Offensive security jobs in Houston, TexasCreate job alerts

Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. We are looking for a cybersecurity expert to lead our efforts to prevent AI misuse in the cyber domain. As a Cyber Harms Technical Policy Manager, you will lead a team applying deep technical expertise to inform the design of safety systems that detect harmful cyber behaviors and prevent misuse by sophisticated threat actors. Working closely with Research Engineers who build these safety systems, you and your team will provide the critical cybersecurity domain knowledge needed to ensure our safeguards are effective against real-world threats. You will be at the forefront of defining what responsible AI safety looks like in the cybersecurity domain, working across research, policy, and engineering to translate complex cyber threat concepts into concrete technical safeguards and actionable policies. This is a unique opportunity to shape how frontier AI models handle dual-use cybersecurity knowledge—balancing the tremendous potential of AI to advance legitimate security research and defensive capabilities while preventing misuse by malicious actors. • Lead and grow a team of technical specialists focused on cyber threat modeling and evaluation frameworks, • Design and oversee execution of capability evaluations ("evals") to assess the cyber-relevant capabilities of new models, • Create comprehensive cyber threat models, including attack vectors, exploit chains, precursor identification, and weaponization techniques, • Develop and iterate on usage policies that govern responsible use of our models for emerging capabilities and use cases related to cyber harms, • Serve as the primary domain expert on cyber harms, advising cross-functional teams on threat landscapes and mitigation strategies, • Collaborate closely with internal and external threat modeling experts to develop training data for safety systems, and with ML engineers to train these systems, optimizing for both robustness against adversarial attacks and low false-positive rates for legitimate security researchers, • Analyze safety system performance in traffic, identifying gaps and proposing improvements, • Conduct regular reviews of existing policies and enforcement systems to identify and address gaps and ambiguities related to cybersecurity risks, • Develop rigorous stress-testing of safeguards against evolving cyber threats and product surfaces, • Partner with Research, Product, Policy, Security Team, and Frontier Red Team to ensure cybersecurity safety is embedded throughout the model development lifecycle, • Translate cybersecurity domain knowledge into actionable safety requirements and clearly articulated policies, • Contribute to external communications, including model cards, blog posts, and policy documents related to cybersecurity safety, • Monitor emerging technologies and threat landscapes for their potential to contribute to new risks and mitigation strategies, and strategically address these, • Mentor and develop team members, fostering a culture of technical excellence and responsible AI development, • An M.S. or PhD in Computer Science, Cybersecurity, or a related technical field, OR equivalent professional experience in offensive or defensive cybersecurity, • 5+ years of hands-on experience in cybersecurity, with deep expertise in areas such as vulnerability research, exploit development, network security, malware analysis, or penetration testing, • 2+ years of experience managing technical teams or leading complex technical projects with multiple stakeholders, • Experience in scientific computing and data analysis, with proficiency in programming (Python preferred), • Deep expertise in modern cybersecurity, including both offensive techniques (vulnerability research, exploit development, penetration testing, malware analysis) and defensive measures (detection, monitoring, incident response), • Demonstrated ability to create threat models and translate technical cyber risks into policy frameworks, • Familiarity with responsible disclosure practices, vulnerability coordination, and cybersecurity frameworks (e.g., MITRE ATT&CK, NIST Cybersecurity Framework, CWE/CVE systems), • Strong analytical and writing skills, with the ability to navigate ambiguity and explain complex technical concepts to non-technical stakeholders, • Experience developing policies or guidelines at scale, balancing safety concerns with enabling legitimate use cases, • A passion for learning new skills and an ability to rapidly adapt to changing techniques and technologies, • Comfort working in a fast-paced environment where priorities may shift as AI capabilities evolve, • Track record of translating specialized technical knowledge into actionable safety policies or enforcement guidelines, • Background in AI/ML systems, particularly experience with large language models, • Experience developing ML-based security systems or adversarial ML research, • Experience working with defense, intelligence, or security organizations (e.g., NSA, CISA, national labs, security contractors), • Published security research, disclosed vulnerabilities, or participated in bug bounty programs, • Understanding of Trust & Safety operations and content moderation at scale, • Certifications such as OSCP, OSCE, GXPN, or equivalent demonstrating technical depth, • Understanding of dual-use security research concerns and ethical considerations in AI safety The annual compensation range for this role is below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Our total compensation package for full-time employees includes equity and benefits. Annual Salary: $320,000 - $405,000 USD Education requirements: We require at least a Bachelor's degree in a related field or equivalent experience. Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit _ directly for confirmed position openings. We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about _ for using AI in our application process

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, _, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. As an Infrastructure Engineer IC3, you will contribute to building and operating the infrastructure that supports the HackerOne platform and the thousands of companies that rely on us to manage their security posture. You are a strong individual contributor and collaborative team member with solid domain expertise in cloud infrastructure and reliability. You work effectively within your squad, take ownership of projects, and help improve the reliability, security, and scalability of our systems. You partner closely with application engineers and other stakeholders to deliver pragmatic, secure solutions. You understand how to design and operate highly available cloud systems and apply best practices for reliability, observability, and security. You work cross-functionally with guidance, communicate clearly with stakeholders, and approach problems with a service-oriented mindset. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston, Seattle, Austin, or Washington DC. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. First 30 days Onboard with your squad and the broader engineering organization Learn HackerOne’s infrastructure, tooling, and workflows (AWS, Terraform, Kubernetes, Ruby on Rails, GraphQL, etc.) Become familiar with our reliability, security, and incident management practices By 60 days Participate in the on-call rotation with support from teammates Take ownership of a scoped infrastructure project and deliver incremental improvements Build working relationships across engineering and adjacent functions Beyond 90 days Independently deliver infrastructure changes that improve reliability, performance, or security Understand how infrastructure supports product and customer needs, and translate requirements into practical technical solutions Contribute to operational excellence through runbooks, automation, and system improvements Ongoing Responsibilities Design, implement, and maintain cloud infrastructure using infrastructure-as-code Collaborate with cross-functional partners to execute on infrastructure initiatives Participate in an on-call rotation (one week every four weeks) and help maintain system reliability Contribute to a positive team culture by sharing knowledge and supporting teammates Continuously improve your technical skills and operational effectiveness 3+ years of experience working with Linux-based systems and cloud infrastructure Hands-on experience with AWS, Terraform, Kubernetes, Datadog, Cloudflare, and OpenSearch Experience operating and supporting production systems in an on-call environment Familiarity with modern DevOps tooling and CI/CD pipelines (GitLab CI or GitHub Actions) Experience delivering projects with dependencies across technical and non-technical teams Strong understanding of reliability, observability, and secure infrastructure practices Interest in secure-by-default infrastructure design and compliance requirements Clear communicator and effective team collaborator Willingness to participate in on-call rotation between 9am–9pm PT / 12pm–12am ET once every four weeks (Sunday–Monday). Familiarity with FedRAMP, SOC 2, or ISO 27001 environments Exposure to AI-related infrastructure concerns (e.g., model deployment, data handling, compliance) $140,000 to $175,000 (+ equity) #LI-MH1 Health (medical, vision, dental), life, and disability insurance* Equity stock options Retirement plans Paid public holidays and unlimited PTO Paid maternity and parental leave Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act) Employee Assistance Program *Eligibility may differ by country We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with _ as our Employer of Record (EOR). Visa/work permit sponsorship is not available. Employment at HackerOne is contingent on a background check. HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws. This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time. For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

*Applicants must be authorized to work in the U.S. for any employer. *We cannot sponsor employment-based visas at this time. Let’s Tango! Where Innovation Meets Impact. At Tango we’re all about helping businesses make smarter decisions through powerful technology, insightful data, and a whole lot of collaboration. Whether you're a creative thinker, a strategic planner, a tech wizard, or a customer champion, there's a place for you on our team. We believe work should be meaningful and fun — so if you're ready to make a difference while enjoying the journey, come join us and let's Tango! About the Role: We’re hiring a Staff Security Engineer, a senior, polyglot, full-stack Application Security Engineer who not only uncovers vulnerabilities but also goes into application and infrastructure codebases to fix them. You will partner with product and engineering teams to champion secure design, automate developer workflows, and scale AppSec as an engineering-first discipline. Responsibilities: • Perform hands-on security work across the stack: code reviews, threat modeling, vulnerability hunting, and remediation in production services., • Own end-to-end remediation for complex findings: from exploit proof-of-concept to code-level fixes and automated CI checks., • Build and maintain developer-first security tools, automation, and self-service capabilities (SAST rules, IaC scanning, dependency/OSS policies, CI/CD gates)., • Lead threat modeling sessions and secure design reviews for new product initiatives and platform changes., • Collaborate with SRE and Platform teams to harden runtimes, secrets management, identity, and authentication flows., • Mentor and coach engineers on secure coding, secure-by-default patterns, and incident learnings., • Contribute to security metrics and visibility (vulnerability backlog, mean time to remediate, coverage of automated tests). About You: • 10+ years software engineering and application security experience (or equivalent), with deep hands-on polyglot coding experience across at least two major languages (e.g., Java, Python, Go, JavaScript/TypeScript, C#)., • Demonstrated ability to both find security issues (offensive skills) and implement fixes across app and infra codebases (defensive skills)., • Experience building developer-friendly AppSec programs and integrating security tooling into CI/CD pipelines., • Familiarity with cloud platforms (AWS, GCP, Azure) and container/Kubernetes security practices., • Strong communication skills and experience mentoring engineers across multiple teams., • Comfort with threat modeling, secure design patterns, PKI/identity flows, OAuth/OIDC, and authentication hardening., • Experience working at scale in B2B SaaS environments; prior experience at developer-focused security companies or engineering-forward startups is a plus., • Bachelor’s degree in computer science or a related field Nice to have • Open-source security contributions, published tooling, or participation in security communities., • Experience with program-level security metrics, vulnerability triage frameworks, and compliance programs (e.g., SOC2, FedRAMP context). What We Offer We’re committed to creating an environment where you can thrive—professionally and personally. Our offerings include: • Competitive Compensation We recognize and reward your contributions with a salary package that reflects your value., • Comprehensive Benefits Including health, dental, and vision insurance, a 401(k) plan with company match, and generous paid time off to support your well-being., • Flexible Work Environment Whether remote, hybrid, or in-office, we support work arrangements that promote productivity and balance., • Inclusive & Collaborative Culture We foster a workplace where diverse perspectives are valued, teamwork is encouraged, and everyone has a voice. Tango is proud to be an equal opportunity employer. We are committed to equal opportunity regardless of race, ethnicity, religion, parental status, sexual orientation, age, citizenship, disability, or veteran status. Base pay offered is contingent on qualifications and other operational considerations. Base pay is just one piece of the full compensation structure offered at Tango. If this pay range is outside of your expectations, we still encourage you to apply and have a conversation with us. Base pay offered for this position is: $140,000 – 200,000 (USD)

