Who we are

At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences.

Our dedication to remote-first work, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.

We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!

.

See yourself at Twilio

Join the team as Twilio’s next Senior Security Engineer, Incident Response

About the job

The Security Incident Response Team (SIRT) is looking for a Senior Security Engineer who is passionate about solving Twilio’s mission of security and reliability by working across the organization to lead the technical response to security events and incidents across Twilio’s global infrastructure, services and applications by effectively conducting triage, containment, remediation and driving post-incident betterments.  You will work within a team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions.

You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program.

Responsibilities

In this role, you’ll:

• Be an Owner: Lead and support the response to all security events and incidents across Twilio’s complex global infrastructure, services and applications.
• Write It Down: Be responsible for documentation of incidents and projects you work on and craft best practices as runbooks and standard operating procedures to share knowledge across teams.
• Wear the customer’s shoes: Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity.
• Ruthlessly Prioritize: Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents.
• Don’t Settle: Rapidly acquire new technical skills and knowledge in a fast-paced, highly disruptive industry environment.
• Draw the Owl: Own the security incident lifecycle, respond to incidents and participate in on-call rotation and participate in RCAs for security incidents.
• Empower Others: Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work.
• Be Inclusive: Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale.

Qualifications

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn’t followed a traditional path, don’t let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

*Required:

• Proven experience: 5+ years of security incident response in a production-cloud environment
• Subject-matter expert on security issues and technologies
• Ability to utilize AI for comprehensive, complex security incident response activities delivering high fidelity detections
• Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment
• Experience working across a technology stack on difficult security challenges and initiatives
• Experience with SIEM platforms and the ability to extend their functionality
• Experience with SOAR tools and automating manual security processes
• Experience in either AWS, GCP, or other large cloud platform
• Excellent written and verbal communication skills
• Ability to influence and build effective working relationships with every level of the organization.

Desired:

• AI Model Security & Posture Management: Support Implementation of  controls and safeguards to prevent AI vulnerabilities, such as prompt injections, model evasion, and data poisoning
• AI-Driven Threat Response: Utilize GenAI and LLM-based security use cases to rapidly interpret alerts, reduce false positives, and contextualize threat data
• Artifact & Evidence Triage: Collects intrusion artifacts and forensically sound images to analyze malware, trojans, and source code.
• Threat Intelligence Integration: Monitors external vendor data and threat intelligence to analyze trends and proactively defend against emerging risks

Location

1. This role will be remote,but is not eligible to be hired in CA, CT, NJ, NY, PA, WA.

Travel

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

Compensation

*Please note this role is open to candidates outside of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State. The information below is provided for candidates hired in those locations only.

The estimated pay ranges for this role are as follows:

• Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $141,520.00 - $176,900.00.
• Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $149,840.00 - $187,300.00
• Based in the San Francisco Bay area, California: $166,400.00 - $208,000.00.
• This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.

Application deadline information

Applications for this role are intended to be accepted until 30th Aug, but may change based on business needs.

Twilio thinks big. Do you?

We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That’s why we seek out colleagues who embody our values — something we call Twilio Magic. Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts.

So, if you’re ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn’t what you’re looking for, please consider other open positions.

Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Working for a company like Smile Digital Health means supporting our mandate for #BetterGlobalHealth. We strive towards this goal every day, and the results can be seen in the impact of our innovative health data platform and data management solutions, which are used in over 20 countries. We were #19 on Deloitte’s Technology Fast 50 Ranking for 2024!

Smile Digital Health makes it easy for healthcare stakeholders to collect and exchange data with our leading FHIR-based data liberation platform.

At its heart, the Smile platform enables people and organizations to better manage healthcare data. We help generate and liberate structured healthcare data to ensure effective delivery across care teams and health systems bringing  #BetterGlobalHealth to patients everyday!

Apply today and find plenty of reasons to SMILE!

The Cloud Security Engineer is responsible for designing, automating and deploying production grade services on behalf of the customers to a variety of clouds such as AWS, Azure, OCI and GCP. This position works closely with the Cloud Architect and Development teams to ensure infrastructure fulfills the project’s deliverables while keeping a high standard of quality and operational maturity.

Responsibilities:

• Collaborate with Development and Architecture teams to build  complex and highly available cloud environments for Internal and External infrastructure builds.
• Provide Level 3 Technical support to Internal teams, Customers and Partners to support our core product.
• Lead and educate clients on cloud deployment patterns.
• Act as a SME for implementing and building infrastructure to support our core product.
• Investigate and resolve any customer integration issues that arise during implementation.
• Design procedure for system troubleshooting and maintenance.
• Perform root cause analysis for any implementation errors and provide feedback to the Core dev team.
• Document best practices and lessons learned.
• Design, implement and maintain a secure and scalable infrastructure platform.
• Provide ongoing maintenance and support of internal tools, improve system health and reliability.
• Accountable for ensuring that all working hours are accurately reported in Netsuite on a daily or weekly basis, that the majority of (if not all) hours are tracked as billable and that the project management tool in Netsuite is properly and fully utilized
• Tracking and reporting of billable hours is a critical aspect of project management and delivery to our customers and this is a major area of accountability.
• Participate in on-call rotation to provide application and infrastructure support, incident management and troubleshooting.

Requirements :

• At least 6+ years of experience in Information technology, with infrastructure and platform services automation expertise.
• 3+ years of experience with engineering and supporting containerization technology.
• 3+ years of experience on AWS, Azure, OCI or GCP.
• Professional Cloud Certifications are preferred.
• Experience building end-to-end cloud solutions using low level architecture documents.
• Demonstrated experience in translating customer requirements to net new infrastructure to address business needs.
• Drive to innovate and use various technologies to solve complex business needs.
• Expertise in troubleshooting support escalation, on-Call process optimization and documenting knowledge.
• Solid networking fundamentals and proven experience with Security and Compliance (SOC2, HIPAA, ISO27001) best practices and how to implement controls that support high-velocity software delivery teams.
• Proven experience with Kubernetes/Openshift and Docker.
• Experience with Infrastructure as code tools such as Ansible, Terraform or CloudFormation.
• Deep knowledge of cloud service providers and best practices around implementation and configuration, preferably managing customer environments.

$130,000 - $145,000 a year

Some of the benefits we offer:

\* Remote Work Environment

\* Flexible Time Away From Work Policy including PTO, Personal and Sick Days

\* Competitive Salary and Health/Medical Benefits

\* RRSP/TFSA/401K Employee Contribution

\* Life and Disability

\* Employee Assistance Program

\* FHIR Study Program and Skillsoft Learning

\* Super HAPI Fun Club

Smile’s core values include respect, inclusion, embracing our differences, and celebrating shared values because our people are the foundation of our success. We are big on creating a sense of belonging and empowering each other to bring our authentic selves to work.  We are dedicated to fostering a workplace that values diversity, equity, and inclusion.

We welcome and encourage candidates of all backgrounds to apply. Candidates are encouraged to inform us if they wish to discuss or require accommodations during interviews or while working at Smile.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Who we are

At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences.

Our dedication to remote-first work, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.

We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!

.

See yourself at Twilio

Join the team as Twilio’s next Senior Security Engineer, Incident Response

About the job

The Security Incident Response Team (SIRT) is looking for a Senior Security Engineer who is passionate about solving Twilio’s mission of security and reliability by working across the organization to lead the technical response to security events and incidents across Twilio’s global infrastructure, services and applications by effectively conducting triage, containment, remediation and driving post-incident betterments.  You will work within a team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions.

You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program.

Responsibilities

In this role, you’ll:

• Be an Owner: Lead and support the response to all security events and incidents across Twilio’s complex global infrastructure, services and applications.
• Write It Down: Be responsible for documentation of incidents and projects you work on and craft best practices as runbooks and standard operating procedures to share knowledge across teams.
• Wear the customer’s shoes: Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity.
• Ruthlessly Prioritize: Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents.
• Don’t Settle: Rapidly acquire new technical skills and knowledge in a fast-paced, highly disruptive industry environment.
• Draw the Owl: Own the security incident lifecycle, respond to incidents and participate in on-call rotation and participate in RCAs for security incidents.
• Empower Others: Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work.
• Be Inclusive: Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale.

