Red Team Security Engineer

Backblaze

Colombia
Remote
Full-time

Apply

11 hrs ago

View job

Information Security Analyst (Product Assurance)

Lacuna Talent

United States
Remote
Full-time

Apply

11 hrs ago

View job

Senior Cyber Security Specialist

Softtest pays pty ltd

Australia
Remote
Full-time

Apply

12 hrs ago

View job

OT-Security Consultant / Penetration Tester (m/w/d)

Yekta IT GmbH

Germany
Remote
Full-time

Apply

12 hrs ago

View job

Client Assurance- InfoSec GRC - Remote US

SAMC SitusAMC Holdings Corp

United States
Remote
Full-time

Apply

12 hrs ago

View job

Network Security Engineer - Vulnerability & Compliance Focus

Support Tech LLC

United States
Remote
Full-time

Apply

12 hrs ago

View job

Principal AI Research Cybersecurity Scientist (Bay Area)

Alice

United States
Remote
Full-time

Apply

12 hrs ago

View job

Senior Risk Analyst

Apogee Global RMS

United States
Remote
Contract

Apply

15 hrs ago

View job

Security Compliance Engineer

Yuno

Argentina
Remote
Full-time

Apply

15 hrs ago

View job

Chief Information Security Officer (CISO) — Insurance & Investments

TheHiveCareers

Dominican Republic
Remote
Full-time

Apply

15 hrs ago

View job

Senior Incident Response Analyst

HealthEdge

United States
Remote
Full-time

Apply

16 hrs ago

View job

SME Security Control Assessor

IMAGINEEER LLC

United States
Remote
Full-time

Apply

16 hrs ago

View job

Cybersecurity Analyst Intermediate w/Splunk

General Dynamics Information Technology

United States
Remote
Full-time

Apply

16 hrs ago

View job

Information Security Risk Specialist

Booz Allen Hamilton

United States
Remote
Full-time

Apply

17 hrs ago

View job

Incident Response Analyst

Check Point Software

Australia
Remote
Full-time

Apply

18 hrs ago

View job

Mid-Level Security Automation Engineer

DecisionPoint Corporation

United States
Remote
Full-time

Apply

18 hrs ago

View job

Principal Security Compliance Analyst (FedRAMP) - Remote, U.S.

Entrust

United States
Remote
Full-time

Apply

19 hrs ago

View job

Cybersecurity Analyst II

Frontgrade Technologies

United States
Remote
Full-time

Apply

19 hrs ago

View job

Security Operations Engineer

Collectors

United States
Remote
Full-time

Apply

20 hrs ago

View job

IT Security Specialist (Microsoft Azure & 365 Focus)

Support Tech LLC

United States
Remote
Contract

Apply

20 hrs ago

View job

Cybersecurity Program Manager

Apogee Global RMS

United States
Remote
Contract

Apply

21 hrs ago

View job

Director, IT & Security

Illuminate Literacy

United States
Remote
Full-time

Apply

21 hrs ago

View job

Senior Security Operations Engineer

Sword Health

United States
Remote
Full-time

Apply

21 hrs ago

View job

Security Software Developer

Softtest pays pty ltd

Australia
Remote
Full-time

Apply

23 hrs ago

View job

National Security Manager

Fujifilm

United States
Remote

Apply

1 day ago

View job

Manager Identity & Trust Engineering

BlueCross BlueShield of Tennessee

United States
Remote
Full-time

Apply

1 day ago

View job

Senior Product Owner DevSecOps

Humana

United States
Remote
Full-time

Apply

1 day ago

View job

Sr. Engineer, Product Cyber Security

United States
Remote
Full-time

Apply

1 day ago

View job

Sr. Security/ Technology Engineer

NV5

United States
Remote
Full-time

Apply

1 day ago

View job

Cyber Security Cloud Engineer

National Carwash Solutions

United States
Remote
Full-time

Apply

1 day ago

Application Security Engineer

TripleTen

Application Security Engineer

EstoniaRemoteFull-time

Pay Range: EUR 4k - EUR 6k / monthly

Posted Oct 2

Apply

Job Description

Description

Nebius Academy (powered by TripleTen) provides assessments and training for tech companies and aspiring professionals worldwide, helping companies & individuals transform their lives through career development and acquiring the new skills needed as a tech professional.

