hiring, onboarding, mentorship, performance management, capacity planning, skills development, and utilization optimization across a multi-disciplinary team of product security engineers and analysts, • Customer-facing managed services delivery leader accountable for engagement quality, technical accuracy, schedule adherence, customer satisfaction, renewal, and expansion across the active managed services portfolio, • Cross-functional partner to Product, Engineering, Sales, Marketing, Legal, and Regulatory Advisory Services Team, channeling field-level delivery experience into platform requirements, packaging and pricing, go-to-market enablement, and regulatory positioning ESSENTIAL FUNCTIONS Managed Service Delivery Operations • Manages day-to-day execution of all active managed technical services customer engagements; ensures delivery quality, technical accuracy, schedule adherence, and consistent application of Finite State methodology across binary analysis, penetration testing, TARA, SBOM/SCA, vulnerability management, and remediation advisory, • Owns the full engagement lifecycle: scoping, statement of work, kickoff, execution, deliverable review, customer communications, and renewal/expansion planning, • Establishes, maintains, and continuously improves service delivery playbooks, technical methodologies, deliverable templates, peer review gates, and quality acceptance criteria, • Drives consistent integration of Finite State automation platform into every engagement; ensures platform capabilities are leveraged to maximum effect and that field experience feeds the platform roadmap, • Defines, monitors, and reports Service Level Agreements (SLAs), Service Level Objectives (SLOs), and engagement-level KPIs including billable utilization, time-to-deliverable, defect/escape rates, customer satisfaction (CSAT/NPS), and renewal rate, • Acts as senior technical escalation point for engagement issues, customer concerns, and complex or contested technical findings New Service Build-Out and Operationalization • Leads operational design and standup of new product security managed service offerings — PSIRTaaS, EU CRA sustainable compliance, and other emerging services — including process design, runbook authoring, tooling integration, staffing model, pricing inputs, contractual scaffolding, and SLA framework, • Partners with Product to ensure platform capabilities required for new managed services are scoped, prioritized, instrumented, and operationalized for service delivery, • Designs and operates the customer-facing PSIRTaaS function: continuous vulnerability monitoring, automated and human-assisted triage, advisory issuance, CVE coordination with the appropriate CNA, customer disclosure workflow, remediation tracking, and post-disclosure verification, • Builds the operating model for sustainable EU CRA compliance services: conformity assessment support, Annex I essential requirements mapping, vulnerability handling obligations, technical documentation maintenance, and post-market surveillance support for connected product manufacturers People Management and Team Development • Hires, onboards, develops, mentors, and retains a team of product security engineers and analysts across multiple technical disciplines (binary/firmware analysis, offensive security, embedded systems, SBOM/SCA, regulatory engineering, vulnerability management), • Sets individual performance objectives aligned to team and company OKRs; conducts regular 1:1s, delivers ongoing performance feedback, runs formal review cycles, and addresses performance issues directly and constructively, • Builds and maintains team capacity plans and skills inventories; identifies gaps and drives hiring, cross-training, certification, and external training plans to close them, • Manages utilization across the team to balance billable engagement work, capability development, and reserved capacity for new service launches and surge demand, • Cultivates a culture of technical excellence, intellectual honesty, customer empathy, peer review, and continuous learning; fosters psychological safety in a fully remote operating environment Customer Engagement and Account Management • Serves as senior delivery contact and trusted technical advisor for strategic customer accounts; owns the technical health of those relationships, • Leads recurring service reviews, escalation discussions, and quarterly business reviews; ensures customer outcomes are visible, measurable, and tied to renewal and expansion narratives, • Partners with Sales on scoping, statements of work, pricing alignment, and pre-sales technical engagement; provides expert input to deal qualification and risk, • Identifies and qualifies expansion opportunities (additional products, additional service lines, multi-year commitments) and works with Sales to convert them Financial and Operational Performance • Owns operational delivery against the Services ARR plan; accountable for margin discipline, utilization targets, and forecast accuracy, • Provides input to pricing, packaging, and capacity planning for current and new service offerings, • Tracks and reports delivery cost, gross margin per engagement, write-down and write-off rates, and other services-economics metrics; surfaces structural issues with concrete remediation proposals, • Produces timely, accurate forecasts of staffing, hiring, and external contractor needs against the demand pipeline QUALIFICATIONS EDUCATION AND/OR EXPERIENCE • Bachelor's degree in Computer Science, Mathematics, Physical Sciences, Electrical/Computer Engineering, or equivalent demonstrable experience and certifications; advanced degree desirable, • Minimum 8 years of relevant experience in product security, embedded/connected device security, application security, or offensive security — a meaningful portion delivered in a customer-facing services, consulting, or managed services context, • Minimum 4 years of direct people management experience, including hiring, performance management, mentorship, and team development, • Demonstrated experience standing up new service offerings or productizing technical capabilities within a managed services or information technology environments is strongly preferred, • Hands-on technical depth in two or more of: binary/firmware analysis, penetration testing of embedded or IoT systems, threat modeling and TARA, SBOM and software composition analysis, vulnerability management and disclosure (CVE/CNA workflows), PSIRT/ESIRT operations KNOWLEDGE, SKILLS, ABILITIES Technical • Deep working knowledge of connected and embedded device security, including firmware, microcontrollers, wireless SoCs, RTOS environments, and integrated IoT systems, • Hands-on familiarity with binary and firmware analysis tooling and methodology (Ghidra, IDA, Binary Ninja, radare2, and platform-driven equivalents), • Strong understanding of SBOM standards (SPDX, CycloneDX), VEX, software composition analysis, and vulnerability correlation against CVE/CPE/PURL, • Strong understanding of vulnerability disclosure and PSIRT operating models, including ISO/IEC 29147 (vulnerability disclosure) and ISO/IEC 30111 (vulnerability handling), CVSS v3.1/v4, and CNA operating procedures, • Familiarity with offensive security methodology applied to embedded systems, including hardware-adjacent attacks (fault injection, side-channel concepts, debug interface exploitation) at a depth sufficient to scope, review, and quality-control the work, • Working knowledge of TARA methodologies (ISO/SAE 21434 for automotive, IEC 62443-3-2 for industrial, MITRE ATT&CK and EMB3D where applicable), • Working knowledge of applied cryptography, secure protocols, secure boot, secure update, and key management as applied to embedded systems, • Ability to ramp quickly on AI and agentic AI platforms and productivity systems; familiarity with the automated firmware/binary analysis platform category and AI-assisted vulnerability triage is preferred Standards and Regulatory • Working knowledge of EU Cyber Resilience Act (CRA), including Annex I essential requirements, vulnerability handling obligations, conformity assessment routes, and post-market surveillance expectations, • Working knowledge of IEC 62443, ETSI EN 303 645, NIST IR 8259 series, NIST SSDF (SP 800-218), and US Executive Order 14028 / OMB M-22-18 SBOM requirements, • Familiarity with ISO 27001, SOC 2 Type I/II, and adjacent compliance regimes as they apply to a managed services delivery organization Managed Services Operations • Demonstrated ability to design and operate service delivery functions to defined SLAs, SLOs, and quality standards, • Demonstrated ability to manage utilization, capacity, and engagement profitability in a billable services context, • Strong project and program management capability Leadership and Communication • Excellent written and verbal communication skills; operates fluently with executives, technical individual contributors, customer technical staff, customer executives, regulators, and partners, • Strong people leadership: hiring, coaching, performance management, conflict resolution, and team building in a fully remote environment, • Demonstrated ability to translate technical findings into business and regulatory consequences for non-technical stakeholders, • Customer-facing executive presence: owns escalations, leads difficult conversations, and represents Finite State at the most senior levels of customer organizations Certifications • One or more of the following is required: CISSP, CSSLP, CCSP, GIAC (GPEN/GXPN/GREM/GICSP), OSCP, or equivalent demonstrated technical depth, • One or more of the following is desirable: CISM, CRISC, CISA, ISO/IEC 27001 Lead Auditor or Lead Implementer, IEC 62443 Cybersecurity Expert, PMP/PgMP, ITIL Foundation or higher Tools and Environments • Familiarity with vulnerability analysis and reverse engineering tools, • Familiarity with SAST/DAST/IAST tooling categories, • Familiarity with offensive security tooling, • Familiarity with collaboration and delivery tooling, • Comfort operating in a fully remote, cloud-only company environment Our salary ranges are categorized into two tiers based on geographic location: • Tier 1 (San Francisco, New York, Seattle): $200,000 - $215,000, • Tier 2 (All Other Locations): $190,000 - $207,000 The final base salary will be determined by experience, skill set, and specific location. In addition to base pay, this role is eligible for equity and benefits. At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers. We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. CLARITY is how we move fast without breaking trust. • C - Customer first - Learn from customers. Ship with urgency., • L - Leverage - Outsource the routine. Own the result., • A - Agency - We take responsibility—end to end., • R - Results - Ship value. Improve fast., • I - Integrity - Speak up. Experiment boldly. Be kind., • T - Transparency - Clear context. Faster decisions., • Y - "Why" - Our mission—securing the connected products humanity depends on—is the reason Finite State exists. CLARITY is how we make that mission real, every day, at speed Bold Innovation – We push boundaries, explore new ideas, and take initiative to solve complex problems. The Finite State platform brings visibility and control to the supply chains that create connected devices and embedded systems—all in a simple to use platform and at the scale manufacturers need to keep device production on time and on budget. After unpacking and analyzing every file, configuration, and setting in a firmware build, the platform generates a complete bill of materials for software components, identifies known and 0-day vulnerabilities, shows a contextual risk score, and provides actionable insights that product teams can use to secure their software We are proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Finite State is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.