Qualifications

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn’t followed a traditional path, don’t let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

*Required:

• Proven experience: 5+ years of security incident response in a production-cloud environment
• Subject-matter expert on security issues and technologies
• Ability to utilize AI for comprehensive, complex security incident response activities delivering high fidelity detections
• Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment
• Experience working across a technology stack on difficult security challenges and initiatives
• Experience with SIEM platforms and the ability to extend their functionality
• Experience with SOAR tools and automating manual security processes
• Experience in either AWS, GCP, or other large cloud platform
• Excellent written and verbal communication skills
• Ability to influence and build effective working relationships with every level of the organization.

Desired:

• AI Model Security & Posture Management: Support Implementation of  controls and safeguards to prevent AI vulnerabilities, such as prompt injections, model evasion, and data poisoning
• AI-Driven Threat Response: Utilize GenAI and LLM-based security use cases to rapidly interpret alerts, reduce false positives, and contextualize threat data
• Artifact & Evidence Triage: Collects intrusion artifacts and forensically sound images to analyze malware, trojans, and source code.
• Threat Intelligence Integration: Monitors external vendor data and threat intelligence to analyze trends and proactively defend against emerging risks

Location

1. This role will be remote,but is not eligible to be hired in CA, CT, NJ, NY, PA, WA.

Travel

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

Compensation

*Please note this role is open to candidates outside of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State. The information below is provided for candidates hired in those locations only.

The estimated pay ranges for this role are as follows:

• Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $141,520.00 - $176,900.00.
• Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $149,840.00 - $187,300.00
• Based in the San Francisco Bay area, California: $166,400.00 - $208,000.00.
• This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.

Application deadline information

Applications for this role are intended to be accepted until 30th Aug, but may change based on business needs.

Twilio thinks big. Do you?

We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That’s why we seek out colleagues who embody our values — something we call Twilio Magic. Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts.

So, if you’re ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn’t what you’re looking for, please consider other open positions.

Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Who we are

At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences.

Our dedication to remote-first work, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.

We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!

.

See yourself at Twilio

Join the team as Twilio’s next Senior Security Engineer, Incident Response

About the job

The Security Incident Response Team (SIRT) is looking for a Senior Security Engineer who is passionate about solving Twilio’s mission of security and reliability by working across the organization to lead the technical response to security events and incidents across Twilio’s global infrastructure, services and applications by effectively conducting triage, containment, remediation and driving post-incident betterments.  You will work within a team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions.

You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program.

Responsibilities

In this role, you’ll:

• Be an Owner: Lead and support the response to all security events and incidents across Twilio’s complex global infrastructure, services and applications.
• Write It Down: Be responsible for documentation of incidents and projects you work on and craft best practices as runbooks and standard operating procedures to share knowledge across teams.
• Wear the customer’s shoes: Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity.
• Ruthlessly Prioritize: Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents.
• Don’t Settle: Rapidly acquire new technical skills and knowledge in a fast-paced, highly disruptive industry environment.
• Draw the Owl: Own the security incident lifecycle, respond to incidents and participate in on-call rotation and participate in RCAs for security incidents.
• Empower Others: Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work.
• Be Inclusive: Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale.

Qualifications

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn’t followed a traditional path, don’t let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

*Required:

• Proven experience: 5+ years of security incident response in a production-cloud environment
• Subject-matter expert on security issues and technologies
• Ability to utilize AI for comprehensive, complex security incident response activities delivering high fidelity detections
• Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment
• Experience working across a technology stack on difficult security challenges and initiatives
• Experience with SIEM platforms and the ability to extend their functionality
• Experience with SOAR tools and automating manual security processes
• Experience in either AWS, GCP, or other large cloud platform
• Excellent written and verbal communication skills
• Ability to influence and build effective working relationships with every level of the organization.

Desired:

• AI Model Security & Posture Management: Support Implementation of  controls and safeguards to prevent AI vulnerabilities, such as prompt injections, model evasion, and data poisoning
• AI-Driven Threat Response: Utilize GenAI and LLM-based security use cases to rapidly interpret alerts, reduce false positives, and contextualize threat data
• Artifact & Evidence Triage: Collects intrusion artifacts and forensically sound images to analyze malware, trojans, and source code.
• Threat Intelligence Integration: Monitors external vendor data and threat intelligence to analyze trends and proactively defend against emerging risks

Location

1. This role will be remote,but is not eligible to be hired in CA, CT, NJ, NY, PA, WA.

Travel

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

Compensation

*Please note this role is open to candidates outside of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State. The information below is provided for candidates hired in those locations only.

The estimated pay ranges for this role are as follows:

• Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $141,520.00 - $176,900.00.
• Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $149,840.00 - $187,300.00
• Based in the San Francisco Bay area, California: $166,400.00 - $208,000.00.
• This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.

Application deadline information

Applications for this role are intended to be accepted until 30th Aug, but may change based on business needs.

Twilio thinks big. Do you?

We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That’s why we seek out colleagues who embody our values — something we call Twilio Magic. Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts.

So, if you’re ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn’t what you’re looking for, please consider other open positions.

Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Working for a company like Smile Digital Health means supporting our mandate for #BetterGlobalHealth. We strive towards this goal every day, and the results can be seen in the impact of our innovative health data platform and data management solutions, which are used in over 20 countries. We were #19 on Deloitte’s Technology Fast 50 Ranking for 2024!

Smile Digital Health makes it easy for healthcare stakeholders to collect and exchange data with our leading FHIR-based data liberation platform.

At its heart, the Smile platform enables people and organizations to better manage healthcare data. We help generate and liberate structured healthcare data to ensure effective delivery across care teams and health systems bringing  #BetterGlobalHealth to patients everyday!

Apply today and find plenty of reasons to SMILE!

The Cloud Security Engineer is responsible for designing, automating and deploying production grade services on behalf of the customers to a variety of clouds such as AWS, Azure, OCI and GCP. This position works closely with the Cloud Architect and Development teams to ensure infrastructure fulfills the project’s deliverables while keeping a high standard of quality and operational maturity.

Responsibilities:

• Collaborate with Development and Architecture teams to build  complex and highly available cloud environments for Internal and External infrastructure builds.
• Provide Level 3 Technical support to Internal teams, Customers and Partners to support our core product.
• Lead and educate clients on cloud deployment patterns.
• Act as a SME for implementing and building infrastructure to support our core product.
• Investigate and resolve any customer integration issues that arise during implementation.
• Design procedure for system troubleshooting and maintenance.
• Perform root cause analysis for any implementation errors and provide feedback to the Core dev team.
• Document best practices and lessons learned.
• Design, implement and maintain a secure and scalable infrastructure platform.
• Provide ongoing maintenance and support of internal tools, improve system health and reliability.
• Accountable for ensuring that all working hours are accurately reported in Netsuite on a daily or weekly basis, that the majority of (if not all) hours are tracked as billable and that the project management tool in Netsuite is properly and fully utilized
• Tracking and reporting of billable hours is a critical aspect of project management and delivery to our customers and this is a major area of accountability.
• Participate in on-call rotation to provide application and infrastructure support, incident management and troubleshooting.

Requirements :

• At least 6+ years of experience in Information technology, with infrastructure and platform services automation expertise.
• 3+ years of experience with engineering and supporting containerization technology.
• 3+ years of experience on AWS, Azure, OCI or GCP.
• Professional Cloud Certifications are preferred.
• Experience building end-to-end cloud solutions using low level architecture documents.
• Demonstrated experience in translating customer requirements to net new infrastructure to address business needs.
• Drive to innovate and use various technologies to solve complex business needs.
• Expertise in troubleshooting support escalation, on-Call process optimization and documenting knowledge.
• Solid networking fundamentals and proven experience with Security and Compliance (SOC2, HIPAA, ISO27001) best practices and how to implement controls that support high-velocity software delivery teams.
• Proven experience with Kubernetes/Openshift and Docker.
• Experience with Infrastructure as code tools such as Ansible, Terraform or CloudFormation.
• Deep knowledge of cloud service providers and best practices around implementation and configuration, preferably managing customer environments.

$130,000 - $145,000 a year

Some of the benefits we offer:

\* Remote Work Environment

\* Flexible Time Away From Work Policy including PTO, Personal and Sick Days

\* Competitive Salary and Health/Medical Benefits

\* RRSP/TFSA/401K Employee Contribution

\* Life and Disability

\* Employee Assistance Program

\* FHIR Study Program and Skillsoft Learning

\* Super HAPI Fun Club

Smile’s core values include respect, inclusion, embracing our differences, and celebrating shared values because our people are the foundation of our success. We are big on creating a sense of belonging and empowering each other to bring our authentic selves to work.  We are dedicated to fostering a workplace that values diversity, equity, and inclusion.