Our focus on data science, machine learning, and generative AI helps tech-forward companies level up their employees' skills and drive innovation.

We are looking for an Application Security Engineer to own product security end to end — from threat modelling and secure design reviews to vulnerability management and security controls embedded into CI/CD.

You will work closely with product and platform teams to make security part of the engineering process, building secure defaults and helping prevent vulnerabilities from reaching production without slowing development down.

What you will do

Own application and product security end to end, from design reviews and threat modelling to vulnerability remediation and follow-up.
Partner with product and platform teams to embed security into the development lifecycle rather than treat it as a final review step.
Build and improve security controls in CI/CD, including SAST, dependency, secrets, container, and IaC scanning.
Review application designs and code where security risk is meaningful, and turn recurring findings into secure defaults, shared libraries, lint rules, and CI gates.
Drive vulnerability management across application code and cloud posture, including triage, risk-based prioritisation, remediation timelines, and external pentest findings.
Strengthen security in multitenant B2B systems, including tenant isolation, authentication, authorization, RBAC / ABAC, and access controls.
Work on cloud and Kubernetes security across AWS environments, including IAM, secrets management, network boundaries, and workload hardening.
Help translate GDPR, SOC 2, and ISO 27001 requirements into practical engineering controls and system properties.
Develop and support a security champions programme to help engineering teams adopt secure practices in their day-to-day work.
Address security risks specific to AI and LLM-powered features, including prompt injection, data leakage, and untrusted model output.

Requirements

5+ years of engineering experience, including at least 2 years focused on Application Security or Product Security.
Strong software engineering background with the ability to read, review, and write production code; Python experience is highly preferred.
Deep practical knowledge of web application security, including OWASP Top 10, ASVS, authentication and session management, OAuth2 / OIDC / SAML, and authorization issues such as IDOR and broken access control.
Experience securing multitenant or B2B SaaS products, including tenant isolation, RBAC / ABAC, and access control models.
Hands-on experience embedding security into CI/CD, including SAST, SCA, secrets scanning, container scanning, and IaC scanning.
Strong experience with threat modelling, secure design reviews, and secure code reviews in collaboration with product and engineering teams.
Experience managing vulnerabilities based on risk, criticality, and exploitability, including remediation prioritisation and escalation when needed.
Working knowledge of AWS and Kubernetes security, including IAM, secrets management, network boundaries, and workload hardening.
Strong communication skills and the ability to explain security risks clearly to engineers, product managers, and auditors.
Fluent Russian and English at B2 level or above.

Nice to have:

Experience building a DevSecOps practice from scratch.
Experience running or participating in a Security Champions programme.
Hands-on penetration testing experience.
Experience securing LLM-powered or AI products.
Experience with SOC 2 or ISO 27001 from an engineering perspective.
Knowledge of software supply chain security, including SBOMs, SLSA, image signing, or similar practices.

What we can offer you

A supportive and proactive work environment.
Competitive compensation: 4000-6000 EUR Gross per month
Fully remote and full-time collaboration.
Modern digital tools for seamless collaboration.
Tangible results measured by student success.

Originally posted on Himalayas

Job Description

Description

Our focus on data science, machine learning, and generative AI helps tech-forward companies level up their employees' skills and drive innovation.