Get to Know Us Horizon3.ai is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find and fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by ITOps/SecOps teams, consulting pentesters, and MSSPs and MSPs. We are a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results. Summary We're looking for a Webapp Offensive Security Engineer with deep, hands-on web application penetration testing experience to push our autonomous testing beyond what it can do today. You'll be testing real customer web applications — not just labs and benchmarks — using NodeZero as your starting point and then going further as the human expert: hunting the edge cases, novel attack chains, and business-logic flaws that automated testing doesn't yet handle, proving them out safely against live targets, and working shoulder-to-shoulder with our software engineers to turn each discovery into durable product coverage that benefits every customer. This is a pentesting-first role. You won't be expected to architect platform internals or ship production features yourself — you'll be the offensive expert who tests live customer applications, finds the gaps NodeZero doesn't yet cover, demonstrates them, defines what "good" looks like, and partners with engineering to close them. If you love breaking real web apps by hand, get satisfaction from finding what scanners miss, and want your tradecraft to scale to thousands of customers through the product, this role is for you. Essential Functions Perform hands-on, full-scope web application penetration tests against real customer applications, alongside benchmark and lab targets, to surface vulnerabilities and attack paths. Review NodeZero results on live customer engagements to identify coverage gaps, blind spots, and missed opportunities — the edge cases and corner-case attack scenarios that autonomous testing doesn't yet handle. Manually reproduce and validate those edge cases, building reliable, production-safe proof-of-concept exploits and clear test cases that demonstrate the gap end to end — including against live customer environments without disrupting them. Partner closely with software engineers to translate your findings into product improvements — defining detection logic, attack content, expected behavior, and remediation so NodeZero handles those cases going forward. Build and maintain a library of regression and benchmark test cases so newly added coverage doesn't silently regress over time. Monitor production pentests for missed findings and false positives; create and triage Jira tickets to drive issues to resolution. Work directly with customers and internal teams to investigate findings, explain attack paths, and address questions about web application coverage and results. Author technical blog posts and research write-ups showcasing new exploits, edge cases, and attack methodologies. Mentor teammates and contribute to continuous improvement of team processes, methodology, and testing standards. Competencies/Requirements Extensive hands-on experience conducting full-scope web application penetration tests. Deep, practical knowledge of common and not-so-common web vulnerability classes — SQL injection, XSS (reflected, stored, and DOM-based), SSRF, SSTI/CSTI, IDOR/BOLA, authentication and authorization bypass, path traversal, LFI, and similar — including how to chain them to demonstrate impact. A talent for finding and exploiting business-logic and edge-case flaws that automated scanners routinely miss. Strong command of proxy tools like Burp Suite and browser developer tools. Comfort scripting to reproduce findings and build proof-of-concept exploits (e.g., Python or similar) — you don't need to be a professional software engineer, but you should be able to write and read code well enough to demonstrate an exploit and collaborate effectively with engineers. Ability to clearly communicate attack steps, impact, and remediation guidance to both engineers and non-technical stakeholders. Curiosity about emerging AI technologies and comfort using AI-assisted tools in your testing and research workflow. Strong written and verbal communication, including technical documentation. Ability to manage multiple priorities, work independently, and mentor teammates of varying experience levels. Quick to learn and adopt new technologies, frameworks, and target stacks as needed. History of recognized security research, including documented CVE discoveries and responsible disclosure. Track record of successful bug bounty contributions. Desired/Nice to Have Familiarity with how autonomous, agentic, or AI-driven pentesting tools work — and a sharp instinct for where and why they fail. Experience writing detection or attack content (e.g., Nuclei templates, sqlmap tamper scripts, custom Burp extensions). Enough software development background to collaborate fluently with engineers on remediation and product coverage. Familiarity with relational and graph databases, particularly Postgres and Neo4j. Experience with AI/LLM tools for building agentic workflows (e.g., LangChain, LangFlow) and integrating contextual data using protocols like Model Context Protocol (MCP). Expectations: Outstanding problem-solving aptitude and a relentless curiosity for how things break. Self-motivated and highly energetic, with the ability to operate effectively with limited supervision and guidance. Work with our engineers and security researchers to turn manual discoveries into reliable, production-safe product capabilities. Strong technical documentation and communication skills. Document findings, methodologies, and recommendations for both technical and non-technical stakeholders. What makes you stand out: A portfolio of novel web application research, exploits, or edge-case findings you can walk us through. Demonstrated examples of using AI to enhance or accelerate your testing and exploit development. OSCP, OSWE, or comparable offensive security certifications. Perks of Horizon3.ai Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive. Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities. Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking. Hybrid & Remote Work: We embrace a mix of remote and hybrid work models depending on role and location, including our Chicago office, where some roles require regular in-office presence. Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave. Compensation and Values At Horizon3, we believe that our people are our greatest asset, and our compensation philosophy reflects this core value. We are committed to fostering an environment where all employees feel valued, respected, and rewarded for their contributions. Our compensation structure is designed to be fair, competitive, and transparent, ensuring that every team member is recognized and compensated equitably across roles, levels, and locations. In accordance with various State’s transparency regulations, we provide the following salary range information for this position: Base salary range: $196,000 - $242,000. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills. Additional compensation: All full-time roles are eligible for an equity package in the form of stock options. You Belong Here Horizon3 is not just an equal opportunity employer - we are a community that values diversity, equity, and inclusion as fundamental principles of our culture and success. We are dedicated to fostering a workplace where everyone feels welcome and respected, regardless of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, or any other legally protected status by law. Our commitment to diversity and inclusion means we strive to attract, develop, and retain a workforce that reflects the varied communities we serve. We believe that diverse perspectives drive innovation and strengthen our ability to create cutting-edge cybersecurity solutions. At Horizon3, every team member is valued and supported in an environment that encourages personal and professional growth. We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply. Come be a part of Horizon3, where your unique contributions are recognized, and your potential is limitless. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

Get to Know Us Horizon3.ai is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find and fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by ITOps/SecOps teams, consulting pentesters, and MSSPs and MSPs. We are a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results. Summary We're looking for an Offensive Security Software Engineer with extensive web application penetration testing experience and a growing interest in AI-enhanced security techniques. You will have a significant impact on how we deliver value to our customers by designing, developing, and integrating web application penetration testing content into the NodeZero platform. This position requires practical expertise in full-scope web application testing, proven software development skills, and enthusiasm for leveraging emerging AI technologies to advance offensive security capabilities. Essential Functions Design, develop, and integrate web application offensive security content into the NodeZero platform Design, develop, and integrate novel attack capabilities into the NodeZero platform, including offensive security tooling and AI-enhanced techniques. Research and implement AI-driven methods for vulnerability detection, exploitation, and workflow automation. Extend and maintain platform architecture, data models, and system design to support new product features. Monitor production for issues or missed opportunities and create or resolve Jira tickets as needed. Integrate open-source and in-house tools, ensuring quality through testing, code reviews, and production monitoring. Investigate, own, and resolve bugs in developed content. Collaborate cross-functionally to address customer and prospect concerns related to attack content. Author technical blog posts showcasing new research, exploits, or attack methodologies. Mentor junior engineers and contribute to continuous improvement of team processes and standards Competencies/Requirements Experience conducting full scope web application pentests Experience with proxy tools like Burp and with browser developer tools Proficient in object-oriented programming and test-driven development, with strong analytical and problem-solving skills. Experience applying AI-assisted development tools to security research and automation tasks Curiosity about emerging AI technologies. Skilled in designing, evaluating, and communicating technical solutions across systems, APIs, algorithms, and data structures. Familiarity with relational and graph databases, particularly Postgres and Neo4j. Strong written and verbal communication, including technical documentation. Ability to manage multiple priorities, work independently, and mentor teammates of varying experience levels. Quick to learn and adopt new technologies as needed. History of recognized security research, including documented CVE discoveries and responsible disclosure Track record of successful bug bounty contributions Desired/Nice to Have Experience developing software and automation to aid in web application pentesting Background in large-scale software development projects. Experience fine-tuning language models or implementing retrieval-augmented generation (RAG) for security-focused applications. Experience with AI/LLM tools for building agentic workflows (e.g., LangChain, LangFlow) and integrating contextual data using protocols like Model Context Protocol (MCP). Expectations: Outstanding problem-solving aptitude. Be self-motivated and highly energetic to have the ability to operate effectively with limited supervision and guidance. Work with our security researchers to understand the technical aspects of reverse engineered exploits and weaponizing these exploits into the product. Strong technical documentation and communication skills. Document findings, methodologies, and recommendations for both technical and non-technical stakeholders. Proficient in designing, presenting, and evaluating technical solutions. What makes you stand out: Demonstrated examples of using AI to enhance or automate exploit development OSCP (Offensive Security Certified Professional) Certification Travel Required We are a fully remote company, and this job may require up to 15% of travel to be successful. Job-related travel expenses are reviewed and must be approved by your manager. Perks of Horizon3.ai Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive. Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities. Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking. Remote Work: We are a 100% remote company. Enjoy the convenience and work-life balance that comes with remote work. Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave. Compensation and Values At Horizon3, we believe that our people are our greatest asset, and our compensation philosophy reflects this core value. We are committed to fostering an environment where all employees feel valued, respected, and rewarded for their contributions. Our compensation structure is designed to be fair, competitive, and transparent, ensuring that every team member is recognized and compensated equitably across roles, levels, and locations. In accordance with various State’s transparency regulations, we provide the following salary range information for this position: Base salary range: $185,000 - $240,000 annually. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills. Additional compensation: All full-time roles are eligible for an equity package in the form of stock options. You Belong Here Horizon3 is not just an equal opportunity employer - we are a community that values diversity, equity, and inclusion as fundamental principles of our culture and success. We are dedicated to fostering a workplace where everyone feels welcome and respected, regardless of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, or any other legally protected status by law. Our commitment to diversity and inclusion means we strive to attract, develop, and retain a workforce that reflects the varied communities we serve. We believe that diverse perspectives drive innovation and strengthen our ability to create cutting-edge cybersecurity solutions. At Horizon3, every team member is valued and supported in an environment that encourages personal and professional growth. We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply. Come be a part of Horizon3, where your unique contributions are recognized, and your potential is limitless. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