We welcome and encourage candidates of all backgrounds to apply. Candidates are encouraged to inform us if they wish to discuss or require accommodations during interviews or while working at Smile.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day.

FedRAMP and GovRAMP (formerly StateRAMP) are transforming how Smartsheet serves government and regulated customers. We need a FedRAMP and GovRAMP subject matter expert to lead these programs—someone with real hands-on experience obtaining and maintaining ATO authorizations, navigating 3PAO assessments, and managing continuous monitoring requirements. In this role, you’ll own Smartsheet’s FedRAMP and GovRAMP certifications, manage relationships with our 3PAOs, drive annual assessment preparation, manage POA&M processes, and ensure we maintain authorizations at the highest level. You’ll understand the nuances of federal compliance, speak fluently with government agencies and authorized assessors, and translate complex regulatory requirements into clear roadmaps for engineering and operations teams. You’ll be the voice of federal compliance at Smartsheet and the trusted advisor to government customers on our security posture.

You Will:

• Own FedRAMP and GovRAMP (formerly StateRAMP) certifications and roadmaps: Lead the overall strategy for obtaining and maintaining federal authorizations, including package management, compliance timelines, and authority coordination.
• Manage 3PAO relationships and assessments: Work with accredited third-party assessment organizations to conduct initial assessments and annual re-assessments. Coordinate scoping, evidence preparation, testing coordination, and results validation.
• Lead continuous monitoring (ConMon) execution: Oversee the delivery of monthly, annual, and event-driven FedRAMP deliverables including vulnerability scans, penetration testing, system security plan updates, and compliance reporting.
• Manage Plans of Action and Milestones (POA&M) processes: Own the identification, prioritization, tracking, and remediation of findings. Ensure timely closure of Critical (30 days), High (30 days), and Moderate (90 days) findings while coordinating with engineering and security teams.
• Coordinate significant change requests and system modifications: Work with product and engineering to document, scope, assess, and obtain agency approval for system changes that impact security controls or compliance posture.
• Engage with authorizing officials and federal agencies: Build and maintain relationships with government sponsors, CIOs, and agency decision-makers. Provide regular status updates, respond to questions, and demonstrate authorization compliance.
• Prepare comprehensive assessment packages: Lead the development of System Security Plans (SSP), Security Assessment Plans (SAP), risk exposure tables, and supporting documentation required for audits.
• Drive compliance automation and efficiency: Identify opportunities to automate evidence collection, simplify reporting, and reduce manual effort while maintaining rigor and auditability.

You Have:

• 5+ years of hands-on experience with FedRAMP and/or GovRAMP (StateRAMP) programs, including direct involvement in obtaining and maintaining ATOs.
• Proven experience working with accredited 3PAOs: You’ve coordinated initial assessments, managed annual re-assessments, provided evidence packages, and worked through test results and findings.
• A degree in Computer Science, Computer Engineering, Cybersecurity or a related field or equivalent practical experience.
• Deep understanding of FedRAMP continuous monitoring requirements: Comprehensive knowledge of monthly deliverables, annual assessment cycles, POA&M management, vulnerability scan and penetration test requirements, and compliance reporting cadences.
• Strong NIST 800-53 control knowledge: Fluency with control baselines, supplemental overlays (ITAR, CJIS, HIPAA, etc.), impact level determination, and control selection for various system types.
• Project management and stakeholder coordination skills: Experience managing complex, multi-month compliance programs with multiple dependencies, stakeholders, and tight deadlines.
• Technical foundation in cloud security and compliance: Working knowledge of AWS/GCP/Azure, cloud security controls, identity and access management, encryption, logging, and incident response—sufficient to understand system architecture and control implementations.
• Excellent documentation and communication skills: Ability to write clear System Security Plans, coordinate across multiple stakeholders, and translate technical and compliance concepts for government audiences.
• Understanding of federal procurement and contracting: Familiarity with how government agencies acquire and authorize cloud services, and the role of compliance in federal GTM.
• US Person Status: Must be a U.S. Citizen, U.S. National to meet federal compliance requirements.

Nice to Have:

• Professional certifications: CISSP, CISM, CISA, CRISC, or FedRAMP-specific credentials.
• Experience with multiple impact levels: IL2 (Low), IL4 (Moderate), IL6 (High) systems and their specific requirements.
• Background in government contracting, DoD CMMC, or other federal compliance frameworks.
• Experience with SaaS FedRAMP authorization, particularly multi-tenant systems and JAB vs. Agency ATO pathways.

Current US Perks & Benefits:

• Employer subsidized medical/vision and dental coverage for full-time employees
• 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay)
• Monthly stipend to support your work and productivity
• Flexible Time Away Program, plus Sick Time Off
• US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans
• US employees receive 12 paid holidays per year
• Up to 24 weeks of Parental Leave
• Personal paid Volunteer Day to support our community
• Opportunities for professional growth and development including access to Udemy online courses
• Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account
• Teleworking options from any registered location in the U.S. (role specific)

Smartsheet provides a competitive base salary range for roles that may be hired in different geographic areas we are licensed to operate our business from. Actual compensation is determined by several factors including, but not limited to, level of professional, educational experience, skills, and specific candidate location. In addition, this role will be eligible for a market competitive incentive opportunity.

US Base Salary Pay Range

$145,000—$210,000 USD

Get to Know Us:

At Smartsheet, your ideas are heard, your potential is supported, and your contributions have real impact. You’ll have the freedom to explore, push boundaries, and grow beyond your role. We welcome diverse perspectives and nontraditional paths—because we know that impact comes from individuals who care deeply and challenge thoughtfully. When you’re doing work that stretches you, excites you, and connects you to something bigger, that’s magic at work. Let’s build what’s next, together.

Equal Opportunity Employer:

Smartsheet is an Equal Opportunity (EEO) employer committed to fostering an inclusive environment with the best employees. It is our policy to provide equal employment opportunities to all qualified applicants in accordance with applicable laws in the US, UK, Australia, Germany, Costa Rica, Japan, Bulgaria, India, and Singapore. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know.

#LI-Remote

Headquarters: Nationwide Remote Office (US99)
URL: http://icf.com

Please note: This role is contingent upon a contract award. While it is not an immediate opening, we are actively conducting interviews and extending offers in anticipation of the award.  

The Work:  ICF is seeking an experienced and driven Software Security Engineer to lead and oversee mission-critical initiatives in support of our government customer. In this role, you will help safeguard applications and cloud-based systems by integrating security best practices throughout the software development lifecycle. 

Job Location: This position is remote. If you accept this position, you should note that ICF does monitor employee work locations and blocks access from foreign locations/foreign IP addresses and also prohibits personal VPN connections.  

You may be asked to travel once a quarter to an office or client site.  

Our core work hours are 8am - 5pm Eastern Time with the option to start earlier or work later depending on your time zone. 

What You Will Do:  

• Proactively monitor and assess application and system security to identify vulnerabilities and potential threats. 

• Perform secure code reviews and static/dynamic analysis to strengthen application security and ensure adherence to secure coding standards. 

• Test and evaluate security tools, applications, and system configurations to validate compliance with federal and DoD security requirements. 

• Investigate and remediate potential security vulnerabilities, recommending and implementing corrective actions to reduce risk. 

• Design and implement security controls, tools, and automation to enhance protection across cloud and on-premise environments. 

• Provide guidance and training to development teams on secure coding practices and DevSecOps principles. 

• Develop and maintain technical documentation related to security architecture, risk findings, and mitigation strategies. 

• Prepare and deliver executive-level briefings, status reports, and performance updates to government stakeholders and corporate leadership. 

• Maintain a positive, results-oriented work environment by building partnerships with internal and external partners. 

What You Will Bring With You:  

• Active Top Secret clearance. 

• Proven experience (2+ years) in application security, secure software development, or cybersecurity engineering.

What We Would Like You To Bring With You: 

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related technical field. 

• 2 years’ experience with working on/around cloud platforms in AWS. 

• Hands-on experience performing secure code reviews and vulnerability assessments using industry-standard tools (e.g., SAST, DAST, SCA). 

• Experience implementing security controls in cloud environments (e.g., AWS GovCloud or similar secure federal cloud environments). 

• Strong understanding of secure coding standards (e.g., OWASP, NIST, DoD STIGs). 

• Experience supporting systems within regulated or high-security environments. 

• Ability to self-organize, priorities and conduct research on multiple projects under tight deadlines in a fast-paced environment. 

• An ability to communicate and write clearly in English. 

 

Professional Skills: 

• Highly effective analytical, problem-solving, and decision-making capabilities. 