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, _, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. At HackerOne, the Senior Sales Operations Manager plays a critical role in deepening our revenue organization’s analytical capabilities and operational rigor. You sit at the core of our revenue organization, partnering closely with Sales, Customer Success, Marketing, Partnerships, and company leadership to improve pipeline visibility and operational execution through scalable reporting, AI, and automation. You will build and own pipeline intelligence, forecast rigor, revenue analytics, and the AI automation layer that makes our GTM motion faster and smarter. The ideal candidate has already been experimenting with and building AI-powered workflows on their own, and is excited to apply agents to modernize GTM execution. HackerOne is a platform business at its core, and the ideal candidate brings experience in that model to inform GTM strategy and revenue analytics. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston, MA; Seattle, WA; San Francisco Bay Area; Austin, TX; or Washington, DC. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. Own pipeline and forecast intelligence. Build and maintain inspection frameworks to provide visibility, surface risk early, track progression, and inform data-driven decision making. Build AI-native workflows to increase velocity and reduce friction. Use Claude and other LLM-based tools in combination with GTM data (e.g., Salesforce, Gong) to automate reporting logic, generate insights, and reduce manual work across the GTM organization. Support data hygiene and improvement in systems of record, so we build on top of reliable information. Drive GTM cadences that turn data into action. Translate pipeline, conversion, and activity data into executive-ready recommendations. Facilitate operating rhythm with structured analysis that drives decisions, not just updates. Apply First Principles Problem Solving to support operational transformation. Partner cross-functionally with Revenue, Customer Success, Marketing, Partnerships, Legal, and Finance to identify issues and build scalable fixes. Contribute to GTM planning with reliable performance diagnostics, pipeline analysis, productivity and capacity modeling, and quota modeling. 5-8+ years in Sales Operations, Revenue Operations, GTM Strategy, or a related analytics-heavy operational role in a B2B SaaS or platform business. Demonstrated experience building with AI tools through projects, personal workflows, or process hacks that show you didn't wait to be taught Hands-on experience with Salesforce including reporting structures, object relationships, pipeline management, and forecasting workflows. Proficiency in building GTM models (forecast, productivity, pipeline, capacity, etc.) and automating for repeatability. Proven ability to operate and build in fast-changing environments with imperfect data, adapting structure and approach as the business evolves. Experience deploying AI-powered workflows in an enterprise GTM environment, including integrating LLM-based tools with CRM or sales data systems. Experience leading pipeline and forecast reviews with revenue and executive leadership, not just supporting them with analysis. Experience leading cross-functional initiatives without direct authority. Compensation Bands: _ Tier A: $153-175k Tier B: $137-168k #LI-Remote #LI-KM1 Health (medical, vision, dental), life, and disability insurance* Equity stock options Retirement plans Paid public holidays and unlimited PTO Paid maternity and parental leave Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act) Employee Assistance Program *Eligibility may differ by country We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with _ as our Employer of Record (EOR). Visa/work permit sponsorship is not available. Employment at HackerOne is contingent on a background check. HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws. This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time. For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

Finite State partners with product security teams, the guardians of our connected world, to create transparency for their connected devices and supply chains. Our platform handles connected devices and embedded systems across all industries, including those found in enterprises, healthcare, utilities, connected vehicles, manufacturing facilities, critical infrastructure, and government entities. We are a fast-growing series-B company with a fully distributed workforce. Led by a team of seasoned experts, we are a mission-driven team passionate about arming our customers with the actionable insights, critical vulnerability data, and remediation guidance necessary to mitigate product risk and protect the connected attack surface. We are committed to a remote first culture. MANAGER, PRODUCT SECURITY TECHNICAL MANAGED SERVICES SUMMARY • Operational leader accountable for hands-on management, planning, and delivery of all Finite State Product Security Technical Managed Services binary firmware analysis, device penetration testing, threat and risk assessments (TARAs), SBOM/SCA generation, vulnerability response coordination, triage and remediation, and long-term engagement support for connected product OEMs and manufacturers (strategic accounts), • Drives operational design, build-out, and scale of new and emerging managed services PSIRT-as-a-Service (PSIRTaaS), EU Cyber Resilience Act (CRA) sustainable compliance, and adjacent offerings with Finite State's AI Product Security Automation Platform as the delivery spine, • Direct people manager for the Technical Services team, accountable for hiring, onboarding, mentorship, performance management, capacity planning, skills development, and utilization optimization across a multi-disciplinary team of product security engineers and analysts, • Customer-facing managed services delivery leader accountable for engagement quality, technical accuracy, schedule adherence, customer satisfaction, renewal, and expansion across the active managed services portfolio, • Cross-functional partner to Product, Engineering, Sales, Marketing, Legal, and Regulatory Advisory Services Team, channeling field-level delivery experience into platform requirements, packaging and pricing, go-to-market enablement, and regulatory positioning ESSENTIAL FUNCTIONS Managed Service Delivery Operations • Manages day-to-day execution of all active managed technical services customer engagements; ensures delivery quality, technical accuracy, schedule adherence, and consistent application of Finite State methodology across binary analysis, penetration testing, TARA, SBOM/SCA, vulnerability management, and remediation advisory, • Owns the full engagement lifecycle: scoping, statement of work, kickoff, execution, deliverable review, customer communications, and renewal/expansion planning, • Establishes, maintains, and continuously improves service delivery playbooks, technical methodologies, deliverable templates, peer review gates, and quality acceptance criteria, • Drives consistent integration of Finite State automation platform into every engagement; ensures platform capabilities are leveraged to maximum effect and that field experience feeds the platform roadmap, • Defines, monitors, and reports Service Level Agreements (SLAs), Service Level Objectives (SLOs), and engagement-level KPIs including billable utilization, time-to-deliverable, defect/escape rates, customer satisfaction (CSAT/NPS), and renewal rate, • Acts as senior technical escalation point for engagement issues, customer concerns, and complex or contested technical findings New Service Build-Out and Operationalization • Leads operational design and standup of new product security managed service offerings — PSIRTaaS, EU CRA sustainable compliance, and other emerging services — including process design, runbook authoring, tooling integration, staffing model, pricing inputs, contractual scaffolding, and SLA framework, • Partners with Product to ensure platform capabilities required for new managed services are scoped, prioritized, instrumented, and operationalized for service delivery, • Designs and operates the customer-facing PSIRTaaS function: continuous vulnerability monitoring, automated and human-assisted triage, advisory issuance, CVE coordination with the appropriate CNA, customer disclosure workflow, remediation tracking, and post-disclosure verification, • Builds the operating model for sustainable EU CRA compliance services: conformity assessment support, Annex I essential requirements mapping, vulnerability handling obligations, technical documentation maintenance, and post-market surveillance support for connected product manufacturers People Management and Team Development • Hires, onboards, develops, mentors, and retains a team of product security engineers and analysts across multiple technical disciplines (binary/firmware analysis, offensive security, embedded systems, SBOM/SCA, regulatory engineering, vulnerability management), • Sets individual performance objectives aligned to team and company OKRs; conducts regular 1:1s, delivers ongoing performance feedback, runs formal review cycles, and addresses performance issues directly and constructively, • Builds and maintains team capacity plans and skills inventories; identifies gaps and drives hiring, cross-training, certification, and external training plans to close them, • Manages utilization across the team to balance billable engagement work, capability development, and reserved capacity for new service launches and surge demand, • Cultivates a culture of technical excellence, intellectual honesty, customer empathy, peer review, and continuous learning; fosters psychological safety in a fully remote operating environment Customer Engagement and Account Management • Serves as senior delivery contact and trusted technical advisor for strategic customer accounts; owns the technical health of those relationships, • Leads recurring service reviews, escalation discussions, and quarterly business reviews; ensures customer outcomes are visible, measurable, and tied to renewal and expansion narratives, • Partners with Sales on scoping, statements of work, pricing alignment, and pre-sales technical engagement; provides expert input to deal qualification and risk, • Identifies and qualifies expansion opportunities (additional products, additional service lines, multi-year commitments) and works with Sales to convert them Financial and Operational Performance • Owns operational delivery against the Services ARR plan; accountable for margin discipline, utilization targets, and forecast accuracy, • Provides input to pricing, packaging, and capacity planning for current and new service offerings, • Tracks and reports delivery cost, gross margin per engagement, write-down and write-off rates, and other services-economics metrics; surfaces structural issues with concrete remediation proposals, • Produces timely, accurate forecasts of staffing, hiring, and external contractor needs against the demand pipeline QUALIFICATIONS EDUCATION AND/OR EXPERIENCE • Bachelor's degree in Computer Science, Mathematics, Physical Sciences, Electrical/Computer Engineering, or equivalent demonstrable experience and certifications; advanced degree desirable, • Minimum 8 years of relevant experience in product security, embedded/connected device security, application security, or offensive security — a meaningful portion delivered in a customer-facing services, consulting, or managed services context, • Minimum 4 years of direct people management experience, including hiring, performance management, mentorship, and team development, • Demonstrated experience standing up new service offerings or productizing technical capabilities within a managed services or information technology environments is strongly preferred, • Hands-on technical depth in two or more of: binary/firmware analysis, penetration testing of embedded or IoT systems, threat modeling and TARA, SBOM and software composition analysis, vulnerability management and disclosure (CVE/CNA workflows), PSIRT/ESIRT operations KNOWLEDGE, SKILLS, ABILITIES Technical • Deep working knowledge of connected and embedded device security, including firmware, microcontrollers, wireless SoCs, RTOS environments, and integrated IoT systems, • Hands-on familiarity with binary and firmware analysis tooling and methodology (Ghidra, IDA, Binary Ninja, radare2, and platform-driven equivalents), • Strong understanding of SBOM standards (SPDX, CycloneDX), VEX, software composition analysis, and vulnerability correlation against CVE/CPE/PURL, • Strong understanding of vulnerability disclosure and PSIRT operating models, including ISO/IEC 29147 (vulnerability disclosure) and ISO/IEC 30111 (vulnerability handling), CVSS v3.1/v4, and CNA operating procedures, • Familiarity with offensive security methodology applied to embedded systems, including hardware-adjacent attacks (fault injection, side-channel concepts, debug interface exploitation) at a depth sufficient to scope, review, and quality-control the work, • Working knowledge of TARA methodologies (ISO/SAE 21434 for automotive, IEC 62443-3-2 for industrial, MITRE ATT&CK and EMB3D where applicable), • Working knowledge of applied cryptography, secure protocols, secure boot, secure update, and key management as applied to embedded systems, • Ability to ramp quickly on AI and agentic AI platforms and productivity systems; familiarity with the automated firmware/binary analysis platform category and AI-assisted vulnerability triage is preferred Standards and Regulatory • Working knowledge of EU Cyber Resilience Act (CRA), including Annex I essential requirements, vulnerability handling obligations, conformity assessment routes, and post-market surveillance expectations, • Working knowledge of IEC 62443, ETSI EN 303 645, NIST IR 8259 series, NIST SSDF (SP 800-218), and US Executive Order 14028 / OMB M-22-18 SBOM requirements, • Familiarity with ISO 27001, SOC 2 Type I/II, and adjacent compliance regimes as they apply to a managed services delivery organization Managed Services Operations • Demonstrated ability to design and operate service delivery functions to defined SLAs, SLOs, and quality standards, • Demonstrated ability to manage utilization, capacity, and engagement profitability in a billable services context, • Strong project and program management capability Leadership and Communication • Excellent written and verbal communication skills; operates fluently with executives, technical individual contributors, customer technical staff, customer executives, regulators, and partners, • Strong people leadership: hiring, coaching, performance management, conflict resolution, and team building in a fully remote environment, • Demonstrated ability to translate technical findings into business and regulatory consequences for non-technical stakeholders, • Customer-facing executive presence: owns escalations, leads difficult conversations, and represents Finite State at the most senior levels of customer organizations Certifications • One or more of the following is required: CISSP, CSSLP, CCSP, GIAC (GPEN/GXPN/GREM/GICSP), OSCP, or equivalent demonstrated technical depth, • One or more of the following is desirable: CISM, CRISC, CISA, ISO/IEC 27001 Lead Auditor or Lead Implementer, IEC 62443 Cybersecurity Expert, PMP/PgMP, ITIL Foundation or higher Tools and Environments • Familiarity with vulnerability analysis and reverse engineering tools, • Familiarity with SAST/DAST/IAST tooling categories, • Familiarity with offensive security tooling, • Familiarity with collaboration and delivery tooling, • Comfort operating in a fully remote, cloud-only company environment Our salary ranges are categorized into two tiers based on geographic location: • Tier 1 (San Francisco, New York, Seattle): $200,000 - $215,000, • Tier 2 (All Other Locations): $190,000 - $207,000 The final base salary will be determined by experience, skill set, and specific location. In addition to base pay, this role is eligible for equity and benefits. At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers. We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. CLARITY is how we move fast without breaking trust. • C - Customer first - Learn from customers. Ship with urgency., • L - Leverage - Outsource the routine. Own the result., • A - Agency - We take responsibility—end to end., • R - Results - Ship value. Improve fast., • I - Integrity - Speak up. Experiment boldly. Be kind., • T - Transparency - Clear context. Faster decisions., • Y - "Why" - Our mission—securing the connected products humanity depends on—is the reason Finite State exists. CLARITY is how we make that mission real, every day, at speed Bold Innovation – We push boundaries, explore new ideas, and take initiative to solve complex problems. The Finite State platform brings visibility and control to the supply chains that create connected devices and embedded systems—all in a simple to use platform and at the scale manufacturers need to keep device production on time and on budget. After unpacking and analyzing every file, configuration, and setting in a firmware build, the platform generates a complete bill of materials for software components, identifies known and 0-day vulnerabilities, shows a contextual risk score, and provides actionable insights that product teams can use to secure their software We are proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Finite State is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.