Clearance Level: TS/SCI US Citizenship: Required Job Classification: Full Time Location: Rome, NY Years of Experience: 4 - 6 years of relevant experience Education Level: BS Degree - Experience may be considered in place of education requirement. Briefly Describe the Work: GITI is looking for a Software Developer / Engineer Capable of developing advanced defensive and offensive cyber capabilities. The candidate will be responsible for researching, developing, and architecting cyber capabilities and techniques into existing or new environments. Successful candidates for this role must have critical thinking skills, and problem-solving skills, be creative, curious, resourceful, and have a passion for conveying a wide range of information through research leading to deeper insights. The candidate may work independently or participate in project-wide reviews of requirements, system architecture, and detailed design documents. A Software Developer/Engineer must be able to collaborate well with a strong lean-forward attitude to shift knowledge left, deliver well, and produce quality results. • Support research and development, as well as test and evaluation, for software applications, translating operational requirements into technical solutions that provide novel cyberspace capabilities or modernize existing cyberspace capabilities., • Demonstrable proficiency in creating, debugging, patching, and maintaining software and/or applications in a variety of programming languages., • Effectively use computer-assisted software engineering (CASE) tools, automated testing tools, and infrastructure as code (IaC) capabilities., • Assist in integrating new/improved cyberspace capabilities into customer environments including, but not limited to, cyber operation platforms and weapon systems to support cyber operations, intelligence preparation of the cyber battlespace, and cyber effects operations., • Demonstrate strong communication skills to assist the team in delivering high-quality products on time while continually identifying and mitigating risk factors., • Be a proactive team player willing to improve others while continuously learning and identifying ways to strengthen the team., • Demonstrate ability to make decisions, estimates, and recommendations under conditions of urgency based on good judgment, experience, and professional standing., • Stay updated on the latest advancements in software development, research, and technologies and identify opportunities for innovation and improvement., • Demonstrate ability to research and apply new tools, techniques, and solution approaches. Continually learn and improve your skills through sharing with others and taking advantage of available training sources. Required Skills: • 4 - 6+ years' experience working in software development, software engineering, or related fields., • Active Secret, • Strong proficiency in the Java programming language, • Proficiency in Cloud-native development, • Proficiency in Enterprise software deployment, • Understanding of algorithms and techniques to identify and mitigate data-borne threats, • Excellent problem-solving and analytical skills, with a keen attention to detail., • Strong communication and collaboration skills, with the ability independently or to work effectively in a team environment Desired Skills: • Understanding of enterprise integration patterns and their implementations, • Understanding of Linux operating system, software packaging, and init systems, • Understanding of steganography, and other data hiding techniques, • Familiarization with frameworks/libraries such as Java EE, Apache Karaf, Spring, Quarkus, and/or Micronaut Relevant Certifications: • Certifications in computer programming, science, data science, or related fields (e.g., Certified Software Development Professional (CSDP); Certified Scrum Developer (CSD); Red Hat Certified Enterprise Application Developer; Professional Software Developer Certification (PSD); AWS Certified Developer – Associate; Microsoft Certified: Azure Developer Associate; Certified Secure Software Lifecycle Professional (CSSLP); Programming Language Certified Associate (CLA); Oracle Certified Java Programmer' (OCJP), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (C|EH) Global InfoTek, Inc. is an equal-opportunity employer. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, sexual orientation, gender identity, or national origin. About Global InfoTek, Inc. Reston, VA-based Global InfoTek Inc. is a woman-owned small business with an award-winning track record of designing, developing, and deploying best-of-breed technologies that address the nation’s pressing cyber and advanced technology needs. For more than two decades, GITI has merged pioneering technologies, operational effectiveness, and best business practices to rapidly

ISE is hiring an Embedded Content Security Engineer to partner with the team at one of our large clients in the media and entertainment industry. This role is particularly focused on AI and machine learning security, though responsibilities extend across the technology stack, including infrastructure and application security. The term “embedded” refers to the collaborative, integrated nature of the work, not embedded systems or IoT devices. What you’ll do at ISE: • Act as a subject matter expert on AI security, advising internal teams and external partners on best practices related to AI/ML technologies, • Stay ahead of emerging trends in AI threats, particularly those relevant to media and entertainment workflows, • Lead initiatives to build and enhance offensive testing capabilities for both AI and non-AI applications, • Conduct in-depth technical assessments of AI-enabled systems and deliver actionable insights to technical and non-technical stakeholders, • Support broader security reviews, including infrastructure (on-prem and cloud), appli-cations, content editing/transfer platforms, and media workflows., • Publish secure configuration guidance and work with vendors to assess and improve their content protection strategies., • Dedicate 50%-100% of time per week to one large client, • Travel to the Los Angeles, CA area on a regular basis: once every one or two months What you bring to the table: • Bachelor's degree in Computer Science, Engineering, Data Science, or a related field (Master’s degree preferred), • 7+ years of experience in cybersecurity, preferably with a focus on offensive security and technical assessments, • Demonstrated experience designing and securing infrastructure and cloud-native applications, • Proficiency with major cloud platforms (AWS, Azure, GCP), especially with respect to deploying and evaluating AI/ML solutions, • Ability to distill complex security findings for a non-technical audience, • Solid understanding of traditional infrastructure security technologies, including storage, VPNs, firewalls, directory services, and endpoint protection, • AI/ML certifications (e.g., AWS Certified ML, Azure AI Engineer) are a plus, • Information security certifications such as CISSP, CCSP, OSCP are also beneficial. Salary: $140K-$170K, depending on experience. If you don't think you meet all the criteria above but are still interested in the job, please apply. Nobody checks every box, and we're looking for someone excited to join the team. What we bring to the table: • Check out joinise.io for full details, • Work that matters; projects that impact people’s everyday life and wellbeing, • Quality, integrity, dedication, and education: our core values, • Life balance: flexible schedule, work from home options, unlimited vacation, • $0 health premium plan option, including spouse and family, • Opportunities to research and publish, speak at major security events and conferences, • Leadership and peers that support and mentor you: your growth is our growth, your success is our success, • Relaxed and fun environment: ditch the suit and tie, sit or stand at your desk or find a sofa How you’ll learn at ISE: Everyone has a mentor, or two or three sometimes. We hold you and ourselves accountable for your advancement. You’ll learn directly from your mentor, your colleagues, resources vetted by the team, and at regular firetalk lunches by your peers – oh, and lunch is on us once a week in the office. You also have access to paid training, workshops, university courses, certification courses, and we’ll pay for the certs too. Want to learn a new skill that you aren’t currently using but want to? Great! Innovation is key–new technology is important. About ISE: ISE is an independent security consulting and software firm headquartered in Baltimore, Maryland, dedicated to securing high value assets for global enterprises and performing groundbreaking security research. Using an adversary-centric perspective driven by our elite team of analysts and developers, we improve our clients’ overall security posture, protect digital assets, harden existing technologies, secure infrastructures, and work with development teams to ensure product security prior to deployment. Our team enjoys working in a creative, educational, and comfortable environment where they can thrive professionally. Building a Better Community: We value different viewpoints and fresh perspectives. We embrace people who challenge our thinking and question the status quo. We are opposed to narrow minded, exclusionary, and discriminatory viewpoints or practices that inherently undermine our creative process, hinder growth, and impede innovation. Need more info? Be sure you spend some time at www.ise.io. Make sure you look through all the perks on the Careers page, then check out our Research and Blog, our events page for the IoT Village, and About page. Follow us on Twitter @ISEsecurity and @IoTvillage