• Excellent communication and interpersonal skills to interface effectively at all levels of the business. 

Working at ICF

ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.

We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy.

We will consider for employment qualified applicants with arrest and conviction records.

 

Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email Candidateaccommodation@icf.com and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent  to provide needed reasonable accommodations.  

Read more about workplace discrimination rights or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act. 

 

Candidate AI Usage Policy

At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted. This policy is in place to maintain the integrity and authenticity of the interview process.  

However, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at candidateaccommodation@icf.com. We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.  

 

Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.

The pay range for this position based on full-time employment is:

$81,499.00 - $138,549.00

Nationwide Remote Office (US99)

To apply: https://weworkremotely.com/remote-jobs/icf-software-security-engineer-cloud-govcloud-top-secret-cleared

At GFiber, we believe that great internet has the power to drive innovation, strengthen communities, enable the impossible, and do all the everyday things that make all of our world go round. And the job of creating better internet is never done - so we’re growing! Our team is committed to building a place where people who want to make a difference can grow their careers and find their spot to belong.

GFiber is an Alphabet company that brings Google Fiber and Google Fiber Webpass internet services to homes and businesses across the United States. Our teams are expanding as we connect more cities and people to exceptional internet.

The application window will be open until at least July 19th, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.

This role is not eligible for immigration sponsorship.

Role Description

As a Senior Application Security Engineer, you will be a core technical advisor for securing GFiber’s applications and development ecosystems. You will partner closely with engineering teams to review code, secure software delivery pipelines, and design frameworks that make writing secure code the path of least resistance. You will lead initiatives ranging from managing threat detection boundaries to establishing cutting-edge AI integrations within our development lifecycle. This is a highly collaborative role where you will influence engineering practices, champion security culture across teams, and occasionally share strategic insights with senior leadership.

In this role, you’ll:

• Manage and optimize core application defenses, including the Web Application Firewall (WAF) and automated vulnerability scanning tools, while monitoring key security metrics.
• Architect and maintain security gating processes within the CI/CD pipeline to ensure secure, seamless software delivery.
• Govern and secure our growing AI pipeline within the SDLC by implementing input/output monitoring, context controls, and safety guardrails around AI-generated code.
• Partner with development teams to remediate vulnerabilities, scale the security champions program, and co-lead our public bug bounty initiative.
• Mentor junior engineers and analysts, and occasionally present security postures, trends, and program milestones to upper management.

At a minimum, we would like you to have:

• Bachelor’s degree in Computer Science, a related technical field, or equivalent practical experience.
• 5 years of experience with managing Web Application Firewalls (WAF) and integrating automated security gating into CI/CD pipelines.
• Experience with vulnerability management and cloud-hosted application security scanning tools.
• Experience collaborating directly with software development teams on threat mitigation.
• Experience with scripting or programming languages (i.e., Python, Java, Kotlin) to automate security processes.

It’s preferred if you have:

• Experience implementing security guardrails, context controls, or monitoring for Large Language Models (LLMs) and AI-assisted development tools.
• Experience leading or growing a security champions program or a bug bounty platform.
• Experience mentoring junior security professionals or teaching secure coding practices to engineering teams.
• Experience analyzing technical security risks and presenting metrics or findings to upper management.
• Knowledge of ISP infrastructure, web-scale networks, or cloud environments (e.g., GCP, AWS).

The US base salary range for this full-time position is between $156,900 - $229,700 + bonus + benefits. As pay varies by location, your recruiter will share more about the specific salary range for your targeted location during the hiring process.

#LI-DNI

GFiber is committed to equal opportunity employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, citizenship, marital status, disability or Veteran status. Disclosure is voluntary, and this information will be kept confidential in compliance with Google’s Candidate Privacy Policy. For more information please refer to our Equal Employment Opportunity Policy and the EEOC’s “Know your rights: workplace discrimination is illegal” (PDF).

It’s important to us to create an accessible, inclusive workplace for everyone. If you have a need that requires accommodation, please let us know by completing ouraccommodations for applicants form. Our candidate accommodations team will then connect with you to confidentially discuss your options.

Senior Security Engineer

Remote

About Brave

Brave is on a mission to protect the human right to privacy online. We’ve built a free web browser that blocks creepy third-party ads and trackers by default, a private search engine with a truly independent index, a browser-native crypto wallet, and a private ad network (opt-in!) that directly rewards you for your attention. And we’re just getting started. Already 110+ million people have switched to Brave for a faster, more private web. Millions more switch every month.

The internet is a sea of privacy-harmful ads, hackers, and echo chambers. Big Tech makes huge profits off our data, and tells us what’s true and what’s not. Brave is fighting back. Join us!

Summary

We are hiring a staff engineer on the Brave security and privacy team! You will help keep our users safe across Brave’s products, including Brave browser and Brave Search. Responsibilities include:

1. Security reviews of Brave products
2. Triaging and fixing security reports
3. Designing and implementing security-relevant code
4. Penetration tests of Brave products and infrastructure

Brave is widely-recognized as one of the best browsers for security and privacy, doing industry-leading work with a team that’s a fraction of the size of Big Tech-supported browsers.

Required qualifications

• At least 5 years experience (or equivalent) in security engineering
• Experience in penetration testing and/or security auditing
• Proficiency in C++, both implementing and reviewing
• Strong familiarity with the Web security model
• Experience securing AWS infrastructure
• Very comfortable working and communicating async with a geographically-distributed software development team
• Be comfortable diving into an extremely large, unfamiliar and complex codebase
• Be comfortable with Git and collaborating on GitHub

Preferred qualifications

• Experience contributing to large open source codebases and/or participating in open source communities
• Proficiency in Web technologies (HTML, CSS, JavaScript)
• Proficiency in Go and Rust
• DevOps experience
• Contributions to other Web browsers
• Familiarity with Chromium’s architecture, especially security
• Ability to write clear technical documentation and less technical writing for blog posts or public communication.
• Be excited about privacy, anonymity, and censorship resistance!

Company Description

SmartRecruiters is the Recruiting AI Company that transforms hiring for the world’s leading enterprises. Built for global scale, SmartRecruiters, an SAP company, delivers an AI-powered hiring platform that automates and optimizes the entire talent acquisition process, ensuring faster and smarter hiring decisions. More than 4,000 companies, including Amazon, Visa, and McDonald’s, rely on SmartRecruiters to build winning teams. In 2025, SmartRecruiters joined SAP, the global leader in enterprise applications. Together, SmartRecruiters and SAP are accelerating the reinvention of hiring by combining cutting-edge AI innovation with the scale, reach, and resources of SAP’s ecosystem.

At SmartRecruiters, we are a values-driven, globally focused tech company with strong financial backing and a bold vision for the future of work. We commit and dig deep, embracing challenges with grit, curiosity, and a drive for excellence. We foster a collaborative and inclusive work environment, where trust and determination bring us together. Because together, we will win.

Recognized by Fosway Industry Analysts as a strategic leader in recruitment technology for three consecutive years, and awarded by Comparably as a top company for Women, Perks and Benefits, Work-Life Balance, Happiness, Compensation, Diversity, and Culture - we take pride in creating a place where everyone can thrive. Our remote-friendly culture, competitive salaries, and strong internal mobility ensure that high performers have meaningful growth opportunities in an environment built on respect and empowerment.

Job Description

SmartRecruiters is looking for a Senior Information Security Engineer to join the Governance, Risk & Compliance (GRC) team. This role is critical to ensuring that SmartRecruiters’ applications, systems, and processes remain compliant with industry standards and regulatory requirements, including ISO 27001, ISO 22301, ISO 42001, SOC 2 Type II, Cyber Essentials, GDPR, and the EU AI Act.

The successful candidate will combine strong GRC expertise with a technical, engineering mindset - someone who can drive compliance programmes across multiple frameworks while also stepping into complex technical topics such as business continuity, AI security, and cloud compliance. Critically, this is not a purely audit-focused role; we need someone who can dig into technical details, assess security architectures, support forensic investigations, build automation to replace manual processes, and provide hands-on guidance to engineering and security teams. A core part of this role is identifying opportunities to engineer scalable, repeatable solutions, from compliance evidence collection to policy enforcement, rather than relying on manual effort.