About Apollo Apollo Information Systems is a cybersecurity services company delivering comprehensive security and compliance programs to organizations that need measurable protection without the burden of building it alone. Backed by a Series A investment led by Syn Ventures, Apollo is pioneering a cybersecurity-as-a-service model that replaces fragmented tools and episodic engagements with unified, outcome-driven security programs. Through Apollo Aegis - a subscription-based cybersecurity and compliance platform - and a full portfolio of managed security, advisory, assessment, incident response, and offensive security services, Apollo helps organizations reduce risk, simplify operations, and maintain continuous compliance. Apollo's primary markets include state and local government, K-12 and higher education, and mid-market enterprises, with deep specialization in election security. Our Culture We are growing rapidly and have significant expansion plans and growth capital. We foster a collaborative environment where deep cybersecurity expertise meets business acumen, enabling our professionals to solve complex security challenges while building lasting client partnerships. We pride ourselves on our integrity and ethics. You’ll find smart, professional, mission-driven, hardworking, genuinely kind and good colleagues here. We primarily work remotely but have a hub in Denver. Position Overview: We are looking for a high-performing, self-driven Account Executive to grow our cybersecurity business across State, Local Government, and Education (SLED) accounts throughout the Southeastern Region. The ideal candidate is a public sector sales professional with a deep understanding of the cybersecurity services landscape who has a proven ability to open doors, build relationships, and close complex deals. Partnering closely with the a Senior AE, this individual will co-own the Southeastern SLED region, bringing both strategic thinking and execution to drive pipeline, revenue, and long-term client success. This is a hunter role at its core: the right candidate thrives on business development, takes ownership of their territory, and brings a consultative approach to helping public sector clients solve their most pressing security challenges. Key Responsibilities: Partner with Sales Manager to expand Southeastern SLED accounts from prospecting and discovery through proposal, negotiation, and close Execute on a territory business plan that identifies target accounts, key opportunities, and a clear path to meeting or exceeding quota Drive new business development through outbound prospecting, networking, industry events, partner relationships, and referrals Engage with state agencies, municipalities, school districts, and higher education institutions to uncover cybersecurity needs and align Apollo solutions accordingly Build and maintain strong, trust-based relationships with key stakeholders, including CISOs, CIOs, IT Directors, and procurement officers Collaborate with the Sales Manager to align on territory strategy, pipeline reviews, forecasting, and go-to-market priorities Work cross-functionally with technical, service delivery, and marketing teams to develop tailored proposals and solutions for SLED clients Navigate public sector procurement processes, including RFPs, cooperative purchasing vehicles, and state contracts, to remove barriers and accelerate deal velocity Identify and develop contracting vehicles (e.g., DIR, TIPS, NCPA) that enable scalable, repeatable sales across the Southeastern SLED market Manage and grow an active pipeline in CRM, maintaining accurate opportunity data, activity logs, and forecasts Identify upsell and cross-sell opportunities within existing accounts to expand Apollo's footprint and deepen client relationships Provide market intelligence and client feedback to internal teams to inform product development and service offerings Represent Apollo at relevant industry conferences, government forums, and association events across Texas Qualifications Required Demonstrated success selling cybersecurity solutions: MSSP, MDR, SOC-as-a-Service, or security product/VAR experience strongly preferred Familiarity with public sector procurement processes, such as DIR contracts, cooperative purchasing vehicles, etc. Proven track record of consistently meeting or exceeding quota in a hunter/business development role Experience selling to and navigating complex organizations with multiple stakeholders and long sales cycles Strong command of consultative and solution-based selling methodologies (e.g., MEDDIC, Challenger, or similar) Excellent communication, presentation, and negotiation skills Self-starter mentality with the ability to manage a territory independently Preferred Existing relationships with State agencies, municipalities, or school districts/higher education institutions Experience working with or for an MSSP or cybersecurity VAR Familiarity with security frameworks relevant to the public sector (NIST, CMMC, TX-RAMP, etc.) Prior experience using Salesforce or similar CRM platforms Expectations: At 30 days: Complete onboarding, including product and services training, internal process orientation, and CRM setup Develop a working knowledge of Apollo's cybersecurity portfolio and value proposition for SLED clients Meet with key internal stakeholders (Sales Manager, technical teams, marketing, and service delivery) to understand resources and support available Begin building a target account list for the Southeastern SLED territory and identify top priority opportunities Within 90 days: Have an active, documented pipeline of qualified opportunities in CRM reflecting real revenue potential Independently conducting discovery calls, delivering presentations, and advancing opportunities through the sales cycle Establish or reactivate relationships with key contacts at target accounts across state agencies, municipalities, and education institutions Identify and initiate pursuit of at least one relevant contracting vehicle or cooperative purchasing opportunity Deliver a territory business plan to the Sales Manager outlining strategy, key accounts, and 6-month revenue targets By 180 days: Demonstrate clear pipeline momentum with opportunities in late stages of the sales cycle and initial closed/won business Be fully self-sufficient in territory management, forecasting, and business development activity Have established a consistent outreach and relationship-building cadence across target accounts Contribute actively to team knowledge by sharing market insights, competitive intelligence, and client feedback Be on track to meet or exceed first-year quota based on pipeline coverage and deal progression Company Values We have created a fantastic corporate culture – our values drive our behaviors. Here are the expectations: Passion for cybersecurity and a commitment to maintaining the highest standards of security. Customer Outcomes: Their success is our success, we are business partners Entrepreneurial Approach: fast decision making, empowerment, focus on results, test and learn Win Together: Intense Collaboration, no silos Integrity is paramount Why You'll Love Working Here Comprehensive medical, dental, and vision coverage, the company covers 100% of employee premiums and 90% of dependent premiums on base plans Unlimited PTO, 7 paid sick days, and 11 paid holidays 401(k) with 4% company match after 90 days, immediately vested Company‑paid life insurance at 1x annual salary Company‑paid Short‑Term Disability (STD) and Long‑Term Disability (LTD) coverage $125 monthly home‑office tech stipend for internet, equipment, and other technology needs Amazing colleagues, a collaborative environment, and a supportive, growth‑focused culture Apollo-IS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. Apollo-IS provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, _, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. HackerOne is looking for a Director, Product Design to lead and scale our design function as we build the next generation of AI-native security products. In this role, you will guide a team of designers responsible for shaping intuitive, high-impact experiences across the HackerOne platform while helping organizations discover and remediate vulnerabilities faster and more effectively. Reporting to the Chief Product Officer, you will play a central role in defining how design evolves in a world where software creation is becoming increasingly AI-driven. You will help inspire and lead the organization toward a design-first mindset—one where design thinking becomes a core pillar of how complex systems are imagined, built, and operated. As HackerOne evolves its platform around Continuous Threat Exposure Management (CTEM), you will help define the next generation of human-computer interaction, where intelligent agents increasingly act as the primary workforce. In this future, systems will be designed for agent-to-agent interaction at scale, while humans serve as trusted partners providing oversight, accountability, and strategic decision-making. Your work will also focus on designing visualization and interaction models that simplify complex workflows, enable confident decision-making, and make advanced security workflows accessible to both machines and humans. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston, MA; Seattle, WA; San Francisco Bay Area; Austin, TX; Washington, DC; or London, UK. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. Success in the Director, Product Design role will be accomplished by delivering on the responsibilities below in alignment with the principles that define how we work at HackerOne. Inspire and guide the organization toward a design-first mindset, helping teams embrace design thinking as a core discipline in building complex AI-native systems and shaping the future of HackerOne’s platform. Lead and develop a team of product designers, creating the systems, processes, and leadership culture that Multiply Your Impact across the product organization while enabling designers to deliver high-quality experiences at scale. Partner with Product, Engineering, and executive leadership to define the long-term vision for how design shapes AI-native security platforms, ensuring teams consistently Own the Outcome for product usability, clarity, and customer impact. Champion an AI First approach to product design by creating interaction models, workflows, and experiences where intelligent agents perform the majority of operational work while humans provide trust, oversight, and strategic decision-making. Design the future of human-computer interaction in HackerOne platform by defining patterns for agent-to-agent interactions, human-in-the-loop oversight, and transparent AI systems that support trust and accountability. Lead the development of visualization strategies that simplify complex security use cases, enabling users to understand risk, prioritize actions, and make informed decisions across highly complex workflows. Apply First Principles Problem Solving to rethink traditional security workflows, designing systems that simplify complexity and unlock new ways for humans and AI agents to collaborate effectively. Use Data-Driven Decision Making to guide design priorities, evaluate product experience outcomes, and continuously improve usability, adoption, and platform effectiveness. Establish and scale a product design system that enables consistent user experiences, accelerates product development, and supports the evolution of AI-native product interactions across the HackerOne platform. 10+ years of experience in product design, including leadership roles within B2B SaaS product organizations Demonstrated experience leading and developing high-performing product design teams Experience designing AI-enabled or AI-native product experiences, including human-in-the-loop workflows, automation systems, or intelligent decision-support tools Experience scaling design functions within high-growth SaaS environments Proven success building or scaling product design systems for complex software platforms Experience designing products for developer platforms, security platforms, or technical user audiences Background working in the cybersecurity or security research ecosystem Experience designing AI-assisted workflows that combine automation with expert human decision-making Background in Human–Computer Interaction (HCI) or experience designing interaction models for complex systems, human-AI collaboration, or agent-driven workflows Compensation Bands: San Francisco $270K – $300K • Offers Equity $243K – $297K • Offers Equity $137K – $168K • Offers Equity #LI-remote Health (medical, vision, dental), life, and disability insurance* Equity stock options Retirement plans Paid public holidays and unlimited PTO Paid maternity and parental leave Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act) Employee Assistance Program *Eligibility may differ by country We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with _ as our Employer of Record (EOR). Visa/work permit sponsorship is not available. Employment at HackerOne is contingent on a background check. HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws. This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time. For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

ISE is hiring an Embedded AI Content Security Engineer to partner with the team at select clients in the media and entertainment industry. This role is particularly focused on AI and machine learning security, though responsibilities extend across the technology stack, including infrastructure and application security. The term “embedded” refers to the collaborative, integrated nature of the work, not embedded systems or IoT devices. What you’ll do at ISE: • Act as a subject matter expert on AI security, advising internal teams and external partners on best practices related to AI/ML technologies, • Stay ahead of emerging trends in AI threats, particularly those relevant to media and entertainment workflows, • Lead initiatives to build and enhance offensive testing capabilities for both AI and non-AI applications, • Conduct in-depth technical assessments of AI-enabled systems and deliver actionable insights to technical and non-technical stakeholders, • Support broader security reviews, including infrastructure (on-prem and cloud), appli-cations, content editing/transfer platforms, and media workflows., • Publish secure configuration guidance and work with vendors to assess and improve their content protection strategies., • Dedicate 50%-100% of time per week to one large client, • Travel to the Los Angeles, CA area on a regular basis: once every one or two months What you bring to the table: • Bachelor's degree in Computer Science, Engineering, Data Science, or a related field (Master’s degree preferred), • 7+ years of experience in cybersecurity, preferably with a focus on offensive security and technical assessments, • Demonstrated experience designing and securing infrastructure and cloud-native applications, • Proficiency with major cloud platforms (AWS, Azure, GCP), especially with respect to deploying and evaluating AI/ML solutions, • Ability to distill complex security findings for a non-technical audience, • Solid understanding of traditional infrastructure security technologies, including storage, VPNs, firewalls, directory services, and endpoint protection, • AI/ML certifications (e.g., AWS Certified ML, Azure AI Engineer) are a plus, • Information security certifications such as CISSP, CCSP, OSCP are also beneficial. Salary: $140K-$170K, depending on experience. If you don't think you meet all the criteria above but are still interested in the job, please apply. Nobody checks every box, and we're looking for someone excited to join the team. What we bring to the table: • Check out joinise.io for full details, • Work that matters; projects that impact people’s everyday life and wellbeing, • Quality, integrity, dedication, and education: our core values, • Life balance: flexible schedule, work from home options, unlimited vacation, • $0 health premium plan option, including spouse and family, • Opportunities to research and publish, speak at major security events and conferences, • Leadership and peers that support and mentor you: your growth is our growth, your success is our success, • Relaxed and fun environment: ditch the suit and tie, sit or stand at your desk or find a sofa How you’ll learn at ISE: Everyone has a mentor, or two or three sometimes. We hold you and ourselves accountable for your advancement. You’ll learn directly from your mentor, your colleagues, resources vetted by the team, and at regular firetalk lunches by your peers – oh, and lunch is on us once a week in the office. You also have access to paid training, workshops, university courses, certification courses, and we’ll pay for the certs too. Want to learn a new skill that you aren’t currently using but want to? Great! Innovation is key–new technology is important. About ISE: ISE is an independent security consulting and software firm headquartered in Baltimore, Maryland, dedicated to securing high value assets for global enterprises and performing groundbreaking security research. Using an adversary-centric perspective driven by our elite team of analysts and developers, we improve our clients’ overall security posture, protect digital assets, harden existing technologies, secure infrastructures, and work with development teams to ensure product security prior to deployment. Our team enjoys working in a creative, educational, and comfortable environment where they can thrive professionally. Building a Better Community: We value different viewpoints and fresh perspectives. We embrace people who challenge our thinking and question the status quo. We are opposed to narrow minded, exclusionary, and discriminatory viewpoints or practices that inherently undermine our creative process, hinder growth, and impede innovation. Need more info? Be sure you spend some time at www.ise.io. Make sure you look through all the perks on the Careers page, then check out our Research and Blog, our events page for the IoT Village, and About page. Follow us on Twitter @ISEsecurity and @IoTvillage