About Apollo Apollo Information Systems is a cybersecurity services company delivering comprehensive security and compliance programs to organizations that need measurable protection without the burden of building it alone. Backed by a Series A investment led by Syn Ventures, Apollo is pioneering a cybersecurity-as-a-service model that replaces fragmented tools and episodic engagements with unified, outcome-driven security programs. Through Apollo Aegis - a subscription-based cybersecurity and compliance platform - and a full portfolio of managed security, advisory, assessment, incident response, and offensive security services, Apollo helps organizations reduce risk, simplify operations, and maintain continuous compliance. Apollo's primary markets include state and local government, K-12 and higher education, and mid-market enterprises, with deep specialization in election security. Our Culture We are growing rapidly and have significant expansion plans and growth capital. We foster a collaborative environment where deep cybersecurity expertise meets business acumen, enabling our professionals to solve complex security challenges while building lasting client partnerships. We pride ourselves on our integrity and ethics. You’ll find smart, professional, mission-driven, hardworking, genuinely kind and good colleagues here. We primarily work remotely but have a hub in Denver. Position Overview: We are looking for a high-performing, self-driven Account Executive to grow our cybersecurity business across State, Local Government, and Education (SLED) accounts throughout the Southeastern Region. The ideal candidate is a public sector sales professional with a deep understanding of the cybersecurity services landscape who has a proven ability to open doors, build relationships, and close complex deals. Partnering closely with the a Senior AE, this individual will co-own the Southeastern SLED region, bringing both strategic thinking and execution to drive pipeline, revenue, and long-term client success. This is a hunter role at its core: the right candidate thrives on business development, takes ownership of their territory, and brings a consultative approach to helping public sector clients solve their most pressing security challenges. Key Responsibilities: Partner with Sales Manager to expand Southeastern SLED accounts from prospecting and discovery through proposal, negotiation, and close Execute on a territory business plan that identifies target accounts, key opportunities, and a clear path to meeting or exceeding quota Drive new business development through outbound prospecting, networking, industry events, partner relationships, and referrals Engage with state agencies, municipalities, school districts, and higher education institutions to uncover cybersecurity needs and align Apollo solutions accordingly Build and maintain strong, trust-based relationships with key stakeholders, including CISOs, CIOs, IT Directors, and procurement officers Collaborate with the Sales Manager to align on territory strategy, pipeline reviews, forecasting, and go-to-market priorities Work cross-functionally with technical, service delivery, and marketing teams to develop tailored proposals and solutions for SLED clients Navigate public sector procurement processes, including RFPs, cooperative purchasing vehicles, and state contracts, to remove barriers and accelerate deal velocity Identify and develop contracting vehicles (e.g., DIR, TIPS, NCPA) that enable scalable, repeatable sales across the Southeastern SLED market Manage and grow an active pipeline in CRM, maintaining accurate opportunity data, activity logs, and forecasts Identify upsell and cross-sell opportunities within existing accounts to expand Apollo's footprint and deepen client relationships Provide market intelligence and client feedback to internal teams to inform product development and service offerings Represent Apollo at relevant industry conferences, government forums, and association events across Texas Qualifications Required Demonstrated success selling cybersecurity solutions: MSSP, MDR, SOC-as-a-Service, or security product/VAR experience strongly preferred Familiarity with public sector procurement processes, such as DIR contracts, cooperative purchasing vehicles, etc. Proven track record of consistently meeting or exceeding quota in a hunter/business development role Experience selling to and navigating complex organizations with multiple stakeholders and long sales cycles Strong command of consultative and solution-based selling methodologies (e.g., MEDDIC, Challenger, or similar) Excellent communication, presentation, and negotiation skills Self-starter mentality with the ability to manage a territory independently Preferred Existing relationships with State agencies, municipalities, or school districts/higher education institutions Experience working with or for an MSSP or cybersecurity VAR Familiarity with security frameworks relevant to the public sector (NIST, CMMC, TX-RAMP, etc.) Prior experience using Salesforce or similar CRM platforms Expectations: At 30 days: Complete onboarding, including product and services training, internal process orientation, and CRM setup Develop a working knowledge of Apollo's cybersecurity portfolio and value proposition for SLED clients Meet with key internal stakeholders (Sales Manager, technical teams, marketing, and service delivery) to understand resources and support available Begin building a target account list for the Southeastern SLED territory and identify top priority opportunities Within 90 days: Have an active, documented pipeline of qualified opportunities in CRM reflecting real revenue potential Independently conducting discovery calls, delivering presentations, and advancing opportunities through the sales cycle Establish or reactivate relationships with key contacts at target accounts across state agencies, municipalities, and education institutions Identify and initiate pursuit of at least one relevant contracting vehicle or cooperative purchasing opportunity Deliver a territory business plan to the Sales Manager outlining strategy, key accounts, and 6-month revenue targets By 180 days: Demonstrate clear pipeline momentum with opportunities in late stages of the sales cycle and initial closed/won business Be fully self-sufficient in territory management, forecasting, and business development activity Have established a consistent outreach and relationship-building cadence across target accounts Contribute actively to team knowledge by sharing market insights, competitive intelligence, and client feedback Be on track to meet or exceed first-year quota based on pipeline coverage and deal progression Company Values We have created a fantastic corporate culture – our values drive our behaviors. Here are the expectations: Passion for cybersecurity and a commitment to maintaining the highest standards of security. Customer Outcomes: Their success is our success, we are business partners Entrepreneurial Approach: fast decision making, empowerment, focus on results, test and learn Win Together: Intense Collaboration, no silos Integrity is paramount Why You'll Love Working Here Comprehensive medical, dental, and vision coverage, the company covers 100% of employee premiums and 90% of dependent premiums on base plans Unlimited PTO, 7 paid sick days, and 11 paid holidays 401(k) with 4% company match after 90 days, immediately vested Company‑paid life insurance at 1x annual salary Company‑paid Short‑Term Disability (STD) and Long‑Term Disability (LTD) coverage $125 monthly home‑office tech stipend for internet, equipment, and other technology needs Amazing colleagues, a collaborative environment, and a supportive, growth‑focused culture Apollo-IS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. Apollo-IS provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

Life360’s mission is to keep people close to the ones they love. Our category-leading mobile app,Tile tracking devices, and Pet GPS tracker empower members to protect the people, pets, and things they care about most with a range of services, including location sharing, safe driver reports, and crash detection with emergency dispatch. Life360 serves approximately 97.8 million monthly active users (MAU), as of March 31, 2026, across more than 180 countries. Life360 delivers peace of mind and enhances everyday family life with seamless coordination for all the moments that matter, big and small. By continuing to innovate and deliver for our customers, we have become a household name and the must-have mobile-based membership for families (and those friends who are basically family). Life360 has more than 500 (and growing!) remote-first employees. For more information, please visit _. Life360 is a Remote-First company, which means a remote work environment will be the primary experience for all employees. All positions, unless otherwise specified, can be performed remotely (within the US) regardless of any specified location above. We are AI Native We are building an AI native company where AI is an integral part of how we build and operate. AI tool usage during interviews varies by role. You may be asked to demonstrate proficiency with AI tools, discuss how you leverage AI, or complete interview exercises without AI assistance. Your Recruiter will provide clear guidance as you move through the interview process. Undisclosed use of AI not previously discussed with or approved by your Recruiter may impact your candidacy. The Information Security and Technology team is responsible for keeping Life360 safe — our systems, our employees, and the tens of millions of families who trust us with their location data. That obligation is the starting point. How we meet it is what makes this team different. We are builders. Security controls that don't get used aren't controls. Compliance programs that create friction without reducing risk aren't programs. We build things that work in production, earn adoption from engineering teams, and get better over time — and we use AI to do it at a scale a traditional team couldn't. We're also at an inflection point. Life360 is deploying agentic systems into how we build and operate, and the security and governance implications of that are still being worked out — by us, and by the industry. The threat surface is expanding. The compliance frameworks are catching up. The people on this team aren't waiting for either. We're hiring a Staff Security Operations Engineer to define and lead Life360's next-generation security operations program. This is a technical leadership role for someone who sets direction, raises the bar on the engineers around them, and builds the systems they design. We're building security operations the way they should work in 2026 — AI-native from day one. The foundation of that is a mature, high-fidelity security observability platform: the telemetry pipelines, detection surfaces, and data infrastructure that make everything else possible. Getting that foundation right is the prerequisite. What we build on top of it is what makes this role different from any SecOps job you've held before. The end state we're building toward is one where AI is a genuine operational partner — surfacing anomalies, supporting threat hunting, taking autonomous action on lower-criticality events where we have confidence in the outcome, and orchestrating response workflows that would otherwise require human hands at every step. AI agents handle triage, enrichment, and correlation. Humans focus on judgment calls and high-stakes decisions. Detection and response is treated as a software engineering discipline with measurement, quality loops, and safe rollout patterns. If you've been waiting for a role where you set the technical direction rather than execute someone else's, this is it. We use AI tools as a professional standard on this team. Here's what that means in practice. • Daily use: You use AI tools for real, substantive work — analysis, drafting, automation, code, investigations, evidence gathering., • Judgment and ownership: AI-generated work gets the same scrutiny you'd give any human-produced artifact. You're accountable for everything you ship., • Domain-specific judgment: You know where AI is the wrong tool. Sensitive data handling, attacker-controlled inputs, agents with production access, and privileged identity changes all need careful guardrails — and you can articulate where AI helps, where it hurts, and where it needs a human in the loop., • Leverage: When AI is working well, you take on problems that would otherwise require a larger team. We hire people who use that leverage to ship better outcomes, not just faster ones., • Continuous learning: The tooling moves fast. You stay current, share what works with the team, and speak up when something would meaningfully change how we operate. The US-based salary range for this position is $149,000 to $271,500. We take into consideration an individual's background and experience in determining final salary - therefore, base pay offered may vary considerably depending on geographic location, job-related knowledge, skills, and experience. The compensation package includes a wide range of medical, dental, vision, financial, and other benefits, as well as equity. • Own the roadmap for detection and response. The platform decisions, the architecture decisions, the build-versus-buy calls — you make them, and you defend them., • Build and mature the security observability platform. Own the security telemetry layer across infrastructure, identity, endpoint, SaaS, and AI-native systems. Partner with Data Platform on the SIEM and data lake foundation that makes all of it queryable and scalable., • Deploy AI agents that operate, not summarize. Agents handle triage, correlation, enrichment, and autonomous action on lower-criticality events where confidence is high, then extend into anomaly detection and threat hunting. Partner with AI platform teams on the safety patterns that make autonomous action trustworthy., • Build detection and response capabilities with AI at the center. Design workflows where AI creates, tests, and improves detection content — not just executes it. Build the case management and response orchestration that moves from signal to resolution with minimal human intervention., • Drive continuous validation of detection effectiveness. Run the measurement program — precision, false positive rates, signal quality — and design agentic tuning workflows that surface underperforming detections and reduce noise without a human in every loop., • Own incident response end-to-end. Severity matrix, communication cadence, roles, escalation paths, executable playbooks, and the measurement program that tells us whether we're improving. Drive post-incident reviews that produce measurable change. Participate in the on-call rotation and lead response for high-severity events., • Make detection and response a design-time concern, not an afterthought. Partner with Security Engineering, GRC, IT, Engineering, Legal, and Privacy to ensure observability and response coverage is part of how systems are launched., • Lead, develop, and represent. Raise the technical bar through code review, design review, and direct coaching. Represent Life360 and the team externally where appropriate., • 8+ years of hands-on security operations or detection engineering experience with a track record of building things that hold up in production — not just advising on them., • Hands-on experience building AI-powered security workflows in production. Automated triage, AI-driven alert correlation, agentic investigation, integrated into a real operations stack. You can articulate where AI worked, where it didn't, and how you measured the difference., • Deep AWS experience — CloudTrail, IAM, GuardDuty, native logging — and the ability to investigate cloud incidents end-to-end. Comfortable writing detection queries and rules in whatever language your SIEM speaks., • Identity-centric thinking. You know that identity is the perimeter. Investigating Okta, SSO, OAuth, and session-based attacks is in your muscle memory., • Owned the architecture and deployment of a detection platform end-to-end. You've made the structural decisions, lived with them in production, and refined them over time., • Built a detection pipeline quality framework — precision measurement, false positive tuning, and continuous improvement processes. You can show the metrics that proved the program was getting better., • Designed and implemented incident response processes from scratch — severity matrices, escalation paths, and the measurement program around them., • Production-grade code. You can read, write, and ship it — and you use AI coding tools to operate with leverage. The bar is reliable, maintainable, observable, and production-ready., • A purple team orientation and hands-on hunting experience. You understand offensive techniques well enough to build detections against them, you've run hunts that produced real findings, and you've worked cases where the threat actor was inside the perimeter., • Strong technical communication. You can translate detection and response requirements into clear specs for engineering teams, brief executives on incidents, and write post-incident reviews that drive change., • Bachelor’s degree or equivalent Nice to have • Built or significantly contributed to agentic workflows in production. You've designed agents that take action, formed strong opinions about where autonomy is safe and where human judgment is non-negotiable, and you understand how LLMs behave under adversarial conditions., • Familiarity with AI agent frameworks and the security implications of agentic systems with production access., • Published detection content, given conference talks, or contributed to open-source security tooling., • Experience with container and Kubernetes security telemetry., • Direct experience investigating nation-state actors or APT-class threats., • High-growth environment experience where the security program had to be built while it was being run., • Competitive pay and benefits, • Medical, dental, vision, life and disability insurance plans (100% paid for employees), • 401(k) plan with company matching program, • Mental Wellness Program & Employee Assistance Program (EAP) for mental well-being, • Flexible PTO, 13 company-wide days off throughout the year, • Winter and Summer Weeklong Synchronized Company Shutdowns, • Learning & Development programs, • Equipment, tools, and reimbursement support for a productive remote environment, • Free Life360 Platinum Membership for your preferred circle, • Free Tile Products Our company’s mission-driven culture is guided by our shared values to create a trusted work environment where you can bring your authentic self to work and make a positive difference • Be a Good Person - We have a team of high integrity people you can trust., • Be Direct With Respect - We communicate directly, even when it’s hard., • Members Before Metrics - We focus on building an exceptional experience for families., • High Intensity, High Impact - We do whatever it takes to get the job done. We believe that different ideas, perspectives and backgrounds create a stronger and more creative work environment that delivers better results. Together, we continue to build an inclusive culture that encourages, supports, and celebrates the diverse voices of our employees. It fuels our innovation and connects us closer to our customers and the communities we serve. We strive to create a workplace that reflects the communities we serve and where everyone feels empowered to bring their authentic best selves to work. We are an equal opportunity employer and value diversity at Life360. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status or any legally protected status. We encourage people of all backgrounds to apply. We believe that a diversity of perspectives and experiences create a foundation for the best ideas. Come join us in building something meaningful. Even if you don’t meet 100% of the below qualifications, you should still seriously consider applying! #LI-Remote