Responsibilities

Governance, Risk & Compliance

• Identify manual, repetitive GRC processes and design automation blueprints to streamline them, including evidence collection, control monitoring, access reviews, policy enforcement checks, and compliance reporting
• Build and maintain automated workflows using compliance platforms, scripting, or integration tools to reduce manual effort and improve audit-readiness
• Develop reusable templates, playbooks, and standardised blueprints for recurring GRC activities (e.g., vendor assessments, internal audits, risk reviews) to ensure consistency and scalability.
• Collaborate with engineering and IT teams to integrate security and compliance checks into existing toolchains and CI/CD pipelines where applicable
• Continuously evaluate and improve GRC tooling, data flows, and reporting to drive operational efficiency across the team
• Manage stakeholder expectations and partner with internal teams to ensure effective management of IT risks and compliance obligations
• Maintain regional and local stakeholder relationships, meeting schedules, minutes, and reports.
• Support the maintenance of the SOC 2 Type II framework, including evidence collection, control testing coordination, and audit support
• Effectively manage ISO 27001 and ISO 22301 audit lifecycles and coordinate with stakeholders on ISMS and BCMS improvements
• Support the maintenance and continuous improvement of the ISO 42001 (AI Management System) framework in alignment with the EU AI Act
• Support vendor risk management activities, including third-party security assessments and due diligence reviews

Business Continuity & ISO 22301

• Serve as a subject matter expert or key contributor for the Business Continuity Management System (BCMS), supporting the strategy, framework, and audit programme under ISO 22301
• Support Business Impact Analysis (BIA), BCP/DRP development, recovery exercises, and continuity metrics management

AI Security & Compliance

• Support AI security and compliance activities, including the assessment of AI-related risks, alignment with ISO 42001 controls, and regulatory readiness under the EU AI Act
• Collaborate with product and engineering teams to evaluate security controls for AI/ML features and services

Qualifications

• 5+ years of experience in information security, governance, risk, and/or compliance roles with a technical orientation
• Demonstrated compliance or auditing experience with at least one major framework
• Solid understanding of controls auditing principles and evidence management
• Knowledge of risk management methodologies and experience conducting or supporting risk assessments
• Ability to manage and deliver on multiple complex projects simultaneously, with minimal supervision
• The ability to investigate, question, and interpret internal and external IT security and compliance issues at both a governance and technical level
• A strong understanding of technology, cloud-based products, and SaaS environments
• Experience working across business units and geographical boundaries to engage engineering, business, and operational teams
• Experience with ISO 27001
• Excellent written and verbal communication skills in English

Nice to have

• Professional certifications such as CISA, CRISC, CISM, CISSP, CCSK, CCSP, or equivalent
• Experience with ISO 9001, 27017, and 27018
• Experience with ISO 22301 (Business Continuity), including BIA, BCP/DRP, and recovery testing
• Experience with BSI C5 (Cloud Computing Compliance Criteria Catalogue) or similar cloud-specific compliance frameworks
• Knowledge of AI security principles, experience with ISO 42001, or familiarity with the EU AI Act and its technical requirements
• Technical understanding of cloud infrastructure (AWS preferred), networking fundamentals, identity management, and SaaS security architectures
• Experience with enterprise risk management frameworks and tools
• Understanding of threat modelling methodologies and secure development lifecycle (SDLC) principles
• Hands-on experience with incident response - including participation in security incident investigations, containment, and post-mortem processes

Additional Information

SmartRecruiters is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes.

About the Company

Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem.

Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.

About This Role

This role is for a Web3 security researcher who can act as a public face for CertiK. This means having a strong social media presence, speaking at conferences, and being openly helpful to the wider security community. This doesn’t mean you have to have tens of thousands of followers on X, but you do need to be comfortable interacting with the general public. The specific type of security researcher is flexible - contract/chain auditors, pen testers, engineers, and multi-talented individuals can apply. This is a great role for a generalist.

Responsibilities

• Work closely with the Web3 Task Force Team to create stronger connections to the blockchain ecosystem.

• Speak at conferences about your area of expertise on behalf of CertiK.

• Complete interviews about various Web3 security topics.

• Perform tasks cross-functionally among the various teams at CertiK.

• Support the marketing and feedback collection of CertiK’s products and services.

Requirements

• 3+ years of experience in the Web3 space.

• Strong social media presence and high visibility.

• Experience speaking at conferences or in front of large audiences.

• Strong technical skills in the areas of web3 security or related fields.

Bonus Points

• Large number of social media followers.

• Previous experience being the public face of an organization.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

About the Company

Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem.

Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.

About This Role

This role is for a Web3 security researcher who can act as a public face for CertiK. This means having a strong social media presence, speaking at conferences, and being openly helpful to the wider security community. This doesn’t mean you have to have tens of thousands of followers on X, but you do need to be comfortable interacting with the general public. The specific type of security researcher is flexible - contract/chain auditors, pen testers, engineers, and multi-talented individuals can apply. This is a great role for a generalist.

Responsibilities

• Work closely with the Web3 Task Force Team to create stronger connections to the blockchain ecosystem.

• Speak at conferences about your area of expertise on behalf of CertiK.

• Complete interviews about various Web3 security topics.

• Perform tasks cross-functionally among the various teams at CertiK.

• Support the marketing and feedback collection of CertiK’s products and services.

Requirements

• 3+ years of experience in the Web3 space.

• Strong social media presence and high visibility.

• Experience speaking at conferences or in front of large audiences.

• Strong technical skills in the areas of web3 security or related fields.

Bonus Points

• Large number of social media followers.

• Previous experience being the public face of an organization.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Who we are

Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of Things (IoT) data to develop actionable insights and improve their operations. At Samsara, we are helping improve the safety, efficiency and sustainability of the physical operations that power our global economy. Representing more than 40% of global GDP, these industries are the infrastructure of our planet, including agriculture, construction, field services, transportation, and manufacturing — and we are excited to help digitally transform their operations at scale.

Working at Samsara means you’ll help define the future of physical operations and be on a team that’s shaping an exciting array of product solutions, including Video-Based Safety, Vehicle Telematics, Apps and Driver Workflows, and Equipment Monitoring. As part of a recently public company, you’ll have the autonomy and support to make an impact as we build for the long term.

About the role:

As a member of our Security Operations Team, you will collaborate with a global team of engineers to monitor and respond to security events, lead security incidents as Incident Commander, and lead digital forensic investigations in support of Employee Relations, Legal, Compliance, or Information Security cases.

Although you will be focused on security incident response, you will also have the opportunity to create and maintain runbooks, and automated workflows, and assist in process refinement and implementation. You will collaborate with a diverse team of engineers, and key stakeholders on security initiatives across the company. Above all, your focus is bringing Security expertise to the table in a collaborative, humble, and practical manner.

Location: This role is open to candidates residing in the UK

You should apply if:

• You want to impact the industries that run our world: Every phone call you answer and every email you send can affect whether truck drivers deliver goods on time and without accidents, whether students get dropped off safely from school, or whether power gets restored quickly after a natural disaster.
• You thrive the most when solving problems: Our constantly expanding technology and the complexities faced by our customers provide an exciting range of challenges for our Customer Success teams. With a growth mindset and a desire to learn, you will strategically partner with our customers to find unique solutions to help keep their operations safe, efficient, and sustainable.
• You are a natural relationship builder: Whether the relationship is with our customers or with cross-functional teams in Samsara, you are in constant communication and collaboration with key stakeholders to win as a team.
• You are the architect of your own career: If you put in the work, this role won’t be your last at Samsara. This Customer Success team is still shaping its future and you will have plenty of autonomy and opportunities to master your craft in a hyper growth environment.
• You want to be with the best: At Samsara, we win together, celebrate together and support each other. You will be surrounded by the best and brightest professionals out there.

In this role, you will:

• Monitor security events and provide technical analysis on alerts
• Lead information security incidents and employee insider investigations by developing the incident response strategy, lead the execution through incident closure, while providing incident updates to key stakeholders throughout the incident
• Deliver security guidance clearly and concisely for incident response and insider threat initiatives
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat
• Champion, role model, and embed Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices
• Participate in our on-call rota covering weekends

Minimum requirements for the role:

• 5+ years of experience in Security Incident Response
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal
• Ability to build scripts or tools to support Samsara’s investigation processes, with proficiency in Python
• Mentor and train security operation engineers on data collection, analysis, and reporting technical analysis
• Practical experience acting as a lead during security incident response, including monitoring and triaging alerts, and coordinating across teams
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux
• Experience utilizing SIEM tools to perform log reviews
• Experience in cloud architecture and security (AWS, GCP) and cloud-based services
• This role will be part of our EMEA so your hours will be aligned to the UK. As an operational time you may be expected to work flexible hours around this to support the load of the team

An ideal candidate also has:

• 2+ years of experience working on insider threat initiatives or employee investigations
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field - or relevant industry experience
• GIAC Certified Incident Handler (GCIH) or similar Certification
• Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, FedRAMP

Total Rewards

At Samsara, we build for the people who keep the global economy moving. We want owners, not passengers, which is why our rewards are designed to fuel high-impact builders. Our compensation program delivers above-market total compensation through a combination of base salary, performance-based bonus/variable pay, and equity (for eligible roles) in a high-growth public company. We meaningfully differentiate pay for our top performers, who have the opportunity to earn above-market compensation that can outpace the broader market over time.