What you will do

Own application and product security end to end, from design reviews and threat modelling to vulnerability remediation and follow-up.
Partner with product and platform teams to embed security into the development lifecycle rather than treat it as a final review step.
Build and improve security controls in CI/CD, including SAST, dependency, secrets, container, and IaC scanning.
Review application designs and code where security risk is meaningful, and turn recurring findings into secure defaults, shared libraries, lint rules, and CI gates.
Drive vulnerability management across application code and cloud posture, including triage, risk-based prioritisation, remediation timelines, and external pentest findings.
Strengthen security in multitenant B2B systems, including tenant isolation, authentication, authorization, RBAC / ABAC, and access controls.
Work on cloud and Kubernetes security across AWS environments, including IAM, secrets management, network boundaries, and workload hardening.
Help translate GDPR, SOC 2, and ISO 27001 requirements into practical engineering controls and system properties.
Develop and support a security champions programme to help engineering teams adopt secure practices in their day-to-day work.
Address security risks specific to AI and LLM-powered features, including prompt injection, data leakage, and untrusted model output.

Requirements

5+ years of engineering experience, including at least 2 years focused on Application Security or Product Security.
Strong software engineering background with the ability to read, review, and write production code; Python experience is highly preferred.
Deep practical knowledge of web application security, including OWASP Top 10, ASVS, authentication and session management, OAuth2 / OIDC / SAML, and authorization issues such as IDOR and broken access control.
Experience securing multitenant or B2B SaaS products, including tenant isolation, RBAC / ABAC, and access control models.
Hands-on experience embedding security into CI/CD, including SAST, SCA, secrets scanning, container scanning, and IaC scanning.
Strong experience with threat modelling, secure design reviews, and secure code reviews in collaboration with product and engineering teams.
Experience managing vulnerabilities based on risk, criticality, and exploitability, including remediation prioritisation and escalation when needed.
Working knowledge of AWS and Kubernetes security, including IAM, secrets management, network boundaries, and workload hardening.
Strong communication skills and the ability to explain security risks clearly to engineers, product managers, and auditors.
Fluent Russian and English at B2 level or above.

Nice to have:

Experience building a DevSecOps practice from scratch.
Experience running or participating in a Security Champions programme.
Hands-on penetration testing experience.
Experience securing LLM-powered or AI products.
Experience with SOC 2 or ISO 27001 from an engineering perspective.
Knowledge of software supply chain security, including SBOMs, SLSA, image signing, or similar practices.

What we can offer you

A supportive and proactive work environment.
Competitive compensation: 4000-6000 EUR Gross per month
Fully remote and full-time collaboration.
Modern digital tools for seamless collaboration.
Tangible results measured by student success.

Originally posted on Himalayas

Job Description

Description

Our focus on data science, machine learning, and generative AI helps tech-forward companies level up their employees' skills and drive innovation.

What you will do

Own application and product security end to end, from design reviews and threat modelling to vulnerability remediation and follow-up.
Partner with product and platform teams to embed security into the development lifecycle rather than treat it as a final review step.
Build and improve security controls in CI/CD, including SAST, dependency, secrets, container, and IaC scanning.
Review application designs and code where security risk is meaningful, and turn recurring findings into secure defaults, shared libraries, lint rules, and CI gates.
Drive vulnerability management across application code and cloud posture, including triage, risk-based prioritisation, remediation timelines, and external pentest findings.
Strengthen security in multitenant B2B systems, including tenant isolation, authentication, authorization, RBAC / ABAC, and access controls.
Work on cloud and Kubernetes security across AWS environments, including IAM, secrets management, network boundaries, and workload hardening.
Help translate GDPR, SOC 2, and ISO 27001 requirements into practical engineering controls and system properties.
Develop and support a security champions programme to help engineering teams adopt secure practices in their day-to-day work.
Address security risks specific to AI and LLM-powered features, including prompt injection, data leakage, and untrusted model output.