Build the future of offensive security with XBOW. Attackers are already using AI to move faster than defenders can react—we’re creating the platform that puts security ahead in the arms race. Our AI-powered system autonomously discovers, validates, and even exploits vulnerabilities, giving organizations proof-backed results in hours instead of weeks. Founded by Oege de Moor, creator of GitHub Copilot, and backed by Sequoia, Altimeter, and other leading investors, XBOW is applying cutting-edge AI to one of the world’s most urgent problems. In just over a year, our AI, built by a world-class AI team and legendary security researchers — has uncovered thousands of real-world zero-days across the software billions rely on, and achieved the #1 ranking on HackerOne’s global leaderboard. We’re a team of builders, hackers, and researchers who thrive on solving problems others think are impossible. If you want to push the boundaries of AI, reshape how security is done, and join the group defining this new era of defense — we’d love to talk. We’re looking for a Software Engineer - Platform / Core Infrastructure who’s passionate about building scalable systems and solving hard problems in ambiguous environments. In this role, you’ll design and implement the complex distributed infrastructure that powers our core AI engine and distributed analysis systems, enabling XBOW to run seamlessly across multiple cloud providers (AWS, Azure, OCI etc.) and contexts (SaaS, on prem). This is a role for someone who sees infrastructure as a product, loves clean abstractions, and knows how to dig into performance issues across layers. You’ll join a high-trust, high-velocity team where your work will have an immediate impact on both developer experience and product performance. If you like being at the intersection of deep tech and real-world impact, you’ll feel right at home. Design and implement infrastructure systems that scale reliably and securely, and can be deployed across multiple cloud environments (AWS, Azure, OCI etc.) and contexts (SaaS, on prem). Tune and optimize cloud services across compute, storage, networking, and observability to drive performance, reliability and maintainability of core services. Develop our core services, written in TypeScript, Kotlin and Go (and pick them up quickly if you haven’t used them before) to support our unique deployment and infrastructure requirements. Support large-scale systems with event driven architectures. Own problems end-to-end—from design through deployment to production support Navigate ambiguity and help define how we build as much as what we build Partner closely with other engineers, AI researchers and Security researchers to enable high-quality, high-velocity product development Design for resilience by implementing disaster recovery and business continuity strategies that ensure uptime, even when things break Improve how we build, deploy, and monitor services at scale Essential: Strong experience building and operating scalable, distributed systems on cloud infrastructure such as AWS or similar. Extensive experience with Containerisation and Orchestration technologies (e.g. Docker and Kubernetes). Comfortable working with infrastructure as code (e.g., Terraform, CDK) and see infra as part of the engineering system—not something separate from it. Experience with event-driven architectures, message queues, or async workflows (for example, using Kafka). A track record of performance tuning across cloud services, databases, and compute layers Eager to learn new tools, languages, and technologies as needed A thoughtful communicator who values clarity and simplicity and is comfortable working in a fast-paced startup and navigating ambiguity Strong problem-solving skills and the ability to work with incomplete information Curious, practical, and eager to work across layers of the stack when needed You think proactively about failure modes and bring experience implementing disaster recovery and business continuity plans that keep critical systems running. Advantageous: Experience with deploying infrastructure to multiple environments (SaaS, on-prem) and know how to build resilient systems that handle the complexity of such environments. Familiarity with modern observability practices (logs, metrics, tracing) and how to apply them Experience working in an early stage startup Prior experience building developer tooling or security products Hands-on experience with OpenSearch or Elasticsearch at scale Previous experience building platform teams or working on internal developer platforms Compensation & Equity: Competitive salary and a generous equity package, making you a true owner of the company. Career Growth: Shape your role, lead the function, and grow with the company as we redefine cybersecurity. Meaningful Work: You will tackle technically complex challenges and play a pivotal role in the growth of our business, working alongside an amazing team and some of the world’s experts to shape how AI transforms cybersecurity. Location: Remote in the US or EMEA (all team members are remote but we meet regularly and you’re supported to travel to collaborate with colleagues in person) Contract: Full-time. Hiring Process: 45-min introductory chat with our Talent team. 45 minutes with an Engineering Lead. 2-3 hour pair programming session with two members from the team. 30-min final wrap-up call with an Engineering Lead. We aren't focused on seniority titles at XBOW—so if you’re worried about “leveling,” don’t be. We care a lot more about mission fit, capability, and impact than what’s on your LinkedIn headline. We believe in people who are driven by curiosity and a willingness to learn. Even if you don't check every box, we encourage you to apply if you're excited about the role and our mission.

The Detection and Response Manager will build, lead, and continuously mature the Detection and Response Team, serving as Tier 3 support for Con Edisons IT and OT Cybersecurity Operations Center (CSOC). This role is responsible for advanced threat detection, incident escalation, and enterprise wide incident response. Reporting to the Director of Cybersecurity Operations, the manager will establish a new team that functions as the primary escalation path for the CSOC, advances detection engineering maturity, and conducts proactive threat hunting across the enterprise. The role also influences front line CSOC effectiveness by delivering validated detections, well defined playbooks, and targeted training to ensure consistent and confident execution. This position partners closely with Security Engineering, the CSOC, Offensive Security, Corporate Security, and the ETS team to strengthen and evolve how threats are identified and responded to across the organization. As Con Edison continues to invest in technologies such as cloud platforms, containers, AI, and OT environments, the scope of this role includes maturing detection and response capabilities across both existing and emerging technologies. This includes enhancing incident response processes and expanding SIEM and SOAR use cases to support business growth and resilience. The Detection and Response Manager ensures the development of repeatable procedures, validation of detections through realistic scenarios, effective training of stakeholder teams, and seamless transitions of new capabilities to the CSOC. The ultimate objective is to strengthen Tier 1 and Tier 2 operations, enabling faster response times, higher confidence, and improved security outcomes. Required Education/Experience Bachelor's Degree and 8 years of relevant work experience or Master's Degree and 6 years of relevant work experience. Preferred Education/Experience Master's Degree Majors preferred in IT, computer science, business administration, engineering or decision sciences including mathematics, analytics, quantitative methods. and 6 years of relevant work experience. Relevant Work Experience Leadership experience in cybersecurity operations, detection engineering, or incident response, including building and maturing teams, required. Hands-on experience designing, tuning, and validating detections across diverse data sources, with a track record of reducing false positives, required. Deep hands-on experience with SIEM and SOAR platforms, including building correlation logic, case workflows, and automation playbooks, required. Demonstrated experience leading hypothesis-driven threat hunts and converting findings into durable detections, required. Experience operating in or alongside cloud security (AWS, GCP, Azure, or OCI) required. Exposure to OT environments and a willingness to develop OT depth, including OT risk, telemetry, and operational constraints, required. Experience developing and operationalizing playbooks, procedures, and training material, required. Experience validating detections through tabletop exercises, purple team testing, and controlled scenarios, required. Track record of improving operational metrics (MTTD, MTTR, false positive reduction), required. Direct experience in OT or critical infrastructure environments preferred. Experience partnering with offensive security or threat intelligence teams to translate findings into detections and response improvements preferred. Experience evaluating and deploying AI-driven security tooling in a production environment preferred. Strong working knowledge of MITRE ATT&CK, used to map detections, hunts, and coverage gaps, preferred. Strong stakeholder management across security, engineering, and business teams, preferred. Skills and Abilities Effective leadership skills Demonstrated problem solving skills Demonstrated written communication skills Licenses and Certifications Driver's License Required Project Management Professional (PMP) Training and/or certification in Project Management is a plus. Preferred Other: Cybersecurity certifications such as CISSP, CISM, GCFA, GCIA, or GCFE Preferred Physical Demands Sit or stand to answer a phone for the duration of the workday Sit or stand to use a keyboard, mouse, and computer for the duration of the workday Ability to read small print and symbols Additional Physical Demands The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays. Must be able and willing to travel within Company service territory, as needed. Core Responsibilities Build and lead the Detection and Response Team. Operate as the escalation path for high complexity alerts, suspected incidents and root cause investigations, supporting both IT and OT CSOC workflows. Improve the end-to-end response lifecycle, including alert triage, investigation, containment, remediation coordination, lessons learned and documentation. Partner with Security Engineering to develop and mature detection use cases, including tuning detections for low false positives and high signal quality. Lead continuous threat hunting by regularly scanning telemetry and investigation outputs to find stealthy attacker behavior and emerging patterns across IT and OT. Lead campaign-based threat hunting by defining hypotheses, objectives and success criteria with stakeholders, then running time bound hunts aligned to risk, new threats and specific business systems. Identify opportunities across the business where cybersecurity requirements were not implemented, were not consistently enforced, or were misaligned to risk and work with stakeholders to close those gaps. Collaborate with Offensive Security and threat intelligence stakeholders to incorporate new findings into detections, detections engineering and response improvements. Own the end to end lifecycle and continuous improvement of SIEM and SOAR use cases, spanning alert enrichment, case management, automated response actions, and orchestration. Develop and improve incident response processes, including playbook development, scenario testing, tabletop exercises and after-action reviews. Guide capability transitions to the CSOC by ensuring detections and response procedures are documented, trained, tested and ready for steady state operations. Establish measurable performance targets and an operating rhythm, including metrics such as mean time to detect, mean time to respond, investigation throughput, false positive rates and impact from tuning or automation. * Evaluate, pilot, and operationalize AI-driven detection and response tools and technology (e.g., anomaly detection, alert summarization/enrichment, and automated triage) to reduce false positives and accelerate MTTD/MTTR.