Build the future of offensive security with XBOW. Attackers are already using AI to move faster than defenders can react—we’re creating the platform that puts security ahead in the arms race. Our AI-powered system autonomously discovers, validates, and even exploits vulnerabilities, giving organizations proof-backed results in hours instead of weeks. Founded by Oege de Moor, creator of GitHub Copilot, and backed by Sequoia, Altimeter, and other leading investors, XBOW is applying cutting-edge AI to one of the world’s most urgent problems. In just over a year, our AI, built by a world-class AI team and legendary security researchers — has uncovered thousands of real-world zero-days across the software billions rely on, and achieved the #1 ranking on HackerOne’s global leaderboard. We’re a team of builders, hackers, and researchers who thrive on solving problems others think are impossible. If you want to push the boundaries of AI, reshape how security is done, and join the group defining this new era of defense — we’d love to talk. We’re looking for a Software Engineer - Platform / Core Infrastructure who’s passionate about building scalable systems and solving hard problems in ambiguous environments. In this role, you’ll design and implement the complex distributed infrastructure that powers our core AI engine and distributed analysis systems, enabling XBOW to run seamlessly across multiple cloud providers (AWS, Azure, OCI etc.) and contexts (SaaS, on prem). This is a role for someone who sees infrastructure as a product, loves clean abstractions, and knows how to dig into performance issues across layers. You’ll join a high-trust, high-velocity team where your work will have an immediate impact on both developer experience and product performance. If you like being at the intersection of deep tech and real-world impact, you’ll feel right at home. Design and implement infrastructure systems that scale reliably and securely, and can be deployed across multiple cloud environments (AWS, Azure, OCI etc.) and contexts (SaaS, on prem). Tune and optimize cloud services across compute, storage, networking, and observability to drive performance, reliability and maintainability of core services. Develop our core services, written in TypeScript, Kotlin and Go (and pick them up quickly if you haven’t used them before) to support our unique deployment and infrastructure requirements. Support large-scale systems with event driven architectures. Own problems end-to-end—from design through deployment to production support Navigate ambiguity and help define how we build as much as what we build Partner closely with other engineers, AI researchers and Security researchers to enable high-quality, high-velocity product development Design for resilience by implementing disaster recovery and business continuity strategies that ensure uptime, even when things break Improve how we build, deploy, and monitor services at scale Essential: Strong experience building and operating scalable, distributed systems on cloud infrastructure such as AWS or similar. Extensive experience with Containerisation and Orchestration technologies (e.g. Docker and Kubernetes). Comfortable working with infrastructure as code (e.g., Terraform, CDK) and see infra as part of the engineering system—not something separate from it. Experience with event-driven architectures, message queues, or async workflows (for example, using Kafka). A track record of performance tuning across cloud services, databases, and compute layers Eager to learn new tools, languages, and technologies as needed A thoughtful communicator who values clarity and simplicity and is comfortable working in a fast-paced startup and navigating ambiguity Strong problem-solving skills and the ability to work with incomplete information Curious, practical, and eager to work across layers of the stack when needed You think proactively about failure modes and bring experience implementing disaster recovery and business continuity plans that keep critical systems running. Advantageous: Experience with deploying infrastructure to multiple environments (SaaS, on-prem) and know how to build resilient systems that handle the complexity of such environments. Familiarity with modern observability practices (logs, metrics, tracing) and how to apply them Experience working in an early stage startup Prior experience building developer tooling or security products Hands-on experience with OpenSearch or Elasticsearch at scale Previous experience building platform teams or working on internal developer platforms Compensation & Equity: Competitive salary and a generous equity package, making you a true owner of the company. Career Growth: Shape your role, lead the function, and grow with the company as we redefine cybersecurity. Meaningful Work: You will tackle technically complex challenges and play a pivotal role in the growth of our business, working alongside an amazing team and some of the world’s experts to shape how AI transforms cybersecurity. Location: Remote in the US or EMEA (all team members are remote but we meet regularly and you’re supported to travel to collaborate with colleagues in person) Contract: Full-time. Hiring Process: 45-min introductory chat with our Talent team. 45 minutes with an Engineering Lead. 2-3 hour pair programming session with two members from the team. 30-min final wrap-up call with an Engineering Lead. We aren't focused on seniority titles at XBOW—so if you’re worried about “leveling,” don’t be. We care a lot more about mission fit, capability, and impact than what’s on your LinkedIn headline. We believe in people who are driven by curiosity and a willingness to learn. Even if you don't check every box, we encourage you to apply if you're excited about the role and our mission.

ISE is hiring an Embedded Content Security Engineer to partner with the team at one of our large clients in the media and entertainment industry. This role is particularly focused on AI and machine learning security, though responsibilities extend across the technology stack, including infrastructure and application security. The term “embedded” refers to the collaborative, integrated nature of the work, not embedded systems or IoT devices. What you’ll do at ISE: • Act as a subject matter expert on AI security, advising internal teams and external partners on best practices related to AI/ML technologies, • Stay ahead of emerging trends in AI threats, particularly those relevant to media and entertainment workflows, • Lead initiatives to build and enhance offensive testing capabilities for both AI and non-AI applications, • Conduct in-depth technical assessments of AI-enabled systems and deliver actionable insights to technical and non-technical stakeholders, • Support broader security reviews, including infrastructure (on-prem and cloud), appli-cations, content editing/transfer platforms, and media workflows., • Publish secure configuration guidance and work with vendors to assess and improve their content protection strategies., • Dedicate 50%-100% of time per week to one large client, • Travel to the Los Angeles, CA area on a regular basis: once every one or two months What you bring to the table: • Bachelor's degree in Computer Science, Engineering, Data Science, or a related field (Master’s degree preferred), • 7+ years of experience in cybersecurity, preferably with a focus on offensive security and technical assessments, • Demonstrated experience designing and securing infrastructure and cloud-native applications, • Proficiency with major cloud platforms (AWS, Azure, GCP), especially with respect to deploying and evaluating AI/ML solutions, • Ability to distill complex security findings for a non-technical audience, • Solid understanding of traditional infrastructure security technologies, including storage, VPNs, firewalls, directory services, and endpoint protection, • AI/ML certifications (e.g., AWS Certified ML, Azure AI Engineer) are a plus, • Information security certifications such as CISSP, CCSP, OSCP are also beneficial. Salary: $140K-$170K, depending on experience. If you don't think you meet all the criteria above but are still interested in the job, please apply. Nobody checks every box, and we're looking for someone excited to join the team. What we bring to the table: • Check out joinise.io for full details, • Work that matters; projects that impact people’s everyday life and wellbeing, • Quality, integrity, dedication, and education: our core values, • Life balance: flexible schedule, work from home options, unlimited vacation, • $0 health premium plan option, including spouse and family, • Opportunities to research and publish, speak at major security events and conferences, • Leadership and peers that support and mentor you: your growth is our growth, your success is our success, • Relaxed and fun environment: ditch the suit and tie, sit or stand at your desk or find a sofa How you’ll learn at ISE: Everyone has a mentor, or two or three sometimes. We hold you and ourselves accountable for your advancement. You’ll learn directly from your mentor, your colleagues, resources vetted by the team, and at regular firetalk lunches by your peers – oh, and lunch is on us once a week in the office. You also have access to paid training, workshops, university courses, certification courses, and we’ll pay for the certs too. Want to learn a new skill that you aren’t currently using but want to? Great! Innovation is key–new technology is important. About ISE: ISE is an independent security consulting and software firm headquartered in Baltimore, Maryland, dedicated to securing high value assets for global enterprises and performing groundbreaking security research. Using an adversary-centric perspective driven by our elite team of analysts and developers, we improve our clients’ overall security posture, protect digital assets, harden existing technologies, secure infrastructures, and work with development teams to ensure product security prior to deployment. Our team enjoys working in a creative, educational, and comfortable environment where they can thrive professionally. Building a Better Community: We value different viewpoints and fresh perspectives. We embrace people who challenge our thinking and question the status quo. We are opposed to narrow minded, exclusionary, and discriminatory viewpoints or practices that inherently undermine our creative process, hinder growth, and impede innovation. Need more info? Be sure you spend some time at www.ise.io. Make sure you look through all the perks on the Careers page, then check out our Research and Blog, our events page for the IoT Village, and About page. Follow us on Twitter @ISEsecurity and @IoTvillage

Get to Know Us Horizon3.ai is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find and fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by ITOps/SecOps teams, consulting pentesters, and MSSPs and MSPs. We are a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results. Summary We're looking for an Offensive Security Software Engineer with extensive web application penetration testing experience and a growing interest in AI-enhanced security techniques. You will have a significant impact on how we deliver value to our customers by designing, developing, and integrating web application penetration testing content into the NodeZero platform. This position requires practical expertise in full-scope web application testing, proven software development skills, and enthusiasm for leveraging emerging AI technologies to advance offensive security capabilities. Essential Functions Design, develop, and integrate web application offensive security content into the NodeZero platform Design, develop, and integrate novel attack capabilities into the NodeZero platform, including offensive security tooling and AI-enhanced techniques. Research and implement AI-driven methods for vulnerability detection, exploitation, and workflow automation. Extend and maintain platform architecture, data models, and system design to support new product features. Monitor production for issues or missed opportunities and create or resolve Jira tickets as needed. Integrate open-source and in-house tools, ensuring quality through testing, code reviews, and production monitoring. Investigate, own, and resolve bugs in developed content. Collaborate cross-functionally to address customer and prospect concerns related to attack content. Author technical blog posts showcasing new research, exploits, or attack methodologies. Mentor junior engineers and contribute to continuous improvement of team processes and standards Competencies/Requirements Experience conducting full scope web application pentests Experience with proxy tools like Burp and with browser developer tools Proficient in object-oriented programming and test-driven development, with strong analytical and problem-solving skills. Experience applying AI-assisted development tools to security research and automation tasks Curiosity about emerging AI technologies. Skilled in designing, evaluating, and communicating technical solutions across systems, APIs, algorithms, and data structures. Familiarity with relational and graph databases, particularly Postgres and Neo4j. Strong written and verbal communication, including technical documentation. Ability to manage multiple priorities, work independently, and mentor teammates of varying experience levels. Quick to learn and adopt new technologies as needed. History of recognized security research, including documented CVE discoveries and responsible disclosure Track record of successful bug bounty contributions Desired/Nice to Have Experience developing software and automation to aid in web application pentesting Background in large-scale software development projects. Experience fine-tuning language models or implementing retrieval-augmented generation (RAG) for security-focused applications. Experience with AI/LLM tools for building agentic workflows (e.g., LangChain, LangFlow) and integrating contextual data using protocols like Model Context Protocol (MCP). Expectations: Outstanding problem-solving aptitude. Be self-motivated and highly energetic to have the ability to operate effectively with limited supervision and guidance. Work with our security researchers to understand the technical aspects of reverse engineered exploits and weaponizing these exploits into the product. Strong technical documentation and communication skills. Document findings, methodologies, and recommendations for both technical and non-technical stakeholders. Proficient in designing, presenting, and evaluating technical solutions. What makes you stand out: Demonstrated examples of using AI to enhance or automate exploit development OSCP (Offensive Security Certified Professional) Certification Travel Required We are a fully remote company, and this job may require up to 15% of travel to be successful. Job-related travel expenses are reviewed and must be approved by your manager. Perks of Horizon3.ai Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive. Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities. Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking. Remote Work: We are a 100% remote company. Enjoy the convenience and work-life balance that comes with remote work. Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave. Compensation and Values At Horizon3, we believe that our people are our greatest asset, and our compensation philosophy reflects this core value. We are committed to fostering an environment where all employees feel valued, respected, and rewarded for their contributions. Our compensation structure is designed to be fair, competitive, and transparent, ensuring that every team member is recognized and compensated equitably across roles, levels, and locations. In accordance with various State’s transparency regulations, we provide the following salary range information for this position: Base salary range: $185,000 - $240,000 annually. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills. Additional compensation: All full-time roles are eligible for an equity package in the form of stock options. You Belong Here Horizon3 is not just an equal opportunity employer - we are a community that values diversity, equity, and inclusion as fundamental principles of our culture and success. We are dedicated to fostering a workplace where everyone feels welcome and respected, regardless of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, or any other legally protected status by law. Our commitment to diversity and inclusion means we strive to attract, develop, and retain a workforce that reflects the varied communities we serve. We believe that diverse perspectives drive innovation and strengthen our ability to create cutting-edge cybersecurity solutions. At Horizon3, every team member is valued and supported in an environment that encourages personal and professional growth. We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply. Come be a part of Horizon3, where your unique contributions are recognized, and your potential is limitless. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