Beyond compensation, we provide the foundations that enable long-term success: a flexible, employee-led remote model, a professional development stipend, comprehensive health and parental leave plans, and more. If you’re ready to build for the long term and own the outcome, your journey starts here.

Flexible Working

At Samsara, we embrace a flexible working model that caters to the diverse needs of our teams. Our offices are open for those who prefer to work in-person and we also support remote work where it aligns with our operational requirements. For certain positions, being close to one of our offices or within a specific geographic area is important to facilitate collaboration, access to resources, or alignment with our service regions. In these cases, the job description will clearly indicate any working location requirements. Our goal is to ensure that all members of our team can contribute effectively, whether they are working on-site, in a hybrid model, or fully remotely. All offers of employment are contingent upon an individual’s ability to secure and maintain the legal right to work at the company and in the specified work location, if applicable.

Belonging at Samsara

At Samsara, we welcome everyone regardless of their background. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender, gender identity, sexual orientation, protected veteran status, disability, age, and other characteristics protected by law. We depend on the unique approaches of our team members to help us solve complex problems and want to ensure that Samsara is a place where people from all backgrounds can make an impact.

Accommodations

Samsara is an inclusive work environment, and we are committed to ensuring equal opportunity in employment for qualified persons with disabilities. Please email accessibleinterviewing@samsara.com or click here if you require any reasonable accommodations throughout the recruiting process.

Our Commitment to Authenticity

We use Tofu, a fraud detection tool, to validate the authenticity of applications and protect against identity fraud. This ensures we are connecting with real people and allows us to prioritize genuine candidates. Please see Samsara’s Candidate Privacy Notice for more information.

Fraudulent Employment Offers

Samsara is aware of scams involving fake job interviews and offers. Please know we do not charge fees to applicants at any stage of the hiring process. Official communication about your application will only come from emails ending in @samsara.com, @us-greenhouse-mail.io or @mail3.guide.co. For more information regarding fraudulent employment offers, please visit our blog post here.

Exciting Remote Securiti.ai SME contract career opportunity.

Own the design, configuration and operationalization of the Securiti.ai platform for an enterprise privacy-compliance program — turning DSAR, DPIA, RoPA and consent requirements into a working, defensible capability the client can run after transition.

• 2+ years hands-on Securiti.ai — discovery & classification, DSAR automation, DPIA, RoPA, consent modules
• Multi-cloud connector configuration: AWS, Azure, GCP, Oracle Cloud, IBM Cloud; SaaS sources incl. M365 & Salesforce
• Architect and configure the Securiti.ai Data Command Center — discovery, classification and data-mapping modules across the multi-cloud estate
• Stand up DSAR intake and fulfillment automation, DPIA/PIA workflows, RoPA and Universal Consent Management
• Map cross-border transfer obligations and EU AI Act touchpoints into the platform’s assessment framework
• Integrate with the surrounding stack — DSPM, data catalog, CMDB and SaaS sources — and tune classification accuracy
• Deliver runbooks, role-based training and knowledge transfer for client self-sufficiency.
• Working fluency in GDPR, CCPA/CPRA and U.S. state privacy laws; EU AI Act awareness
• Experience operationalizing DSAR SLAs, records of processing and consent at enterprise scale
• Data mapping and lineage across structured/unstructured stores; Databricks & ServiceNow CMDB familiarity a plus
• API-based integration experience; DSPM tooling exposure (e.g., Wiz, Microsoft Purview) valued
• Preferred: Securiti.ai certification(s) — Privacy Ops / Data Command Center, IAPP CIPP/E, CIPM or CIPT; CISSP or equivalent security credential a plus

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

GuidePoint Security is seeking a Security Architect (SecOps) to join our Security Operations practice and serve as a trusted technical advisor to prospects and customers throughout the sales cycle.

Note: Applicants must live in our Northeast region to be considered (NJ to Maine). Up to 25% travel primarily in the region required.

Role Overview:

You will partner with account executives and practice leadership to build customer confidence, articulate technical solutions, and enable seamless handoffs to delivery teams. This is a customer-facing role focused on discovery, design, and positioning — not deep implementation. You will work across the SIEM, SOAR, detection-as-code, and emerging technologies like Snowflake for security data lakes.

What You’ll Do:

• Lead technical discovery calls and translate customer requirements into high-level solution designs
• Speak credibly about product capabilities, integrations, and architectural trade-offs (e.g., Splunk, Sentinel, CrowdStrike Next-Gen SIEM, Tines, Torque, Snowflake)
• Draw integration diagrams, validate technical feasibility, and position GuidePoint’s differentiated capabilities
• Support account executives in pre-sales engagements, ensuring technical alignment before formal scoping
• Stay current on security operations trends, emerging platforms, and competitive positioning
• Collaborate with delivery architects to ensure smooth transitions from sales to implementation
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

What We’re Looking For:

• Technically credible — you understand how SIEM/SOAR/detection-as-code ecosystems work at a fundamental level
• Approachable and articulate — you can explain complex topics in accessible terms without being condescending or overconfident
• Customer-focused — you listen well, ask the right questions, and build trust quickly
• Curious and adaptable — you’re comfortable learning new platforms (e.g., Snowflake) as customer demand evolves
• Experience in security operations, consulting, or pre-sales engineering preferred
• No deep implementation expertise required — we value breadth, communication, and judgment over hands-on keyboard skills

We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don’t miss updates on your application.

Why GuidePoint? GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,200 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.

Some added perks….

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

About Life360

Life360’s mission is to keep people close to the ones they love. Our category-leading mobile app,Tile tracking devices, and Pet GPS tracker empower members to protect the people, pets, and things they care about most with a range of services, including location sharing, safe driver reports, and crash detection with emergency dispatch. Life360 serves approximately 97.8 million monthly active users (MAU), as of March 31, 2026, across more than 180 countries.

Life360 delivers peace of mind and enhances everyday family life with seamless coordination for all the moments that matter, big and small. By continuing to innovate and deliver for our customers, we have become a household name and the must-have mobile-based membership for families (and those friends who are basically family).

Life360 has more than 500 (and growing!) remote-first employees. For more information, please visit life360.com.

Life360 is a Remote First company, which means a remote work environment will be the primary experience for all employees. All positions, unless otherwise specified, can be performed remotely (within the US and Canada) regardless of any specified location above.

We are AI Native

We are building an AI native company where AI is an integral part of how we build and operate. AI tool usage during interviews varies by role. You may be asked to demonstrate proficiency with AI tools, discuss how you leverage AI, or complete interview exercises without AI assistance. Your Recruiter will provide clear guidance as you move through the interview process.

Undisclosed use of AI not previously discussed with or approved by your Recruiter may impact your candidacy.

About The Team

Security and IT at Life360 operate as a single integrated function — and we’re building it like one. That means treating identity infrastructure the way engineering teams treat product infrastructure: owned in code, measured with data, and continuously improved. You’ll own Enterprise IAM at Life360 — setting the architecture, engineering standards, and program direction for how every employee accesses every system, at a company that handles sensitive location data for nearly 100 million users. AI is core to how this team operates day to day — from drafting and validating IaC changes to automating access-review workflows — so identity engineering here means designing systems that pair automation with human judgment, not replacing one with the other.

About the Job

We’re looking for a Sr. IAM Engineer who thinks in systems, writes code to solve operational problems, and treats identity as a platform discipline. You’ll own the full enterprise identity stack: how it’s architected, how it’s measured, and how it scales as we grow. The foundation is in place now and we need someone to drive the design, automation, and governance layers forward. We’re building toward a metrics-first operating model, and you’ll build the instrumentation that makes that real. You’ll partner with HR, Security, and Engineering, and you’ll be expected to replace manual processes with durable, testable code wherever it exists. In your first year, success looks like a consolidated Okta footprint with orphaned accounts and stale SSO integrations cleaned up, access reviews running on a measurable cadence, and identity provisioning largely codified in Terraform rather than handled manually.