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, _, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. As an Infrastructure Engineer IC3, you will contribute to building and operating the infrastructure that supports the HackerOne platform and the thousands of companies that rely on us to manage their security posture. You are a strong individual contributor and collaborative team member with solid domain expertise in cloud infrastructure and reliability. You work effectively within your squad, take ownership of projects, and help improve the reliability, security, and scalability of our systems. You partner closely with application engineers and other stakeholders to deliver pragmatic, secure solutions. You understand how to design and operate highly available cloud systems and apply best practices for reliability, observability, and security. You work cross-functionally with guidance, communicate clearly with stakeholders, and approach problems with a service-oriented mindset. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston, Seattle, Austin, or Washington DC. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. First 30 days Onboard with your squad and the broader engineering organization Learn HackerOne’s infrastructure, tooling, and workflows (AWS, Terraform, Kubernetes, Ruby on Rails, GraphQL, etc.) Become familiar with our reliability, security, and incident management practices By 60 days Participate in the on-call rotation with support from teammates Take ownership of a scoped infrastructure project and deliver incremental improvements Build working relationships across engineering and adjacent functions Beyond 90 days Independently deliver infrastructure changes that improve reliability, performance, or security Understand how infrastructure supports product and customer needs, and translate requirements into practical technical solutions Contribute to operational excellence through runbooks, automation, and system improvements Ongoing Responsibilities Design, implement, and maintain cloud infrastructure using infrastructure-as-code Collaborate with cross-functional partners to execute on infrastructure initiatives Participate in an on-call rotation (one week every four weeks) and help maintain system reliability Contribute to a positive team culture by sharing knowledge and supporting teammates Continuously improve your technical skills and operational effectiveness 3+ years of experience working with Linux-based systems and cloud infrastructure Hands-on experience with AWS, Terraform, Kubernetes, Datadog, Cloudflare, and OpenSearch Experience operating and supporting production systems in an on-call environment Familiarity with modern DevOps tooling and CI/CD pipelines (GitLab CI or GitHub Actions) Experience delivering projects with dependencies across technical and non-technical teams Strong understanding of reliability, observability, and secure infrastructure practices Interest in secure-by-default infrastructure design and compliance requirements Clear communicator and effective team collaborator Willingness to participate in on-call rotation between 9am–9pm PT / 12pm–12am ET once every four weeks (Sunday–Monday). Familiarity with FedRAMP, SOC 2, or ISO 27001 environments Exposure to AI-related infrastructure concerns (e.g., model deployment, data handling, compliance) $140,000 to $175,000 (+ equity) #LI-MH1 Health (medical, vision, dental), life, and disability insurance* Equity stock options Retirement plans Paid public holidays and unlimited PTO Paid maternity and parental leave Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act) Employee Assistance Program *Eligibility may differ by country We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with _ as our Employer of Record (EOR). Visa/work permit sponsorship is not available. Employment at HackerOne is contingent on a background check. HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws. This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time. For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

At Qualia, we've built the leading B2B real estate technology that transforms the home buying and selling experience into a simple, secure, and enjoyable process. Our SMB and Enterprise products bring together users from across the real estate ecosystem---homebuyers and sellers, lenders, title and escrow agents, and real estate agents---onto a single shared digital closing platform, providing greater clarity and transparency to real estate transactions. Today, through our business customers across the country, millions of consumers use Qualia to close on homes every year. We are hiring an entrepreneurial Engineering Manager to lead Qualia's Application Security team. This is a builder's role. You won't just run a team - you'll redesign how a modern AppSec function operates when AI can do the first pass on nearly everything we used to do by hand. The team today owns secure design reviews, vulnerability triage, internal penetration testing, incident response support, and security tooling across a JavaScript/NodeJS and Kubernetes stack. Your mandate is to scale that surface area vertically - growing output and coverage per engineer - by making AI-assisted workflows the default. That means automated pen testing pipelines, AI-driven triage of findings from SAST/DAST/SCA, agentic review of engineering proposals and design docs, and continuous red-teaming exercises that test both our systems and our assumptions. You'll partner closely with Platform, Infra, and product engineering leaders to embed security earlier in the development lifecycle, and you'll be the team's voice when we set the security vision for the next two years - including anomaly detection across production traffic, model-driven threat hunting, and how we defend against (and responsibly use) AI-enabled attackers. Securing that platform - the money, the identities, and the documents flowing through it - is what the Application Security team does every day. We're hiring an Engineering Manager to lead this team into its next chapter: one where AI is a force multiplier for every part of our security program. • Lead and grow the Application Security team - coaching senior AppSec engineers, setting goals, and owning delivery against the security roadmap, • Build the automated pen-testing program. Stand up pipelines that run continuous, AI-assisted offensive testing against our services, APIs, and web properties - and turn the output into a triaged, actionable queue, • Scale triage with AI. Design the workflows and tooling that let the team handle 10x the volume of findings (bug bounty, scanner output, customer reports) without 10x the headcount, • Review engineering proposals. Sit at the front of the design process with engineering leaders across Core, Clear, Shield, Connect, and Atlas - reviewing RFCs and proposals, flagging risk early, and helping teams ship securely by default, • Run red-teaming exercises. Drive recurring red team engagements - both internal exercises and coordinated vendor work - and close the loop into detection, response, and product hardening, • Own the AppSec vision. Partner with the leadership team to set multi-quarter strategy across anomaly detection, threat modeling, and AI-augmented defense, • Fight fires when they happen. Lead incident response from the application security side, and be the person engineering trusts to make the call in the room, • Mentor and hire. Recruit strong AppSec engineers, mentor the ones you have, and build a team culture where people are pushed and supported in equal measure, • 5+ years as a security or full-stack engineer working on production systems, with 2+ years managing a security or platform engineering team, • Hands-on depth in application security: threat modeling, code review, and at least one offensive-security discipline (pen testing, red team), • Track record of shipping automation that changed how a team worked - ideally including meaningful use of LLMs, agents, or ML in a security or engineering workflow, • Comfort operating across the full security lifecycle: prevention, detection, response, and recovery, • Strong written communication. You can write the design doc, the post-mortem, and the board-ready summary - and you can tell a product engineer why their proposal needs to change without shutting down the conversation, • Keen product sense and a bias toward measurable impact. You care whether the risk actually went down, not whether a ticket got closed, • Experience in fintech, real estate tech, or another regulated, high-liability domain preferred NICE TO HAVE • Background designing or operating anomaly-detection systems on production traffic, auth logs, or financial transactions, • Published research, CVEs, or conference talks in AppSec, offensive security, or AI security., • Familiarity with the evolving landscape of AI-enabled offense (prompt injection, model abuse, agent exploitation) and defense THE TECH STACK YOU'LL USE • JavaScript / NodeJS / Typescript / Meteor, • Microservice architecture / Kubernetes Operators, • AWS, • MongoDB, • Modern AppSec tooling: SAST/DAST/SCA and an expanding AI-assisted security automation layer that you'll help build While this role is remote work eligible, we have three office locations: San Francisco, California; Concord, New Hampshire; and Austin, Texas. This role has a base annual salary of $210,000-$240,000 plus a competitive equity and benefits package. (Salary to be determined by relevant experience, location, knowledge, and skills of the applicant, internal equity, and alignment with market data.) Qualia is made up of incredibly bright, mission-driven coworkers who are passionate about using technology to solve real-world problems---and we're growing quickly. In order to continue building an engaging and dynamic organization, we're committed to giving everyone the support they need to do great work. Our benefits package is designed to allow our team members to be their best selves, both in and out of the workplace. In addition to comprehensive health plans, a 401k program, and commuter benefits, we prioritize family and personal well-being through professional development, parental leave, and a flexible time off policy. Qualia offers a robust online onboarding program to train new hires, biweekly all hands meetings, and a variety of internal virtual events to keep employees connected. We believe diverse perspectives and backgrounds are critical to building great technology, and our goal is to cultivate an environment where people feel equally valued and respected. Qualia is proud to be an equal-opportunity workplace, and we welcome applicants from all backgrounds regardless of race, color, ancestry, religion, gender identity or expression, sexual orientation, marital status, age, citizenship, socioeconomic status, disability, or veteran status. By submitting your application, you acknowledge and agree to the collection, processing, and use of your personal information as described in our _. #LI-Remote