Position Summary Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. We are seeking a skilled Penetration Tester to assess the security of web applications, APIs, and related systems. This role is responsible for identifying vulnerabilities, validating exploitability, and providing practical remediation guidance to improve overall application security posture. The ideal candidate combines hands-on offensive security experience with strong knowledge of secure development practices and common web application attack vectors. Work you'll do As a Penetration Tester on the Cyber Defense & Resilience team, you will be responsible for… Perform manual and automated penetration testing of web applications, APIs, and supporting infrastructure. Identify, validate, and document security vulnerabilities such as those in the OWASP Top 10. Conduct authenticated and unauthenticated testing across development, test, and production-like environments. Assess application security controls including authentication, authorization, session management, input validation, and encryption. Prepare clear, risk-based reports with technical findings, business impact, proof of concept, and remediation recommendations. Work with developers, architects, and security teams to explain findings and support remediation efforts. Retest remediated issues and confirm closure. Contribute to security standards, testing methodologies, and internal knowledge sharing. Stay current on emerging threats, exploit techniques, and application security trends. A successful candidate would possess these skills: Ability to work independently and collaborate as part of a team Effective written and verbal communication skills Meticulous attention to detail and quality of work product Ability to build and sustain professional relationships Ability to lead projects or workstreams Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment Strong interpersonal skills and professional demeanor Ability to meet deadlines Ability to provide clear guidance to others The Team Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise. Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence. Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response, ensuring clients can be ready for, respond to, and recover from business disruptions. This opportunity sits within our Deloitte US Delivery Center model, which is dedicated to driving impactful business services. It leverages Deloitte's scale and talent, as well as a center delivery model to provide high-quality, cost-effective service with standardized processes and procedures to service businesses across Deloitte. The Deloitte US Delivery Center has a small-business feel with a big-business impact. With the resources of Deloitte and a community feel, the delivery center model provides high-quality services to our clients. USDC professionals work out of one of our specific delivery center locations, and each location presents dynamic career opportunities for professionals to focus on their work with nominal travel requirements. Qualifications Required: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field Ability to obtain and maintain the necessary clearance for the role. Offensive Security Certified Professional (OSCP), Offensive Security Web Expert (OSWE), GIAC Penetration Tester (GPEN), or Certified Ethical Hacker (CEH). 2+ years of experience within the following: Hands-on penetration testing experience with a focus on web applications. Strong understanding of web technologies including HTTP/S, REST APIs, JavaScript, cookies, headers, and sessions. Experience identifying vulnerabilities such as SQL injection, XSS, CSRF, SSRF, IDOR, authentication flaws, and access control weaknesses. Proficiency with common testing tools such as Burp Suite, OWASP ZAP, Nmap, Postman, and similar tools. Experience writing professional penetration test reports for technical and non-technical audiences. Familiarity with OWASP Top 10, CWE, CVSS, and secure coding principles Delivery Center Location & Travel Requirements: Hybrid Work Model: Operate under a hybrid system requiring residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, or Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, and Philadelphia) Co-location Expectation: Spend up to 30% of working time co-located at an assigned office for orchestrated opportunities, including projects, practice sessions, training, and Moments That Matter at a Deloitte Delivery Center location, Geo-Hub location, approved site, or project location Travel Requirement: Maximum of 10% overnight travel for client or project purposes Relocation Requirement: If relocation is necessary, complete the move within 12 weeks from the start date to reside within a commutable distance Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future. Preferred: Experience testing modern frameworks and architectures such as single-page applications, microservices, and cloud-hosted applications. Knowledge of CI/CD pipelines and DevSecOps practices. Experience with source code review or secure code assessment. Familiarity with cloud platforms such as AWS, Azure, or GCP. Deloitte is committed to providing reasonable accommodations for people with disabilities. If you require a reasonable accommodation to participate in the recruiting process, please direct your inquiries to the Global Call Center (GCC) at USTalentCICInbox@deloitte.com. Recruiting tips From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters. Benefits At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you. Our people and culture Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas, and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work. Our purpose Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Learn more. Professional development From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career. As used in this posting, "Deloitte" means Deloitte Transactions and Business Analytics LLP, a subsidiary of Deloitte LLP. Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. Requisition code: 350127 Job ID 350127

Life360’s mission is to keep people close to the ones they love. Our category-leading mobile app,Tile tracking devices, and Pet GPS tracker empower members to protect the people, pets, and things they care about most with a range of services, including location sharing, safe driver reports, and crash detection with emergency dispatch. Life360 serves approximately 97.8 million monthly active users (MAU), as of March 31, 2026, across more than 180 countries. Life360 delivers peace of mind and enhances everyday family life with seamless coordination for all the moments that matter, big and small. By continuing to innovate and deliver for our customers, we have become a household name and the must-have mobile-based membership for families (and those friends who are basically family). Life360 has more than 500 (and growing!) remote-first employees. For more information, please visit _. Life360 is a Remote-First company, which means a remote work environment will be the primary experience for all employees. All positions, unless otherwise specified, can be performed remotely (within the US) regardless of any specified location above. We are AI Native We are building an AI native company where AI is an integral part of how we build and operate. AI tool usage during interviews varies by role. You may be asked to demonstrate proficiency with AI tools, discuss how you leverage AI, or complete interview exercises without AI assistance. Your Recruiter will provide clear guidance as you move through the interview process. Undisclosed use of AI not previously discussed with or approved by your Recruiter may impact your candidacy. The Information Security and Technology team is responsible for keeping Life360 safe — our systems, our employees, and the tens of millions of families who trust us with their location data. That obligation is the starting point. How we meet it is what makes this team different. We are builders. Security controls that don't get used aren't controls. Compliance programs that create friction without reducing risk aren't programs. We build things that work in production, earn adoption from engineering teams, and get better over time — and we use AI to do it at a scale a traditional team couldn't. We're also at an inflection point. Life360 is deploying agentic systems into how we build and operate, and the security and governance implications of that are still being worked out — by us, and by the industry. The threat surface is expanding. The compliance frameworks are catching up. The people on this team aren't waiting for either. We're hiring a Staff Security Operations Engineer to define and lead Life360's next-generation security operations program. This is a technical leadership role for someone who sets direction, raises the bar on the engineers around them, and builds the systems they design. We're building security operations the way they should work in 2026 — AI-native from day one. The foundation of that is a mature, high-fidelity security observability platform: the telemetry pipelines, detection surfaces, and data infrastructure that make everything else possible. Getting that foundation right is the prerequisite. What we build on top of it is what makes this role different from any SecOps job you've held before. The end state we're building toward is one where AI is a genuine operational partner — surfacing anomalies, supporting threat hunting, taking autonomous action on lower-criticality events where we have confidence in the outcome, and orchestrating response workflows that would otherwise require human hands at every step. AI agents handle triage, enrichment, and correlation. Humans focus on judgment calls and high-stakes decisions. Detection and response is treated as a software engineering discipline with measurement, quality loops, and safe rollout patterns. If you've been waiting for a role where you set the technical direction rather than execute someone else's, this is it. We use AI tools as a professional standard on this team. Here's what that means in practice. • Daily use: You use AI tools for real, substantive work — analysis, drafting, automation, code, investigations, evidence gathering., • Judgment and ownership: AI-generated work gets the same scrutiny you'd give any human-produced artifact. You're accountable for everything you ship., • Domain-specific judgment: You know where AI is the wrong tool. Sensitive data handling, attacker-controlled inputs, agents with production access, and privileged identity changes all need careful guardrails — and you can articulate where AI helps, where it hurts, and where it needs a human in the loop., • Leverage: When AI is working well, you take on problems that would otherwise require a larger team. We hire people who use that leverage to ship better outcomes, not just faster ones., • Continuous learning: The tooling moves fast. You stay current, share what works with the team, and speak up when something would meaningfully change how we operate. The US-based salary range for this position is $149,000 to $271,500. We take into consideration an individual's background and experience in determining final salary - therefore, base pay offered may vary considerably depending on geographic location, job-related knowledge, skills, and experience. The compensation package includes a wide range of medical, dental, vision, financial, and other benefits, as well as equity. • Own the roadmap for detection and response. The platform decisions, the architecture decisions, the build-versus-buy calls — you make them, and you defend them., • Build and mature the security observability platform. Own the security telemetry layer across infrastructure, identity, endpoint, SaaS, and AI-native systems. Partner with Data Platform on the SIEM and data lake foundation that makes all of it queryable and scalable., • Deploy AI agents that operate, not summarize. Agents handle triage, correlation, enrichment, and autonomous action on lower-criticality events where confidence is high, then extend into anomaly detection and threat hunting. Partner with AI platform teams on the safety patterns that make autonomous action trustworthy., • Build detection and response capabilities with AI at the center. Design workflows where AI creates, tests, and improves detection content — not just executes it. Build the case management and response orchestration that moves from signal to resolution with minimal human intervention., • Drive continuous validation of detection effectiveness. Run the measurement program — precision, false positive rates, signal quality — and design agentic tuning workflows that surface underperforming detections and reduce noise without a human in every loop., • Own incident response end-to-end. Severity matrix, communication cadence, roles, escalation paths, executable playbooks, and the measurement program that tells us whether we're improving. Drive post-incident reviews that produce measurable change. Participate in the on-call rotation and lead response for high-severity events., • Make detection and response a design-time concern, not an afterthought. Partner with Security Engineering, GRC, IT, Engineering, Legal, and Privacy to ensure observability and response coverage is part of how systems are launched., • Lead, develop, and represent. Raise the technical bar through code review, design review, and direct coaching. Represent Life360 and the team externally where appropriate., • 8+ years of hands-on security operations or detection engineering experience with a track record of building things that hold up in production — not just advising on them., • Hands-on experience building AI-powered security workflows in production. Automated triage, AI-driven alert correlation, agentic investigation, integrated into a real operations stack. You can articulate where AI worked, where it didn't, and how you measured the difference., • Deep AWS experience — CloudTrail, IAM, GuardDuty, native logging — and the ability to investigate cloud incidents end-to-end. Comfortable writing detection queries and rules in whatever language your SIEM speaks., • Identity-centric thinking. You know that identity is the perimeter. Investigating Okta, SSO, OAuth, and session-based attacks is in your muscle memory., • Owned the architecture and deployment of a detection platform end-to-end. You've made the structural decisions, lived with them in production, and refined them over time., • Built a detection pipeline quality framework — precision measurement, false positive tuning, and continuous improvement processes. You can show the metrics that proved the program was getting better., • Designed and implemented incident response processes from scratch — severity matrices, escalation paths, and the measurement program around them., • Production-grade code. You can read, write, and ship it — and you use AI coding tools to operate with leverage. The bar is reliable, maintainable, observable, and production-ready., • A purple team orientation and hands-on hunting experience. You understand offensive techniques well enough to build detections against them, you've run hunts that produced real findings, and you've worked cases where the threat actor was inside the perimeter., • Strong technical communication. You can translate detection and response requirements into clear specs for engineering teams, brief executives on incidents, and write post-incident reviews that drive change., • Bachelor’s degree or equivalent Nice to have • Built or significantly contributed to agentic workflows in production. You've designed agents that take action, formed strong opinions about where autonomy is safe and where human judgment is non-negotiable, and you understand how LLMs behave under adversarial conditions., • Familiarity with AI agent frameworks and the security implications of agentic systems with production access., • Published detection content, given conference talks, or contributed to open-source security tooling., • Experience with container and Kubernetes security telemetry., • Direct experience investigating nation-state actors or APT-class threats., • High-growth environment experience where the security program had to be built while it was being run., • Competitive pay and benefits, • Medical, dental, vision, life and disability insurance plans (100% paid for employees), • 401(k) plan with company matching program, • Mental Wellness Program & Employee Assistance Program (EAP) for mental well-being, • Flexible PTO, 13 company-wide days off throughout the year, • Winter and Summer Weeklong Synchronized Company Shutdowns, • Learning & Development programs, • Equipment, tools, and reimbursement support for a productive remote environment, • Free Life360 Platinum Membership for your preferred circle, • Free Tile Products Our company’s mission-driven culture is guided by our shared values to create a trusted work environment where you can bring your authentic self to work and make a positive difference • Be a Good Person - We have a team of high integrity people you can trust., • Be Direct With Respect - We communicate directly, even when it’s hard., • Members Before Metrics - We focus on building an exceptional experience for families., • High Intensity, High Impact - We do whatever it takes to get the job done. We believe that different ideas, perspectives and backgrounds create a stronger and more creative work environment that delivers better results. Together, we continue to build an inclusive culture that encourages, supports, and celebrates the diverse voices of our employees. It fuels our innovation and connects us closer to our customers and the communities we serve. We strive to create a workplace that reflects the communities we serve and where everyone feels empowered to bring their authentic best selves to work. We are an equal opportunity employer and value diversity at Life360. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status or any legally protected status. We encourage people of all backgrounds to apply. We believe that a diversity of perspectives and experiences create a foundation for the best ideas. Come join us in building something meaningful. Even if you don’t meet 100% of the below qualifications, you should still seriously consider applying! #LI-Remote