For candidates based in the US, the salary range for this position is $91,000 to $169,000 USD. For candidates based out of Canada, the salary range for this position is 132,000 to 157,000 CAD. Note: Please be aware that the job title for positions in Canada will be “Developer” in lieu of “Engineer.” We take into consideration an individual’s background and experience in determining final salary; therefore, base pay offered may vary considerably depending on geographic location, job-related knowledge, skills, and experience. The compensation package includes a wide range of medical, dental, vision, financial, and other benefits, as well as equity.

What You’ll Do

• Own the enterprise identity platform as an engineering system — architect SSO integrations, lifecycle workflows, MFA policy, and group provisioning in Okta using IaC as the source of truth; configuration drift is a bug, not a ticket
• Engineer the identity lifecycle management layer — design access control models and codify provisioning/deprovisioning workflows in IaC, partnering with HR systems to eliminate manual access operations and return clean provisioning capability to the helpdesk tier
• Engineer access governance across the cloud and SaaS portfolio — own role assignments, group structures, and access controls across cloud infrastructure and collaboration platforms; design and automate periodic access reviews so auditability is structural, not procedural
• Harden the device-to-identity trust boundary — own device trust integrations between our identity provider and MDM platforms, ensuring device compliance signals are correctly evaluated in access policy and that the control surface is fully codified
• Rationalize and consolidate legacy identity surface — lead the technical cleanup of orphaned accounts, stale SSO integrations, and guest access sprawl across the SaaS portfolio; treat this as technical debt reduction with measurable outcomes
• Build the IAM measurement layer — define, instrument, and track KPIs (access review completion rates, provisioning latency, orphaned account age, ticket volume trends) that justify investment decisions and demonstrate program maturity to Security leadership
• Define the identity layer of our access request platform — architect the entitlement structures and access controls exposed through our self-service access tooling; codify the configuration in IaC and own the integration contract between identity infrastructure and the employee-facing access experience
• Contribute to a unified service catalog — ensure identity workflows are clearly surfaced through a single employee-facing entry point and that the handoff between self-service and engineer-owned provisioning is unambiguous
• Use AI coding agents as a first-class part of the identity engineering workflow — draft and validate Terraform modules, provisioning logic, and access-policy changes with AI assistance, and own review of anything AI-generated before it reaches production identity infrastructure

What We’re Looking For

• Production experience in engineering and operating an enterprise identity platform at scale; SSO, lifecycle management, MFA, application integrations, and group-based access, with a strong bias toward configuration-as-code over manual administration
• Strong IaC skills are required (Terraform or equivalent) applied to identity infrastructure — you write modules, manage state, and treat IaC plans as the change control mechanism
• Deep working knowledge of SAML 2.0, OAuth 2.0, OIDC, and SCIM — you can debug a broken SAML assertion, reason through an OAuth flow, and design a SCIM provisioning schema without looking things up— including hands-on experience with custom authorization servers
• Experience designing access control models in SaaS-heavy, remote-first environments. You understand the difference between a pragmatic access model and one that will collapse under growth
• Experience governing access across cloud and SaaS platforms via SSO and SCIM — including group structures, permission boundaries, and collaboration platform controls
• Comfort writing code to automate identity operations — Python, Go, or similar; you reach for a script before you reach for a ticket
• Track record of defining measurable outcomes for security/identity programs and communicating them to non-technical stakeholders
• Demonstrated fluency with AI coding/agent tools in a production engineering context — you can describe an end-to-end AI-assisted workflow you built (not just tool usage), and you know how to review AI-generated IaC or configuration before it ships

Nice to Have

• Experience integrating device trust between an identity provider and MDM platforms to enforce compliance as a condition of access
• Familiarity with self-service access request platforms
• Experience operating in SOX, SOC 2, GDPR, CCPA, or COPPA compliance environments
• Exposure to zero-trust architecture patterns and their application to workforce identity

AI-Native Expectations

• Daily use: you use AI coding agents (e.g. Claude Code, Cursor, GitHub Copilot) daily to draft Terraform modules, provisioning scripts, and access-policy configuration — not just for autocomplete
• Judgment and ownership: you review and are accountable for anything AI-generated before it touches production identity infrastructure; you can describe a time AI output was wrong and what you changed as a result
• Velocity: AI fluency is expected to translate into measurable output leverage — faster IaC iteration, faster incident triage, fewer manual provisioning tickets
• Team leadership: you share what you learn — reusable prompts, context docs, agent setups — and help raise the AI fluency of the broader Security/IT team
• Continuous learning: you stay current on agentic tooling and bring recommendations back to the team rather than waiting for tooling decisions to be made for you

Our Benefits

• Competitive pay and benefits.
• Medical, dental, vision, life, and disability insurance plans (100% paid for US employees). We offer supplemental plans for medical and dental for Canadian employees.
• 401(k) plan with company matching program in the US and RRSP with DPSP plan for Canadian employees.
• Employee Assistance Program (EAP) for mental wellness.
• Flexible PTO and 12 company-wide days off throughout the year.
• Winter and Summer Weeklong Synchronized Company Shutdowns
• Learning & Development programs.
• Equipment, tools, and reimbursement support for a productive remote environment.
• Free Life360 Platinum Membership for your preferred circle.
• Free Tile Products

Life360 Values

Our company’s mission-driven culture is guided by our shared values to create a trusted work environment where you can bring your authentic self to work and make a positive difference

• Be a Good Person - We have a team of high integrity people you can trust.
• Be Direct With Respect - We communicate directly, even when it’s hard.
• Members Before Metrics - We focus on building an exceptional experience for families.
• High Intensity, High Impact - We do whatever it takes to get the job done.

Our Commitment to Diversity

We believe that different ideas, perspectives and backgrounds create a stronger and more creative work environment that delivers better results. Together, we continue to build an inclusive culture that encourages, supports, and celebrates the diverse voices of our employees. It fuels our innovation and connects us closer to our customers and the communities we serve. We strive to create a workplace that reflects the communities we serve and where everyone feels empowered to bring their authentic best selves to work.

We are an equal opportunity employer and value diversity at Life360. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status or any legally protected status.

We encourage people of all backgrounds to apply. We believe that a diversity of perspectives and experiences create a foundation for the best ideas. Come join us in building something meaningful. Even if you don’t meet 100% of the below qualifications, you should still seriously consider applying!

#LI-Remote

\_\_\__________________________________________________________________________

Headquarters: United States (Remote)
URL: http://unqork.com

Unqork empowers enterprises to accelerate growth by rapidly building, testing, and running AI-powered applications that embody the future of enterprise development. Trusted by the world’s largest organizations in highly regulated industries, these applications become more secure over time while significantly reducing technical debt—allowing businesses to focus on innovation rather than maintenance. Unqork’s customers include Goldman Sachs, Marsh, BlackRock, and the U.S. Department of Health and Human Services. 

At Unqork, we value inclusive and innovative thinkers who boldly challenge the status quo. We encourage you to apply!

We are looking to hire an Intern to join our Product Security team .

Title: Intern-Web Application Penetration Tester

Department: Product Security

Reports to: Director, Product Security

Type: Paid Internship $30/hr

We are looking to hire an Intern- Web Application Penetration Tester to join our product security team. This role is designed for rising seniors or a recent college graduate with a strong foundational background in Computer Science or Cybersecurity who wants to transition theoretical knowledge into real-world ethical hacking. In this role, you won't just run automated scanners. You will actively dissect complex web applications, hunt for business logic flaws, and evaluate the security posture of our emerging AI and Large Language Model (LLM) integrations.

What Impact U would make 

• Vulnerability Assessment & Pentesting: Assist in conducting manual and automated penetration tests on web application and APIs to identify security vulnerabilities (OWASP Top 10).
• AI/LLM Security Evaluation: Help assess the security of AI-driven features and LLM implementations, checking for vulnerabilities like prompt injection, data poisoning, insecure output handling, and model denial of service (OWASP Top 10 for LLMs).
• Exploitation & PoC Development: Safely demonstrate the impact of discovered vulnerabilities by creating clear Proof-of-Concept (PoC) exploits.
• Documentation & Reporting: Write comprehensive, technical security reports detailing findings, exploitation paths, risk ratings, and actionable remediation steps for development teams.
• Collaboration: Work closely with software engineers to explain security flaws and guide them on secure coding best practices and remediation verification.