About Apollo Apollo Information Systems is a cybersecurity services company delivering comprehensive security and compliance programs to organizations that need measurable protection without the burden of building it alone. Backed by a Series A investment led by Syn Ventures, Apollo is pioneering a cybersecurity-as-a-service model that replaces fragmented tools and episodic engagements with unified, outcome-driven security programs. Through Apollo Aegis - a subscription-based cybersecurity and compliance platform - and a full portfolio of managed security, advisory, assessment, incident response, and offensive security services, Apollo helps organizations reduce risk, simplify operations, and maintain continuous compliance. Apollo's primary markets include state and local government, K-12 and higher education, and mid-market enterprises, with deep specialization in election security. Our Culture We are growing rapidly and have significant expansion plans and growth capital. We foster a collaborative environment where deep cybersecurity expertise meets business acumen, enabling our professionals to solve complex security challenges while building lasting client partnerships. We pride ourselves on our integrity and ethics. You’ll find smart, professional, mission-driven, hardworking, genuinely kind and good colleagues here. We primarily work remotely but have a hub in Denver. Position Overview: We are looking for a high-performing, self-driven Account Executive to grow our cybersecurity business across State, Local Government, and Education (SLED) accounts throughout the Northeast Region. The ideal candidate is a public sector sales professional with a deep understanding of the cybersecurity services landscape who has a proven ability to open doors, build relationships, and close complex deals. Partnering closely with a Senior AE, this individual will co-own the Northeast SLED region, bringing both strategic thinking and execution to drive pipeline, revenue, and long-term client success. This is a hunter role at its core: the right candidate thrives on business development, takes ownership of their territory, and brings a consultative approach to helping public sector clients solve their most pressing security challenges. Key Responsibilities: Partner with Senior AE to expand Northeast Region SLED accounts from prospecting and discovery through proposal, negotiation, and close Execute on a territory business plan that identifies target accounts, key opportunities, and a clear path to meeting or exceeding quota Drive new business development through outbound prospecting, networking, industry events, partner relationships, and referrals Engage with state agencies, municipalities, school districts, and higher education institutions to uncover cybersecurity needs and align Apollo solutions accordingly Build and maintain strong, trust-based relationships with key stakeholders, including CISOs, CIOs, IT Directors, and procurement officers Collaborate with the Sales Manager to align on territory strategy, pipeline reviews, forecasting, and go-to-market priorities Work cross-functionally with technical, service delivery, and marketing teams to develop tailored proposals and solutions for SLED clients Navigate public sector procurement processes, including RFPs, cooperative purchasing vehicles, and state contracts, to remove barriers and accelerate deal velocity Identify and develop contracting vehicles (e.g., DIR, TIPS, NCPA) that enable scalable, repeatable sales across the Northeastern SLED market Manage and grow an active pipeline in CRM, maintaining accurate opportunity data, activity logs, and forecasts Identify upsell and cross-sell opportunities within existing accounts to expand Apollo's footprint and deepen client relationships Provide market intelligence and client feedback to internal teams to inform product development and service offerings Represent Apollo at relevant industry conferences, government forums, and association events across Texas Qualifications Required Demonstrated success selling cybersecurity solutions: MSSP, MDR, SOC-as-a-Service, or security product/VAR experience strongly preferred Familiarity with public sector procurement processes, such as DIR contracts, cooperative purchasing vehicles, etc. Proven track record of consistently meeting or exceeding quota in a hunter/business development role Experience selling to and navigating complex organizations with multiple stakeholders and long sales cycles Strong command of consultative and solution-based selling methodologies (e.g., MEDDIC, Challenger, or similar) Excellent communication, presentation, and negotiation skills Self-starter mentality with the ability to manage a territory independently Preferred Existing relationships with State agencies, municipalities, or school districts/higher education institutions Experience working with or for an MSSP or cybersecurity VAR Familiarity with security frameworks relevant to the public sector (NIST, CMMC, TX-RAMP, etc.) Prior experience using Salesforce or similar CRM platforms Expectations: At 30 days: Complete onboarding, including product and services training, internal process orientation, and CRM setup Develop a working knowledge of Apollo's cybersecurity portfolio and value proposition for SLED clients Meet with key internal stakeholders (Sales Manager, technical teams, marketing, and service delivery) to understand resources and support available Begin building a target account list for the Northeastern SLED territory and identify top priority opportunities Within 90 days: Have an active, documented pipeline of qualified opportunities in CRM reflecting real revenue potential Independently conducting discovery calls, delivering presentations, and advancing opportunities through the sales cycle Establish or reactivate relationships with key contacts at target accounts across state agencies, municipalities, and education institutions Identify and initiate pursuit of at least one relevant contracting vehicle or cooperative purchasing opportunity Deliver a territory business plan to the Sales Manager outlining strategy, key accounts, and 6-month revenue targets By 180 days: Demonstrate clear pipeline momentum with opportunities in late stages of the sales cycle and initial closed/won business Be fully self-sufficient in territory management, forecasting, and business development activity Have established a consistent outreach and relationship-building cadence across target accounts Contribute actively to team knowledge by sharing market insights, competitive intelligence, and client feedback Be on track to meet or exceed first-year quota based on pipeline coverage and deal progression Company Values We have created a fantastic corporate culture – our values drive our behaviors. Here are the expectations: Passion for cybersecurity and a commitment to maintaining the highest standards of security. Customer Outcomes: Their success is our success, we are business partners Entrepreneurial Approach: fast decision making, empowerment, focus on results, test and learn Win Together: Intense Collaboration, no silos Integrity is paramount Why You'll Love Working Here Comprehensive medical, dental, and vision coverage, the company covers 100% of employee premiums and 90% of dependent premiums on base plans Unlimited PTO, 7 paid sick days, and 11 paid holidays 401(k) with 4% company match after 90 days, immediately vested Company‑paid life insurance at 1x annual salary Company‑paid Short‑Term Disability (STD) and Long‑Term Disability (LTD) coverage $125 monthly home‑office tech stipend for internet, equipment, and other technology needs Amazing colleagues, a collaborative environment, and a supportive, growth‑focused culture Apollo-IS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. Apollo-IS provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, _, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. At HackerOne, the Senior Sales Operations Manager plays a critical role in deepening our revenue organization’s analytical capabilities and operational rigor. You sit at the core of our revenue organization, partnering closely with Sales, Customer Success, Marketing, Partnerships, and company leadership to improve pipeline visibility and operational execution through scalable reporting, AI, and automation. You will build and own pipeline intelligence, forecast rigor, revenue analytics, and the AI automation layer that makes our GTM motion faster and smarter. The ideal candidate has already been experimenting with and building AI-powered workflows on their own, and is excited to apply agents to modernize GTM execution. HackerOne is a platform business at its core, and the ideal candidate brings experience in that model to inform GTM strategy and revenue analytics. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston, MA; Seattle, WA; San Francisco Bay Area; Austin, TX; or Washington, DC. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. Own pipeline and forecast intelligence. Build and maintain inspection frameworks to provide visibility, surface risk early, track progression, and inform data-driven decision making. Build AI-native workflows to increase velocity and reduce friction. Use Claude and other LLM-based tools in combination with GTM data (e.g., Salesforce, Gong) to automate reporting logic, generate insights, and reduce manual work across the GTM organization. Support data hygiene and improvement in systems of record, so we build on top of reliable information. Drive GTM cadences that turn data into action. Translate pipeline, conversion, and activity data into executive-ready recommendations. Facilitate operating rhythm with structured analysis that drives decisions, not just updates. Apply First Principles Problem Solving to support operational transformation. Partner cross-functionally with Revenue, Customer Success, Marketing, Partnerships, Legal, and Finance to identify issues and build scalable fixes. Contribute to GTM planning with reliable performance diagnostics, pipeline analysis, productivity and capacity modeling, and quota modeling. 5-8+ years in Sales Operations, Revenue Operations, GTM Strategy, or a related analytics-heavy operational role in a B2B SaaS or platform business. Demonstrated experience building with AI tools through projects, personal workflows, or process hacks that show you didn't wait to be taught Hands-on experience with Salesforce including reporting structures, object relationships, pipeline management, and forecasting workflows. Proficiency in building GTM models (forecast, productivity, pipeline, capacity, etc.) and automating for repeatability. Proven ability to operate and build in fast-changing environments with imperfect data, adapting structure and approach as the business evolves. Experience deploying AI-powered workflows in an enterprise GTM environment, including integrating LLM-based tools with CRM or sales data systems. Experience leading pipeline and forecast reviews with revenue and executive leadership, not just supporting them with analysis. Experience leading cross-functional initiatives without direct authority. Compensation Bands: _ Tier A: $153-175k Tier B: $137-168k #LI-Remote #LI-KM1 Health (medical, vision, dental), life, and disability insurance* Equity stock options Retirement plans Paid public holidays and unlimited PTO Paid maternity and parental leave Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act) Employee Assistance Program *Eligibility may differ by country We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with _ as our Employer of Record (EOR). Visa/work permit sponsorship is not available. Employment at HackerOne is contingent on a background check. HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws. This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time. For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, _, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. HackerOne is seeking a Staff Applications Engineer, GTM Systems who understands the end-to-end GTM motion, sees how business goals translate into process and system design, and brings hands-on expertise across a modern GTM tech stack, including Salesforce Sales Cloud, Experience Cloud, CPQ, Clay, and Marketo. Reporting to the Vice President of Enterprise Data & AI, this role offers a unique opportunity to partner directly with our CEO and SVP of GTM Operations. Join our Enterprise Data & AI team to be the technical leader driving the strategy, design, and implementation of AI native GTM systems. You’ll be a strategic collaborator, helping define and drive the roadmap, not just execute it. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston, MA; Seattle, WA; San Francisco Bay Area; Austin, TX; or Washington, DC. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. Success in the Staff Applications Engineer, GTM Systems role will be accomplished by delivering on the responsibilities below in alignment with the Talent Principles that define how we work at HackerOne. Lead the end-to-end design and delivery of scalable, secure, and intelligent GTM systems that support HackerOne’s transformation into an AI-native organization, embedding AI First principles into workflows, architecture, and operational processes. Own and evolve the architecture across Salesforce Sales Cloud, Experience Cloud, CPQ, Clay, Marketo, and adjacent platforms, redesigning legacy processes and systems to maximize automation, scalability, and business impact through AI First thinking. Drive GTM systems strategy and roadmap development by partnering closely with executive stakeholders, including the CEO and SVP of GTM Operations, applying Data-Driven Decision Making to prioritize investments, measure outcomes, and continuously improve business performance. Apply First Principles Problem Solving to deconstruct complex GTM challenges, identify root causes, and design simple, scalable solutions that improve operational efficiency, forecasting accuracy, and revenue execution. Demonstrate Change Agility by leading platform modernization efforts, helping stakeholders navigate evolving business requirements, and building repeatable frameworks that enable teams to adapt quickly to changing priorities and market conditions. Partner across business, engineering, and operations teams to identify high-leverage opportunities for automation, integration, and AI-powered capabilities that reduce manual effort and improve decision quality. Provide technical leadership and mentorship to internal engineers and external development partners, establishing standards, best practices, and scalable operating models that elevate engineering quality across GTM systems. Champion operational excellence through robust automation, governance, documentation, incident management, and change management processes, ensuring systems are resilient, trusted, and broadly adopted across the organization. 12+ years of experience in Engineering, Systems Engineering, Business Systems, Computer Science, or a related technical field, with a demonstrated track record of designing, building, and scaling enterprise GTM platforms. Extensive hands-on expertise with Salesforce Sales Cloud (including Flow and Apex development), Experience Cloud, CPQ, Clay, Marketo, and modern integration and automation platforms such as Workato. Demonstrated experience building AI-enabled workflows, automations, and business systems, with an AI First mindset focused on improving scalability, efficiency, and business outcomes. Proven ability to solve highly ambiguous and complex business challenges using First Principles Problem Solving, translating strategic goals into scalable technical solutions. Strong experience leveraging metrics, analytics, and business insights to influence priorities, evaluate outcomes, and drive Data-Driven Decision Making across cross-functional stakeholders. Proven success leading large-scale system transformations and navigating organizational change through Change Agility, maintaining momentum and stakeholder alignment in dynamic environments. Excellent written, verbal, and executive communication skills, including the ability to present complex technical concepts and data-driven recommendations to senior leaders. Salesforce Advanced Administrator, Platform App Builder, and/or Business Analyst certification Background in GTM operations and strategy with direct exposure to quote-to-cash and CPQ workflows Experience with Mac operating systems Experience working with Agile and iterative development processes Compensation Bands: _ Tier A: $220-235k Tier B: $202-235k Tier C: $191-233k #LI-KM1 #LI-Remote Health (medical, vision, dental), life, and disability insurance* Equity stock options Retirement plans Paid public holidays and unlimited PTO Paid maternity and parental leave Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act) Employee Assistance Program *Eligibility may differ by country We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with _ as our Employer of Record (EOR). Visa/work permit sponsorship is not available. Employment at HackerOne is contingent on a background check. HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws. This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time. For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