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, _, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. HackerOne is seeking a Manager to lead Applied Data Engineering on our DataOne team. You will lead the discovery, architecture, and development of high-impact, high-performance, scalable source of truth data marts and data products. Joining our growing, distributed organization, you'll be instrumental in building the foundation that powers HackerOne's one source of truth. As a Manager of Applied Data Engineering, you'll have the autonomy to lead challenging projects and foster collaboration across the company. Leveraging your extensive technological expertise, domain knowledge, and dedication to business objectives, you'll drive innovation to propel HackerOne forward. Enterprise Data & AI’s Mission & Vision The HackerOne Enterprise Data & AI team democratizes source of truth information, transformative insights, and AI tooling and infrastructure to power enhanced decision-making, autonomous execution, and mission-aligned scale. The future is one where every Hackeronie is a catalyst for positive change, advancing data-driven, AI-powered, human-led innovation while fostering our culture of transparency, collaboration, and customer obsession. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston, Austin, or Washington DC. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. Your first day will start with a warm welcome and technical onboarding! Your first 30 days will focus on getting to know HackerOne. You will join your new squad and begin onboarding - learn our technology stack (Python, Airflow, Snowflake, DBT, Meltano, Fivetran, Looker, AWS), and meet our Hackeronies. Within 60 days, you will deliver impact on a company level with consistent contribution to high-impact, high-performance, scalable source of truth data marts and data products. Within 90 days, you will drive the continuous evolution and innovation of data at HackerOne, identifying and leading new initiatives. Additionally, you foster cross-departmental collaboration to enhance these efforts. After 90 days, you will: Deliver impact by developing the roadmap for continuously and iteratively launching high-impact, high-performance, scalable source of truth data marts and data products, and by leading and delivering cross-functional product and technical initiatives. Be a technical paragon and cross-functional force multiplier, autonomously determining where to apply focus, contributing at all levels, elevating your squad, and designing solutions to ambiguous business challenges, in a fast-paced early-stage environment. Drive continuous evolution and innovation, adoption of emerging technologies, and implementation of industry best practices. Champion a higher bar for discoverability, usability, reliability, timeliness, consistency, validity, uniqueness, simplicity, completeness, integrity, security, and compliance of information and insights across the company. Provide technical leadership and mentorship, fostering a culture of continuous learning and growth. 8+ years experience as an Analytics Engineer, Business Intelligence Engineer, or similar role w/ proven track record of launching source of truth data marts, and at least 3+ years in a leadership role. 8+ years of experience building and optimizing data pipelines, products, and solutions. Extensive experience working with various data technologies and tools such as Airflow, Snowflake, Meltano, Fivetran, DBT, and AWS. Strong proficiency in SQL for data manipulation in a fast-paced work environment. Strong proficiency in creating compelling data stories using data visualization tools such as Looker, Tableau, Sigma, Domo, or PowerBI. Proven track record of having substantial impact across the company, as well as externally for the company, demonstrating your ability to drive positive change and achieve significant results. Strong proficiency in at least one data programming language such as Python or Scala. Experience working within and with data from business applications such as Salesforce, Clari, Gainsight, Workday, GitLab, Slack, or Freshservice. Proven track record of driving innovation, adopting emerging technologies and implementing industry best practices. Passion for working backwards from the Customer and empathy for business stakeholders. Thrive on solving for ambiguous problem statements in an early-stage environment. Excellent communication skills, and can present data-driven narratives in verbal, presentation, and written formats. Experience shaping the strategic vision for data. Experience designing advanced data visualizations and data-rich interfaces in Figma or equivalent. Experience working with Agile and iterative development processes. $170,000 to $205,000 (+ equity) #LI-MH1 Health (medical, vision, dental), life, and disability insurance* Equity stock options Retirement plans Paid public holidays and unlimited PTO Paid maternity and parental leave Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act) Employee Assistance Program *Eligibility may differ by country We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with _ as our Employer of Record (EOR). Visa/work permit sponsorship is not available. Employment at HackerOne is contingent on a background check. HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws. This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time. For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

About Apollo Apollo Information Systems is a cybersecurity services company delivering comprehensive security and compliance programs to organizations that need measurable protection without the burden of building it alone. Backed by a Series A investment led by Syn Ventures, Apollo is pioneering a cybersecurity-as-a-service model that replaces fragmented tools and episodic engagements with unified, outcome-driven security programs. Through Apollo Aegis - a subscription-based cybersecurity and compliance platform - and a full portfolio of managed security, advisory, assessment, incident response, and offensive security services, Apollo helps organizations reduce risk, simplify operations, and maintain continuous compliance. Apollo's primary markets include state and local government, K-12 and higher education, and mid-market enterprises, with deep specialization in election security. Our Culture We are growing rapidly and have significant expansion plans and growth capital. We foster a collaborative environment where deep cybersecurity expertise meets business acumen, enabling our professionals to solve complex security challenges while building lasting client partnerships. We pride ourselves on our integrity and ethics. You’ll find smart, professional, mission-driven, hardworking, genuinely kind and good colleagues here. We primarily work remotely but have a hub in Denver. Position Overview: We are looking for a high-performing, self-driven Account Executive to grow our cybersecurity business across State, Local Government, and Education (SLED) accounts throughout the Northeast Region. The ideal candidate is a public sector sales professional with a deep understanding of the cybersecurity services landscape who has a proven ability to open doors, build relationships, and close complex deals. Partnering closely with a Senior AE, this individual will co-own the Northeast SLED region, bringing both strategic thinking and execution to drive pipeline, revenue, and long-term client success. This is a hunter role at its core: the right candidate thrives on business development, takes ownership of their territory, and brings a consultative approach to helping public sector clients solve their most pressing security challenges. Key Responsibilities: Partner with Senior AE to expand Northeast Region SLED accounts from prospecting and discovery through proposal, negotiation, and close Execute on a territory business plan that identifies target accounts, key opportunities, and a clear path to meeting or exceeding quota Drive new business development through outbound prospecting, networking, industry events, partner relationships, and referrals Engage with state agencies, municipalities, school districts, and higher education institutions to uncover cybersecurity needs and align Apollo solutions accordingly Build and maintain strong, trust-based relationships with key stakeholders, including CISOs, CIOs, IT Directors, and procurement officers Collaborate with the Sales Manager to align on territory strategy, pipeline reviews, forecasting, and go-to-market priorities Work cross-functionally with technical, service delivery, and marketing teams to develop tailored proposals and solutions for SLED clients Navigate public sector procurement processes, including RFPs, cooperative purchasing vehicles, and state contracts, to remove barriers and accelerate deal velocity Identify and develop contracting vehicles (e.g., DIR, TIPS, NCPA) that enable scalable, repeatable sales across the Northeastern SLED market Manage and grow an active pipeline in CRM, maintaining accurate opportunity data, activity logs, and forecasts Identify upsell and cross-sell opportunities within existing accounts to expand Apollo's footprint and deepen client relationships Provide market intelligence and client feedback to internal teams to inform product development and service offerings Represent Apollo at relevant industry conferences, government forums, and association events across Texas Qualifications Required Demonstrated success selling cybersecurity solutions: MSSP, MDR, SOC-as-a-Service, or security product/VAR experience strongly preferred Familiarity with public sector procurement processes, such as DIR contracts, cooperative purchasing vehicles, etc. Proven track record of consistently meeting or exceeding quota in a hunter/business development role Experience selling to and navigating complex organizations with multiple stakeholders and long sales cycles Strong command of consultative and solution-based selling methodologies (e.g., MEDDIC, Challenger, or similar) Excellent communication, presentation, and negotiation skills Self-starter mentality with the ability to manage a territory independently Preferred Existing relationships with State agencies, municipalities, or school districts/higher education institutions Experience working with or for an MSSP or cybersecurity VAR Familiarity with security frameworks relevant to the public sector (NIST, CMMC, TX-RAMP, etc.) Prior experience using Salesforce or similar CRM platforms Expectations: At 30 days: Complete onboarding, including product and services training, internal process orientation, and CRM setup Develop a working knowledge of Apollo's cybersecurity portfolio and value proposition for SLED clients Meet with key internal stakeholders (Sales Manager, technical teams, marketing, and service delivery) to understand resources and support available Begin building a target account list for the Northeastern SLED territory and identify top priority opportunities Within 90 days: Have an active, documented pipeline of qualified opportunities in CRM reflecting real revenue potential Independently conducting discovery calls, delivering presentations, and advancing opportunities through the sales cycle Establish or reactivate relationships with key contacts at target accounts across state agencies, municipalities, and education institutions Identify and initiate pursuit of at least one relevant contracting vehicle or cooperative purchasing opportunity Deliver a territory business plan to the Sales Manager outlining strategy, key accounts, and 6-month revenue targets By 180 days: Demonstrate clear pipeline momentum with opportunities in late stages of the sales cycle and initial closed/won business Be fully self-sufficient in territory management, forecasting, and business development activity Have established a consistent outreach and relationship-building cadence across target accounts Contribute actively to team knowledge by sharing market insights, competitive intelligence, and client feedback Be on track to meet or exceed first-year quota based on pipeline coverage and deal progression Company Values We have created a fantastic corporate culture – our values drive our behaviors. Here are the expectations: Passion for cybersecurity and a commitment to maintaining the highest standards of security. Customer Outcomes: Their success is our success, we are business partners Entrepreneurial Approach: fast decision making, empowerment, focus on results, test and learn Win Together: Intense Collaboration, no silos Integrity is paramount Why You'll Love Working Here Comprehensive medical, dental, and vision coverage, the company covers 100% of employee premiums and 90% of dependent premiums on base plans Unlimited PTO, 7 paid sick days, and 11 paid holidays 401(k) with 4% company match after 90 days, immediately vested Company‑paid life insurance at 1x annual salary Company‑paid Short‑Term Disability (STD) and Long‑Term Disability (LTD) coverage $125 monthly home‑office tech stipend for internet, equipment, and other technology needs Amazing colleagues, a collaborative environment, and a supportive, growth‑focused culture Apollo-IS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. Apollo-IS provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