What U bring:

• Currently pursuing an undergraduate or graduate degree in Computer Science, Cybersecurity, or a related field.
• Demonstrates a strong interest in cybersecurity and a commitment to staying current on emerging threats, security risks, attack vectors, and industry best practices.
• Possesses exceptional attention to detail and strong organizational skills.
• Excellent written and verbal communication abilities, with the capacity to convey technical information clearly and effectively.
• Confident and comfortable collaborating with peers, cross-functional teams, and management-level stakeholders.
• Proven ability to prioritize and manage multiple responsibilities while working independently in a fast-paced, dynamic environment.

Preferred Traits:

• Curious and proactive problem solver
• Process-oriented with a continuous improvement mindset
• Comfortable working with ambiguity and learning new systems quickly
• Collaborative team player with a strong sense of ownership

Unqork embraces a culture of security and privacy awareness by consistently safeguarding sensitive information, adhering to company policies, and actively participating in training and initiatives to protect our data and the privacy of our stakeholders. 

Unqork is an equal opportunity employer. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.

To apply: https://weworkremotely.com/remote-jobs/unqork-intern-web-application-penetration-tester

RDQ327R177

While candidates in the listed location(s) are encouraged for this role, candidates in other US locations will be considered.

The Security Field Engineering team helps data teams solve the world’s toughest problems by empowering customers to understand the security of the Databricks platform and by helping account teams address questions that come up during security reviews. Reporting to the Head of Security Field Engineering, you will meet with customers to answer questions, train other Databricks team members, build customer-facing content such as slide decks, white papers, and maybe write code that customers can use. Our team prioritizes scale – we’d rather spend an hour building a doc than be in ten hours of meetings, rather deliver agent skills and knowledge base articles than be the rock star answering all the questions. If you want high growth, autonomy, and to touch all elements of security, look no further.

The impact you will have:

• You will be viewed as a security expert as you work with field teams and customers to understand architectures, address concerns and handle compliance questions
• Your contributions may come in multiple ways, including customer interactions, scalable slides or white paper creation, internal enablement, process improvement, automation, or technical leadership—no one excels in every area, but all are valuable
• When you’re on the call, you will be directly appreciated. When you’re not, your impact will be felt across the company through the enablement, collateral, knowledge management, and systems you build
• You might not come from an assurance team, but you’ll come up to speed with common security and compliance regimes to save customers hours of effort and months of uncertainty
• You will identify customer pain points and work with product management and product marketing will improve our product and our messaging
• You will contribute to internal-facing services and automation that make life easier for our field staff and our customers.
• You are probably already great at AI productivity, but you’ll sit in a group focused on becoming legendary.

What we look for:

• 5+ years of technical pre-sales or post-sales experience where you’re the person in the room explaining the hard concepts
• Equal love of understanding complex security principles and architectures, and of communicating them simply
• Real-world experience in multiple security domains such as IaaS+PaaS+SaaS, network and endpoint security, web applications, vulnerability management, identity management, and SIEM, though not all are needed
• You’ve done some scripting or programming, and are excited to use AI relentlessly to scale our impact across many thousands of customers and employees.
• Understanding of the Databricks platform is a strong plus.

Pay Range Transparency

Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected base salary range for non-commissionable roles or on-target earnings for commissionable roles.  Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipated utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.

Zone 1 Pay Range

$270,300—$371,700 USD

Zone 2 Pay Range

$243,300—$334,500 USD

Zone 3 Pay Range

$229,800—$315,900 USD

Zone 4 Pay Range

$216,200—$297,350 USD

About Databricks

Databricks is the data and AI company. More than 10,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. To learn more, follow Databricks on Twitter, LinkedIn and Facebook.

BenefitsAt Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here.

Our Commitment to Diversity and Inclusion

At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.

Compliance

If access to export-controlled technology or source code is required for performance of job duties, it is within Employer’s discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.

Employment Type- Part-time (15–20 hrs/week); potential to grow to full-time

Reports to- VP of Engineering

Location- Remote — must be Ontario-based; head office is in Toronto

Target Start- As soon as possible

About Habitat Learn

Habitat Learn is an education technology company focused on making learning accessible for every student.

Our products include Messenger Pigeon, an AI-powered platform for learning, note-taking, and live captioning, and Podium Solution, an on-device classroom accessibility platform designed with privacy and security at its core. Our technology is used by educational institutions including Harvard, UC Berkeley, Yale, the University of Toronto, and Humber Polytechnic to support more inclusive and accessible learning environments.

We are a design-led company with privacy, security, and data sovereignty as core principles. Podium Solution processes audio entirely on-device by design. We also provide Apple hardware to our team to ensure consistency, security, and performance across our workflows.

As we scale across North America, we are formalizing our security and compliance function to support institutional requirements and evolving public-sector standards.

About the Role

This is a newly created role at Habitat Learn for someone early in their career who is eager to take ownership, learn quickly, and grow within a fast-moving EdTech company.

As our first dedicated Security & Compliance Associate, you will support and help strengthen our security and compliance program across multiple frameworks, including SOC 2, ISO 27001, HIPAA, HECVAT, and Texas RAMP.

You will not be working alone. We are currently engaged with the Humber Polytechnic Digital Tech Hub for a cybersecurity assessment, followed by ongoing advisory support. This provides a structured foundation, external expertise, and a clear remediation roadmap. Your role will be to help operationalize and execute this roadmap internally.

You will work closely with the VP of Engineering and engineering leadership to ensure security and compliance requirements are embedded into day-to-day product and infrastructure operations.

What You’ll Do

Compliance & Documentation

• Support ongoing compliance activities across SOC 2, ISO 27001, HIPAA, HECVAT, and TX-RAMP
• Collect, organize, and maintain audit evidence and security documentation
• Help draft and maintain security policies, procedures, and internal standards
• Complete security questionnaires and HECVAT submissions for institutional procurement
• Maintain a compliance tracker and support audit readiness activities

Cybersecurity Assessment Follow-Through

• Review findings from the Humber Digital Tech Hub cybersecurity assessment
• Track remediation tasks and help coordinate follow-up with engineering and leadership
• Support updates to the risk register and documentation of control gaps and resolutions
• Act as an internal coordinator for progress tracking and reporting

Security Operations Support

• Support user access controls, provisioning, and offboarding processes
• Assist with vendor security reviews and BAA tracking
• Help coordinate internal security awareness and training activities
• Support Apple device management processes (MDM, Apple Business Manager)

Stakeholder Support

• Support responses to customer security reviews and procurement due diligence requests
• Assist in preparing compliance and security status updates for leadership
• Stay informed on relevant privacy and data protection regulations (FERPA, PIPEDA, etc.)

How to Apply

Attach your resume and a short paragraph in the summary section of the application form (a few sentences is fine).

Please include:

• What program you studied
• Any exposure to security, privacy, or compliance work
• Why Habitat Learn interests you

This role is open to candidates across Ontario, however candidates in other areas can be considered. We have strong ties with Humber Polytechnic but welcome applicants from any relevant program. Applications are reviewed on a rolling basis.

What We’re Looking For:

Education

• Recent graduate (within 1–2 years) of a diploma or degree in Cybersecurity, Protection & Security Investigation, IT Security, Network Security, or a related field
• Ontario institutions such as Humber Polytechnic, Seneca Polytechnic, George Brown College, or equivalent programs are strongly welcomed
• Coursework in cybersecurity frameworks, risk management, or privacy law is an asset

Skills & Attributes

• Strong attention to detail and highly organized approach to documentation
• Clear written communication skills (policy writing and institutional responses are key parts of the role)
• Comfortable working independently in a fast-paced, evolving environment
• Curious about security and privacy, with an interest in understanding underlying systems (not just processes)
• Ability to manage multiple priorities and stay structured in a startup setting

Nice to Have

• Exposure to frameworks such as SOC 2, ISO 27001, NIST, HIPAA, or similar
• Familiarity with Apple device management or enterprise IT environments
• Entry-level certifications (e.g., CompTIA Security+, ISC2 CC)
• Experience with tools such as Vanta, Drata, Notion, or Jira
• Prior co-op, internship, or volunteer experience in IT, security, or compliance

What You’ll Get:

• A meaningful first role with real ownership (not an internship-style support role)
• Direct mentorship from the VP of Engineering and exposure to company leadership
• Structured guidance through the Humber Digital Tech Hub cybersecurity assessment
• Hands-on experience across multiple enterprise compliance frameworks
• Exposure to real institutional procurement and security processes
• A mission-driven product supporting accessibility in education
• Remote Employment
• Health Benefits