L3Harris is seeking an Associate Manager, Security Software Research Engineer to lead a team in advanced offensive security research. This remote position involves guiding vulnerability discovery and balancing research objectives with the latest attack techniques. The ideal candidate should possess

What You'll Do Plan and execute red team engagements end-to-end, simulating real-world threat actors across cloud infrastructure (AWS, GCP), Kubernetes, CI/CD pipelines, and corporate environments Build and maintain custom offensive tooling, automation frameworks, and engagement infrastructure, tr

You will work closely with our engineering and product teams to translate offensive security intuition into repeatable, AI-driven capabilities. We’re looking for someone who brings: 4 or more years of software engineering experience, with meaningful time in offensive security contexts. As adversar

Handshake AI is seeking experienced security engineering and offensive security professionals for a part-time project that evaluates AI-generated content. Ideal candidates have at least 3 years of experience in security roles and familiarity with tools like Burp Suite and Metasploit Framework. You'l

A leading tech company is seeking experienced cybersecurity professionals to evaluate AI-generated content regarding real-world security threats and defenses. The ideal applicants will have over 2 years of cybersecurity experience, solid coding skills, and fluency in English. Key responsibilities wi

We are looking for experienced cybersecurity professionals to join our team to help train AI models.In this role, you will evaluate AI-generated security content, solve technical cybersecurity problems, and provide feedback to improve how AI systems reason about real-world threats and defenses.Cyber

A cybersecurity solutions provider in Canada is seeking experienced cybersecurity professionals to evaluate AI-generated security content and solve technical problems related to cybersecurity. Candidates should have 2+ years of experience in cybersecurity, along with strong writing and analytical sk

The ideal candidate should have over two years of experience in DevSecOps or offensive security.

Overview As an Offensive Product Security Engineer, you will play a critical role in safeguarding our products by identifying and mitigating security vulnerabilities. Your expertise will help shape our security strategy, enhance our security posture, and protect our customers’ data. Familiarity wi

Cybersecurity Analyst – Kubernetes & Container Security Location: Atlanta, GA or Birmingham, AL (100% on-site) Duration: 18+ months Compensation: $60–65/HR. DevSecOps or offensive security. Experience with K8s, cloud security, and RBAC.

The role requires 5+ years of experience and expertise in offensive security techniques. Datadog, located in New York, NY, is seeking a Senior Security Engineer who will execute red team operations and build automation tools.

A leading engineering school in New York is seeking a part-time instructor for a graduate course in Offensive Security. Cybersecurity or a related field, along with practical industry experience. The role involves preparing students for Capture the Flag competitions and teaching key techniques in cy

At least one - Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified AI Security Fundamentals (CAISF), or Offensive Security Certified Professional (OSCP). The Information Security Officer will be a strategic change

We are looking for a Head of Engineering to build and lead the team behind our AI-powered pentesting platform. Track record of building and scaling engineering teams in high-growth environments. As adversaries adopt AI to increase their attack surface, we're putting cutting-edge offensive security i

As Chief Information Security Officer, you will be responsible for leading and strengthening the company’s entire security function across four key domains: Governance, Risk & Compliance (GRC), Offensive Security (Red Team), Defensive Security (Blue Team), and Security Engineering & Architecture.

Job Description Elsewhere is a multi-room Brooklyn music venue and nightclub built by and for the culture-obsessed, managed in part by our sister promotions company PopGun Presents - an events collective with deep roots in NYC's underground music community. We are here to empower artists, celebrate the diversity of our city, widen access to visionary and uplifting culture, and experience the joy of doing it all together. If you share our passion for music and art without boundaries, and you're looking for the challenge of your career, we want to connect with you - join us and grow with one of the best teams in independent arts, hospitality, events, and culture. Full Job Description We are looking for professional, in-house reliable, trustworthy and dedicated security guards. This individual will be responsible for: Monitoring patron behavior and level of intoxication Enforcing club rules often with early warnings. Removing any obnoxious and offensive persons. Always being professional when asking patrons to leave. Working primarily inside with all security team Handling frequent training about the use of force and limitations. Frequently practice and scenario drills working as a team. Must control over-crowding club intensity inside. Must control the over-service of alcoholic drinks before they go out the door Fight prevention, crowd control, validating identification at door, delegating duties to other security personnel. Deterring disorderly conduct through strong communication skills and visual observation by using deescalation tools trained by the head of security. Respond to medical emergencies to provide first aid, CPR or support as needed until medical personnel arrive. Communicate with the director of security and management personnel regarding issues and or situations occurring within the hours of operation, via both written and verbal communication methods. To be successful in this role if… You have a valid New York State Security Guard License - Security experience in hospitality/nightlife is a plus. You are available FRIDAYS, SATURDAYS, SUNDAYS, & day and OVERNIGHTS for shifts from 2:30pm until close or 9:00pm-5:00am to be considered for this position. Are Reliable, Dependable, Trustworthy and CONSISTENT. Are willing to take the F-03/F-04 fireguard certifications if you don't already have one. You maintain a professional demeanor and appearance. You are bilingual You are able to stand for long periods of time. You possess great communication skills as well as customer service skills. You must be Punctual You have a flexible schedule and are available to start ASAP!· You must be physically and mentally fit to work in a fast-paced nightlife setting. You are certified, Security License has to be up to date, not expired. You have experience in night life based jobs working in clubs bar, venue, music venues You always Maintain a friendly demeanor You are able to work in high paced environments while remaining professional You possess excellent customer service skills Work well in a team setting, communicate with managers and security supervisors You are highly organized and resourceful, with the ability to multi-task You are open minded to a diverse audiences (straight, queer, trans, POC, etc) - any type of discrimination is unacceptable This is a Part time Position Compensation and Benefits Hourly starting at $20- $25 depending on experience Commuter benefits Accrued Vacation Leave Elsewhere’s Values These values are real and guide all of our decisions in how we operate and how we treat people. This includes our decisions to hire, reward, and fire. Every single person at Elsewhere will be held to these standards. This is how we build a great team, achieve our goals, and do so enjoyably. INCLUSIVITY Elsewhere is a haven for our staff, artists, and audiences to experience the joy of expressing their authentic selves. Everybody has the right to feel welcomed and understood here, in direct defiance of all the ways our society tries to divide us up out there. We crave connectivity and togetherness. We’re curious about the unknown. We’re open-minded to a fault. OPTIMISM The chills we get experiencing transcendent music in a crowd remind us that a better world is possible. Elsewhere is a celebration of that feeling - of joy, wonder, and hope.We are here to have fun, and we reject cynicism in all its forms. RESPECT Our love for the game comes from a place of deep respect: for the extraordinary history of music and nightlife in NYC, for the working artists out there redefining culture, and for our staff who live and breathe it every night. To do right, we extend that respect to each other and everyone else along the journey. SELFLESSNESS Our job means service: to our teammates, artists, customers, community, city, and to the culture. We celebrate individuality, but there is no place for ego. INTEGRITY We believe strong communities are built on trust, and so everyone must rely on us to be honest, transparent, and consistent. We live our values and stand by them even when it’s hard or inconvenient. We admit our mistakes and work to grow from them. PASSION There are much easier ways to earn a living. The renewable resource that keeps our team sustained is an unshakable conviction in some aspect of our mission, whether it’s supporting new artists, helping audiences discover music, building community, or shifting culture. EXCELLENCE To accomplish our goals we aim high, and work both hard and smart. CREATIVITY The beauty of culture is that it is always evolving, and so should we. We value out-of- the-box thinking, challenging “the way things are,” and imaginative leaps. Like in art, it is better for us to fail trying something new than to not be experimenting in the first place. We use eVerify to confirm U.S. Employment eligibility.