Arlington, VAPlease note, candidates must be flexible. Shift times are general hours; some projects may require earlier or later reporting based on customer requirements. Job Description SITE 525 is seeking a highly skilled Cyber Virtualization Engineer to support the development and sustainment of advanced cyber training environments. This role involves hands-on engineering of secure, scalable, and AI-enabled virtual ranges that emulate realistic, adversarial network conditions across IT and OT domains. These environments are used for cyber mission rehearsals, red/blue/gray team operations, and full-spectrum cybersecurity exercises. Must be willing to travel up to 25%. Responsible for designing, deploying, and maintaining advanced virtualized training environments that replicate realistic, large-scale, and adversarial network conditions. This position focuses on engineering and integrating dynamic, hypervisor-driven platforms and virtualization technologies to support cyber mission rehearsals, red/blue/gray team operations, and full-spectrum training exercises. Key Duties • Engineer and implement scalable virtualized environments leveraging hypervisors (KVM, VMware, Hyper-V), virtual machines, containers, and software-defined networking across hybrid, edge, and cloud infrastructures., • Implement and manage virtualization stacks including private cloud platforms, hypervisor clusters, and orchestration frameworks for large-scale, multi-tenant environments., • Develop automation and orchestration tooling for provisioning, snapshotting, and lifecycle management of virtualized assets using Infrastructure-as-Code and CI/CD pipelines., • Integrate advanced traffic simulation capabilities (burst, steady-state, geo-distributed, AI/ML-driven) to emulate realistic user and system behaviors within virtual ranges., • Build and maintain frameworks and tooling for user and NPC emulation across virtualized environments to enhance operational realism, including threat emulation and defensive toolsets for network monitoring, incident detection, and response., • Implement observability pipelines for performance monitoring, traffic replay, autoscaling validation, and centralized logging in production-grade virtual infrastructures., • Administer and secure hypervisor platforms and virtual networking components, ensuring isolation, resiliency, and compliance for mission-critical environments., • Manage network and server infrastructure including Active Directory, identity management systems, and virtualized security controls., • Integrate third-party virtualization and orchestration tools to improve fidelity and scalability of training environments., • Support exercise operations including setup, execution, troubleshooting, and real-time scenario management for White Cell operations., • Collaborate with technical working groups and stakeholders to validate and enhance virtualization strategies for cyber training environments., • Apply knowledge of OT systems (SCADA, ICS, PLCs, IoT/IIoT) within virtualized contexts for realistic emulation.Relevant Technologies & Tools:, • Virtualization & Hypervisors: VMware ESXi/vSphere, KVM/QEMU, Microsoft Hyper-V, Proxmox, OpenStack, • Virtual Infrastructure Management: VM lifecycle management, snapshotting, cloning, orchestration frameworks, • Cloud & Containerization: Private cloud platforms, AWS, Azure, Kubernetes (K8s), Docker, Podman, hybrid and edge deployments, • Networking & SDN: Virtual switches (vSwitch, vDS), software-defined networking, network segmentation, VPNs, dynamic Network-as-Code tools, • Automation & IaC: Infrastructure-as-Code (Terraform, Ansible, Packer, Helm, Nomad), CI/CD integration for infrastructure, • Performance & Observability: Metrics collection, centralized logging, traffic replay, load simulation, autoscaling validation, • Security in Virtualized Environments: Identity management, Active Directory (GPOs, tiered admin scripts), secure isolation of virtual ranges, • Cyber Range Engineering: Virtualized cyber training environments, adversarial network simulation, AI/ML-driven traffic emulation, • Traffic Simulation & User Emulation: Lariat, CMU GHOSTS, MITRE Caldera, Red Canary, Atomic Red Team, TRex, BreakingPoint, Locust, k6, custom Python/TypeScript scripts, AI-enabled agents, • Compliance & Assurance: NIST 800-series, ISO 27001, FedRAMP, CUI-compliant controls, • Monitoring & Control Interfaces: Custom dashboards for exercise operations, centralized scenario orchestration Requirements • Bachelor’s or Master’s degree in Cybersecurity, Computer Engineering, or related field., • 5+ years of experience in cyber engineering, network operations, or cyber range development., • Top Secret security clearance., • Proficiency in virtualization, containerization, and cloud technologies., • Experience with offensive and defensive cybersecurity tools and frameworks., • Familiarity with AI/ML integration in cyber environments., • Strong scripting and automation skills (e.g., Python, Bash, PowerShell)., • Experience with infrastructure-as-code tools (e.g., Terraform, Ansible)., • Knowledge of OT systems and protocols., • Security certifications (e.g., CISSP, CEH, OSCP) are a plus. Compensation • Competitive Hourly Pay, • Benefits Questions? Please reach out to _ for additional questions or information. Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds, but may vary depending on the position. Regular and predictable attendance is essential. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status, and any other characteristic protected by federal, state, and local law. If you are unable to apply through the portal and need to speak to someone about necessary accommodations to apply, please email accommodation@idsinternational.com and we will follow up with you. Do not submit resumes and applications through this email.

At Qualia, we've built the leading B2B real estate technology that transforms the home buying and selling experience into a simple, secure, and enjoyable process. Our SMB and Enterprise products bring together users from across the real estate ecosystem---homebuyers and sellers, lenders, title and escrow agents, and real estate agents---onto a single shared digital closing platform, providing greater clarity and transparency to real estate transactions. Today, through our business customers across the country, millions of consumers use Qualia to close on homes every year. We are hiring an entrepreneurial Engineering Manager to lead Qualia's Application Security team. This is a builder's role. You won't just run a team - you'll redesign how a modern AppSec function operates when AI can do the first pass on nearly everything we used to do by hand. The team today owns secure design reviews, vulnerability triage, internal penetration testing, incident response support, and security tooling across a JavaScript/NodeJS and Kubernetes stack. Your mandate is to scale that surface area vertically - growing output and coverage per engineer - by making AI-assisted workflows the default. That means automated pen testing pipelines, AI-driven triage of findings from SAST/DAST/SCA, agentic review of engineering proposals and design docs, and continuous red-teaming exercises that test both our systems and our assumptions. You'll partner closely with Platform, Infra, and product engineering leaders to embed security earlier in the development lifecycle, and you'll be the team's voice when we set the security vision for the next two years - including anomaly detection across production traffic, model-driven threat hunting, and how we defend against (and responsibly use) AI-enabled attackers. Securing that platform - the money, the identities, and the documents flowing through it - is what the Application Security team does every day. We're hiring an Engineering Manager to lead this team into its next chapter: one where AI is a force multiplier for every part of our security program. • Lead and grow the Application Security team - coaching senior AppSec engineers, setting goals, and owning delivery against the security roadmap, • Build the automated pen-testing program. Stand up pipelines that run continuous, AI-assisted offensive testing against our services, APIs, and web properties - and turn the output into a triaged, actionable queue, • Scale triage with AI. Design the workflows and tooling that let the team handle 10x the volume of findings (bug bounty, scanner output, customer reports) without 10x the headcount, • Review engineering proposals. Sit at the front of the design process with engineering leaders across Core, Clear, Shield, Connect, and Atlas - reviewing RFCs and proposals, flagging risk early, and helping teams ship securely by default, • Run red-teaming exercises. Drive recurring red team engagements - both internal exercises and coordinated vendor work - and close the loop into detection, response, and product hardening, • Own the AppSec vision. Partner with the leadership team to set multi-quarter strategy across anomaly detection, threat modeling, and AI-augmented defense, • Fight fires when they happen. Lead incident response from the application security side, and be the person engineering trusts to make the call in the room, • Mentor and hire. Recruit strong AppSec engineers, mentor the ones you have, and build a team culture where people are pushed and supported in equal measure, • 5+ years as a security or full-stack engineer working on production systems, with 2+ years managing a security or platform engineering team, • Hands-on depth in application security: threat modeling, code review, and at least one offensive-security discipline (pen testing, red team), • Track record of shipping automation that changed how a team worked - ideally including meaningful use of LLMs, agents, or ML in a security or engineering workflow, • Comfort operating across the full security lifecycle: prevention, detection, response, and recovery, • Strong written communication. You can write the design doc, the post-mortem, and the board-ready summary - and you can tell a product engineer why their proposal needs to change without shutting down the conversation, • Keen product sense and a bias toward measurable impact. You care whether the risk actually went down, not whether a ticket got closed, • Experience in fintech, real estate tech, or another regulated, high-liability domain preferred NICE TO HAVE • Background designing or operating anomaly-detection systems on production traffic, auth logs, or financial transactions, • Published research, CVEs, or conference talks in AppSec, offensive security, or AI security., • Familiarity with the evolving landscape of AI-enabled offense (prompt injection, model abuse, agent exploitation) and defense THE TECH STACK YOU'LL USE • JavaScript / NodeJS / Typescript / Meteor, • Microservice architecture / Kubernetes Operators, • AWS, • MongoDB, • Modern AppSec tooling: SAST/DAST/SCA and an expanding AI-assisted security automation layer that you'll help build While this role is remote work eligible, we have three office locations: San Francisco, California; Concord, New Hampshire; and Austin, Texas. This role has a base annual salary of $210,000-$240,000 plus a competitive equity and benefits package. (Salary to be determined by relevant experience, location, knowledge, and skills of the applicant, internal equity, and alignment with market data.) Qualia is made up of incredibly bright, mission-driven coworkers who are passionate about using technology to solve real-world problems---and we're growing quickly. In order to continue building an engaging and dynamic organization, we're committed to giving everyone the support they need to do great work. Our benefits package is designed to allow our team members to be their best selves, both in and out of the workplace. In addition to comprehensive health plans, a 401k program, and commuter benefits, we prioritize family and personal well-being through professional development, parental leave, and a flexible time off policy. Qualia offers a robust online onboarding program to train new hires, biweekly all hands meetings, and a variety of internal virtual events to keep employees connected. We believe diverse perspectives and backgrounds are critical to building great technology, and our goal is to cultivate an environment where people feel equally valued and respected. Qualia is proud to be an equal-opportunity workplace, and we welcome applicants from all backgrounds regardless of race, color, ancestry, religion, gender identity or expression, sexual orientation, marital status, age, citizenship, socioeconomic status, disability, or veteran status. By submitting your application, you acknowledge and agree to the collection, processing, and use of your personal information as described in our _. #LI-Remote