Requirements

5+ years of engineering experience, including at least 2 years focused on Application Security or Product Security.
Strong software engineering background with the ability to read, review, and write production code; Python experience is highly preferred.
Deep practical knowledge of web application security, including OWASP Top 10, ASVS, authentication and session management, OAuth2 / OIDC / SAML, and authorization issues such as IDOR and broken access control.
Experience securing multitenant or B2B SaaS products, including tenant isolation, RBAC / ABAC, and access control models.
Hands-on experience embedding security into CI/CD, including SAST, SCA, secrets scanning, container scanning, and IaC scanning.
Strong experience with threat modelling, secure design reviews, and secure code reviews in collaboration with product and engineering teams.
Experience managing vulnerabilities based on risk, criticality, and exploitability, including remediation prioritisation and escalation when needed.
Working knowledge of AWS and Kubernetes security, including IAM, secrets management, network boundaries, and workload hardening.
Strong communication skills and the ability to explain security risks clearly to engineers, product managers, and auditors.
Fluent Russian and English at B2 level or above.

Nice to have:

Experience building a DevSecOps practice from scratch.
Experience running or participating in a Security Champions programme.
Hands-on penetration testing experience.
Experience securing LLM-powered or AI products.
Experience with SOC 2 or ISO 27001 from an engineering perspective.
Knowledge of software supply chain security, including SBOMs, SLSA, image signing, or similar practices.

What we can offer you

A supportive and proactive work environment.
Competitive compensation: 4000-6000 EUR Gross per month
Fully remote and full-time collaboration.
Modern digital tools for seamless collaboration.
Tangible results measured by student success.

Originally posted on Himalayas

Job Description

Description

Our focus on data science, machine learning, and generative AI helps tech-forward companies level up their employees' skills and drive innovation.

What you will do

Own application and product security end to end, from design reviews and threat modelling to vulnerability remediation and follow-up.
Partner with product and platform teams to embed security into the development lifecycle rather than treat it as a final review step.
Build and improve security controls in CI/CD, including SAST, dependency, secrets, container, and IaC scanning.
Review application designs and code where security risk is meaningful, and turn recurring findings into secure defaults, shared libraries, lint rules, and CI gates.
Drive vulnerability management across application code and cloud posture, including triage, risk-based prioritisation, remediation timelines, and external pentest findings.
Strengthen security in multitenant B2B systems, including tenant isolation, authentication, authorization, RBAC / ABAC, and access controls.
Work on cloud and Kubernetes security across AWS environments, including IAM, secrets management, network boundaries, and workload hardening.
Help translate GDPR, SOC 2, and ISO 27001 requirements into practical engineering controls and system properties.
Develop and support a security champions programme to help engineering teams adopt secure practices in their day-to-day work.
Address security risks specific to AI and LLM-powered features, including prompt injection, data leakage, and untrusted model output.

Requirements

5+ years of engineering experience, including at least 2 years focused on Application Security or Product Security.
Strong software engineering background with the ability to read, review, and write production code; Python experience is highly preferred.
Deep practical knowledge of web application security, including OWASP Top 10, ASVS, authentication and session management, OAuth2 / OIDC / SAML, and authorization issues such as IDOR and broken access control.
Experience securing multitenant or B2B SaaS products, including tenant isolation, RBAC / ABAC, and access control models.
Hands-on experience embedding security into CI/CD, including SAST, SCA, secrets scanning, container scanning, and IaC scanning.
Strong experience with threat modelling, secure design reviews, and secure code reviews in collaboration with product and engineering teams.
Experience managing vulnerabilities based on risk, criticality, and exploitability, including remediation prioritisation and escalation when needed.
Working knowledge of AWS and Kubernetes security, including IAM, secrets management, network boundaries, and workload hardening.
Strong communication skills and the ability to explain security risks clearly to engineers, product managers, and auditors.
Fluent Russian and English at B2 level or above.

Nice to have:

Experience building a DevSecOps practice from scratch.
Experience running or participating in a Security Champions programme.
Hands-on penetration testing experience.
Experience securing LLM-powered or AI products.
Experience with SOC 2 or ISO 27001 from an engineering perspective.
Knowledge of software supply chain security, including SBOMs, SLSA, image signing, or similar practices.

What we can offer you

A supportive and proactive work environment.
Competitive compensation: 4000-6000 EUR Gross per month
Fully remote and full-time collaboration.
Modern digital tools for seamless collaboration.
Tangible results measured by student success.

Originally posted on Himalayas