At Hack The Box, we don’t just build cybersecurity training — we empower organizations to defend critical systems and national infrastructure. As a Federal BDR, you will play a frontline role in helping U.S. government agencies elevate their cyber workforce capabilities. This is your opportunity to directly impact national cyber resilience. 🇺🇸🔐🚀 The Federal BDR is responsible for building and qualifying pipeline across U.S. Federal Civilian, DoD, and related agencies. You will: • Identify and research target agencies aligned to HTB’s Federal ICP (DoD, DHS, DOJ, Treasury, Intelligence Community, etc.), • Map agency buying centers (CIO, CISO, Cyber Workforce Leads, Training Command, SOC Leadership), • Navigate contract vehicles (GSA, SEWP, IDIQs, primes/subs), • Engage in compliant outbound activity aligned to Federal acquisition cycles, • Qualify inbound and outbound opportunities using MEDDPICC, • Multi-thread across technical, operational, and procurement stakeholders, • Partner closely with Federal AEs and leadership to strategically build accounts, • Federal selling is strategic. It’s deliberate. It requires patience, research, and persistence. This role is classified as non-exempt and is eligible for overtime. The expected schedule for this role is Monday - Friday, 40 hours a week. Additional hours must be approved in advance. HTB follows all federal and state overtime regulations. • US – East Coast / Central US preferred, • Fully Remote, • Full-time, non-exempt You’ll report to the US BDR Leadership and work in tight alignment with the Federal AE team to execute strategic territory plans. This is not transactional outbound — this is strategic public sector engagement. You'll be part of a diverse revenue team, consisting of BDRs, AEs, Solution Engineers, Customer Success, and Marketing professionals. As a Business Development Representative at HTB, you'll report to our BDR Head (US-based), who will guide your growth in the role, while working closely with AEs in your region. Your Federal arsenal includes: • HubSpot, • Apollo, • LinkedIn Sales Navigator, • GovWin / public contract databases (where applicable), • Gong, • MEDDPICC frameworks, • Target account mapping tools, • You’ll combine modern outbound methodology with structured Federal account research., • Experience in B2B sales (Federal/Public Sector exposure preferred), • Understanding of U.S. Federal procurement processes (highly desirable), • Experience selling into or researching: DoD, Civilian agencies, Intelligence community, Federal system integrators, • Familiarity with structured sales methodologies (MEDDIC, SPICED, Challenger, Solution Selling), • Strong written communication skills tailored to government audiences, • Excellent account research and organizational discipline, • Comfort navigating long sales cycles, • Resilience, consistency, and intellectual curiosity Bonus points for: • Experience working alongside primes or resellers, • Understanding of Federal cybersecurity frameworks (NIST, FedRAMP, etc.), • 🎯You'll have the exhilarating opportunity to contribute to a product that is highly appreciated by users and the cybersecurity community at large., • 🎯 You'll experience a highly supportive and caring environment, fostering growth, flexibility, and autonomy., • 🎯 You'll embark on an exciting journey of continuous learning and problem-solving, leveling up as our organization grows., • 🎯 Most importantly, you'll have a blast at HTB 🥳 because fun is an essential ingredient in our recipe for success! Just wait until you see our global meet-ups!, • USD 85,000-100,000 OTE (70/30 split), • Medical, Dental & Vision (employee coverage 100% paid for by Hack The Box), • 401K w/ employer match, • Employer-paid Life and AD&D Insurance, • Supplemental Life Insurance, • Short-term and Long-term Disability, • Healthcare and Dependent Care FSA, • Paid paternity & maternity leave, • 25 annual leave days, • Home Office Allowance, • Dedicated budget for training and professional development, participation in conferences, • State-of-the-art equipment, • Full access to the Hack The Box lab offerings; so you can learn how to hack 😉, • Level 1: To complete level one’s objective, submit your application., • Level 2: Complete an asynchronous video interview, • Level 3: Meet the hiring team. Level’s objective: connect with the hiring team and share with them your achievements., • Level 4: Meet the hiring team, once again, to explore your sales skills and fit with the US Sales team, • Level 5: Connect with the Talent Acquisition team to close the loop, • Level 6: You've officially received an offer from HTB! To complete the last level and the Quest, all you need to do is accept the offer., • Quest complete. Congratulations, you’re officially one of us 🥳🎉🎇Your next quest: complete the onboarding. Hack The Box (HTB) is the cybersecurity upskilling and talent development platform trusted by individuals, enterprises, and government agencies to sharpen offensive and defensive capabilities. Powered by a vibrant global community and hands‑on, real‑world training, HTB helps security teams practice like attackers, validate skills continuously, and move faster against emerging threats. We’re scaling rapidly across the enterprise market—especially in Financial Services, MSSPs, and Technology—and we’re just getting started. If you’re excited to turn technical depth into crisp stories, to shape a category, and to fuel measurable growth in a fast, collaborative environment—come build with us. 🚨 Exciting News: • We are super proud to share that Hack The Box’s entities in the US, the UK & Greece have been certified as a Great Place to Work (2024-2026)., • Furthermore, Hack The Box’s Greek entity has been listed by the Great Place to Work Institute in the Top 5 of Best Workplaces for three consecutive years (4th, 2nd, 3rd), • On the European level, the Greek entity has been listed as Best Workplace in Europe for three consecutive years, • Take a sneak peek at and our . Get more insights about our HTB culture and employee experience by visiting the “” section of our site, our , and _. At Hack The Box, we are committed to fostering a diverse, inclusive, and equitable workplace. We believe that diversity enriches our performance, services, and the communities we serve. As such, we ensure that all job applications are considered solely based on merit, skills, and qualifications. We do not discriminate on grounds of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We are dedicated to providing a fair and respectful work environment that reflects our values. Hack The Box participates in E-Verify. For more information, please click and

Job DescriptionEnlist as a Soldier into the United States Army and become a Cyber Operations Specialist (17C), you’ll use your cyber security skills to defend the Army’s crucial and complex weapons systems, which include satellites, navigation, and aviation systems against both foreign and domestic cyber threats. You’ll maintain dominance in both offensive and defensive cyberspace operations and respond to adversary attacks, while enabling commanders to gain an advantage in cyberspace by targeting adversary activities and capabilities. This is not a civilian contractor position. No experience necessary. Position is entry level. REQUIREMENTS: • A U.S. citizen or permanent resident with a valid Green Card;, • 17 to 34 Years Old;, • High School Diploma or GED;, • Meet Tattoo Guidelines;, • No Major Law Violations;, • No Medical Concerns. TESTING & CERTIFICATIONS: • 105 Nationally Recognized Certifications Available;, • 10 weeks of Basic Training;, • 45 weeks of Advanced Individual Training;, • 110 ASVAB Score: General Technical (GT);, • 112 ASVAB Score: Skilled Technical (ST). SKILLS YOU'LL LEARN: • Computer Systems & Networks;, • Technical Procedures;, • Cyber Operations. BENEFITS: Financial Benefits: • Salary and Bonuses: Competitive base pay with potential for bonuses, including enlistment bonuses and re-enlistment bonuses., • Retirement Plan: Thrift Savings Plan (TSP) similar to a 401(k), and a pension plan for those who serve 20 years or more., • Special Pays: Extra pay for hazardous duty, special skills, and deployment. Healthcare:, • Medical Coverage: Comprehensive medical care for soldiers and their families through TRICARE., • Dental and Vision: Access to dental and vision care services. Education:, • Tuition Assistance: Financial support for college courses while on active duty., • GI Bill: Benefits for education and training programs, including the Post- 9/11 GI Bill., • Student Loan Repayment: Assistance in repaying student loans. Housing and Living: • Housing Allowance: Basic Allowance for Housing (BAH) to cover the cost of housing., • On-Base Housing: Access to housing on military installations., • Commissary and Exchange: Discounts on groceries and goods at military stores. Career and Training:, • Professional Development: Opportunities for leadership training and career advancement., • Skill Training: Technical and tactical training in various fields. Family Support:, • Family Programs: Support services for families, including counseling and childcare., • Relocation Assistance: Help with moving costs and finding housing. Retirement and Veterans Benefits:, • Pension: Lifetime monthly pension after 20 years of service., • VA Benefits: Access to Department of Veterans Affairs benefits, including healthcare and home loans. Recreation and Leisure:, • Morale, Welfare, and Recreation (MWR): Access to recreational facilities, sports programs, and leisure activities.

Product Testers are wanted to work from home nationwide in the US to fulfill upcoming contracts with national and international companies.We guarantee 15-25 hours per week with an hourly pay of between $25 / hr.There is no payment required in order to apply or to work as an In-Home Usage Tester.You

We’re looking for Customer Support Product Testers across the US to work from home and help top brands improve their products before they hit the market.

Product Testers are wanted to work from home nationwide in the US to fulfill upcoming contracts with national and international companies.We guarantee 15-25 hours per week with an hourly pay of between $25 / hr.There is no payment required in order to apply or to work as an In-Home Usage Tester.You

Product Testers are wanted to work from home nationwide in the US to fulfill upcoming contracts with national and international companies.We guarantee 15-25 hours per week with an hourly pay of between $25 / hr.There is no payment required in order to apply or to work as an In-Home Usage Tester.You

Seeking motivated individuals for condominium security/concierge, security guard, security patrol, supervisor positions.

Product Testers are wanted to work from home nationwide in the US to fulfill upcoming contracts with national and international companies.We guarantee 15-25 hours per week with an hourly pay of between $25 / hr.There is no payment required in order to apply or to work as an In-Home Usage Tester.You

Metro One Security - 1000 Main Street - Responsibilities: Deliver exceptional customer service to clients and visitors; Monitor CCTV surveillance systems and complete accurate daily activity reports; Observe, survey, and report on activities at the assigned post; Respond quickly and appropriately to

Richmond Avenue - [Security Guard / Safety Officer] Competitive Pay / PT & FT Positions / Flexible Shifts (Morning, Evening, Night) / Expert Training by Military & Law Enforcement Professionals - As an Unarmed Security Officer at Main Security and Investigations in the Protective Services sector, y

Signal - - Responsibilities: Patrol assigned areas (foot and vehicle) and write detailed reports; Maintain professionalism and de-escalate incidents; Ensure access points are secured and property is protected; Operate company patrol vehicle and perform vehicle-related duties; Communicate with Branc

Securitas - - Responsibilities: Monitor premises and patrol to maintain safety; Enforce site regulations and directives; Provide customer service to employees and visitors; Maintain order on client site; Respond to incidents and security concerns.

Richmond Avenue - [Security Guard / Safety Officer] Competitive Pay / PT & FT Positions / Flexible Shifts (Morning, Evening, Night) / Expert Training by Military & Law Enforcement Professionals - As an Armed Security Officer at Main Security and Investigations in the Protective Services sector, you

Security Guards of America - - Responsibilities: Patrol premises and monitor surveillance equipment; Inspect buildings, equipment, and access points; Permit entry and sound alarms to obtain help; Report irregularities and inform violators of policies; Complete incident reports and maintain daily lo

Sunstates Security - - Responsibilities: Maintain security and safety at assigned site; Read and follow Post Orders and SOPs; Respond quickly to directives; Conduct surveillance and maintain integrity; Complete required reporting and documentation.

Moritz Security Services - - Responsibilities: Maintain a visible security presence to deter theft, vandalism, and other criminal activity; Conduct patrols and monitor assigned areas; Respond to incidents, emergencies, and customer concerns in a professional manner; Complete accurate reports and do

Memorial Hermann - - Responsibilities: Monitor assigned areas to maximize visibility of security presence; Post in assigned area or conduct patrols in vehicle or on foot; Control vehicular access to buildings and parking areas; manage building visitor and materials pass programs; Respond to securit

CSI International - - Responsibilities: Perform security patrols and monitor premises; Interact with hotel staff; Prepare incident reports; Review CCTV footage; Respond to emergencies.

Moritz Security Services - 4545 Griggs Road - Responsibilities: Completes site checks and incident reports utilizing current technology; Investigates and completes reports related to incidents and/or accidents; Manages security officers to ensure excellent service delivery; Participates in recruitin

Houston Methodist - 6565 Fannin Street - Responsibilities: Maintains high customer satisfaction while providing the highest level of safety and security to patients, visitors, staff and assets; Secures premises and personnel by patrolling facilities; monitoring surveillance cameras; monitoring acces

Golden Nugget - - Responsibilities: Patrol hotel grounds to identify, report, and deescalate hazardous discrepancies; Produce detailed incident reports based upon facts gathered in self-conducted investigations; Monitor the fire life safety system with the ability to promptly respond to alarms and

Lucky Strike - - Responsibilities: Greet guests in a friendly and inviting manner; Check guest identification for age restrictions; Ensure guests adhere to safety policies and procedures; Assist with monitoring alcohol service security functions, including guest serving limits; Diffuse difficult gu

GardaWorld - - Responsibilities: Greet visitors and provide customer service; Manage access control and verify identities; Perform regular security patrols of premises; Inspect security equipment and report maintenance needs; Write incident reports and coordinate with emergency teams.

Tarian - - Responsibilities: Provide direct security and related public services to hospital staff, patients, and visitors; Maintain security and safety of hospital premises and deter illegal activities; Supervise at-risk patients in the hospital environment; Perform additional job-related duties a

GardaWorld - - Responsibilities: Monitor the premises to ensure security; Conduct patrols to spot any suspicious activity; Control access points and verify identities; Respond quickly to incidents or potential threats; Write detailed reports on events and incidents.

Tarian - - Responsibilities: Maintain security and safety of the hospital, staff, patients, and visitors; patrol and monitor premises; control access; assist customers; deter illegal activities on hospital property.

GardaWorld - - Responsibilities: Monitor the premises to ensure security; Conduct patrols to spot any suspicious activity; Control access points and verify identities; Respond quickly to incidents or potential threats; Write detailed reports on events and incidents.