Lead Analyst, Cybersecurity (Duluth, GA, US)

AGCO

United States
Remote
Full-time

Apply

Oct 2

View job

Principal AI Security Specialist - Federal

Zscaler

United States
Remote
Full-time

Apply

Oct 2

View job

Senior Incident Response Engineer

RELX

United States
Remote
Full-time

Apply

Oct 2

View job

Cybersecurity Data Engineer

9th Way Insignia

United States
Remote
Full-time

Apply

Oct 2

View job

Senior Security Engineer - SecOps

Mozilla

United Kingdom
Remote
Full-time

Apply

Oct 2

View job

IAM Platform Support Specialist - Spanish Bilingual

Simeio

United States
Remote
Full-time

Apply

Oct 2

View job

Engineering Manager - GRC Reporting

Workiva

United States
Remote
Full-time

Apply

Oct 2

View job

Application Security Engineer

TripleTen

Serbia
Remote
Full-time

Apply

Oct 2

View job

Manager, Compliance & Risk

TrueML

United States
Remote
Full-time

Apply

Oct 2

View job

Application Security Engineer

TripleTen

Cyprus
Remote
Full-time

Apply

Oct 2

View job

SPG - Threat Intelligence Analyst

Cognyte

United States
Remote
Full-time

Apply

Oct 2

View job

Cloud & Network Security Manager

iFood

Brazil
Remote
Full-time

Apply

Oct 2

View job

Senior AI Security Engineer

bunny.net

United States
Remote
Full-time

Apply

Oct 2

View job

Cyber Security Analyst

Rhymetec

United Kingdom
Remote
Full-time

Apply

Oct 2

View job

Senior Technical Consultant - Cloud Security

AHEAD

United States
Remote
Full-time

Apply

Oct 2

View job

Director of Cyber Security

RapidFort, Inc.

United States
Remote
Full-time

Apply

Oct 2

View job

Cyber Security Engineer | Remote - Contract

Xperteez Technology

Worldwide
Remote
Contract

Apply

Oct 2

View job

GRC Security Analyst

Clear Capital

United States
Remote
Full-time

Apply

Oct 2

View job

Security, Governance and POPIA Specialist (Associate)

Centrax Digital

South Africa
Remote
Contract

Apply

Oct 2

View job

GRC Lead

Voyager Technologies, Inc.

United States
Remote
Full-time

Apply

Oct 2

View job

Security Engineer

CACI International Inc

United States
Remote
Full-time

Apply

Oct 2

View job

Senior Offensive Security Engineer

ProCircular

United States
Remote
Full-time

Apply

Oct 2

View job

Cybersecurity - Intern

MasonBlue

United States
Remote
Internship

Apply

Oct 2

View job

Engineering Manager - Grafana Application Security | EMEA | (Remote, Ireland)

Grafana Labs

Ireland
Remote
Full-time

Apply

Oct 2

View job

Application Security Engineer

TripleTen

Lithuania
Remote
Full-time

Apply

Oct 2

View job

Senior Security Client Solution Architect - California

Myriad360

United States
Remote
Full-time

Apply

Oct 2

View job

Chief Information Security Officer (CISO) — Insurance & Investments

TheHiveCareers

Anguilla
Remote
Full-time

Apply

Oct 2

View job

Staff Security Engineer

Red Cup IT

United States
Remote
Full-time

Apply

Oct 2

View job

Senior Security Operations Engineer (Europe Remote)

Invicti

Romania
Remote
Full-time

Apply

Oct 2

View job

Senior Security Engineer - SecOps

Mozilla

Germany
Remote
Full-time

Apply

Oct 2

Senior Security Operations Engineer (Europe Remote)

Invicti

Senior Security Operations Engineer (Europe Remote)

RomaniaRemoteFull-time

Posted Oct 2

Apply

Job Description

Location: Open to candidates residing anywhere in Europe, time zones (CET ± 2 hours)

Who We Are:

Delivering the industry’s most accurate application security platform, Invicti Security has been transforming the way web applications are secured for nearly 20 years. Recognized as a leader in Application Security Testing and a DAST Innovator by Latio, Invicti enables organizations to continuously scan and secure their web apps and APIs with the rigor of runtime testing and the speed of constant innovation. Headquartered in Austin, Texas, Invicti serves more than 3,600 organizations worldwide. Invicti serves more than 3,600 organizations worldwide. To learn more, visitInvicti.com or follow us on LinkedIn.

Requirements

Who you Are:

You are a hands-on offensive security researcher who enjoys turning vulnerability and malware knowledge into detection content that ships. You take ownership of the security checks you build, write clean and accurate detection rules, and care deeply about quality and low false-positive rates. You have strong opinions that are loosely held, apply established research principles in your day-to-day work, and help ensure our security checks deliver solid results for our customer base.

What You'll Be Doing:

Build and maintain security checks and detection content that ship as part of the Invicti platform, with a focus on accuracy, coverage, and low false-positive rates.
Create new detection rules (primarily OpenGrep) to catch novel malware and vulnerability patterns and improve detection accuracy.
Research vulnerability classes, exploitation techniques, and emerging attack patterns, and translate them into production-ready detections.
Extend support for new programming languages across our analysis pipeline.
Triage packages from our analysis pipeline and validate findings.
Build attack chain templates that combine low-severity findings into higher-impact detection scenarios.
Contribute to evaluation harnesses and benchmarks that measure detection effectiveness — false-positive rates, coverage, and accuracy.
Build and maintain testing frameworks that validate detection quality, exploit reproducibility, and regression coverage.
Help maintain detection quality across the platform, including triaging difficult or ambiguous findings.
Apply established detection and exploitation principles, and help refine our internal standards and methodologies.
Explore and experiment with new tools and techniques to detect threats and malware at scale.
Stay current on AppSec, offensive security, AI security, LLM vulnerabilities, AI agent security, MCP security, and emerging attack techniques, and apply those insights to detection engineering.
Collaborate across engineering, product, AI/ML, and infrastructure teams to ship and operate detection content.
Work with cloud-native infrastructure and CI/CD pipelines to integrate detection, testing, and validation into the development lifecycle.

What You'll Need:

5+ years of offensive security or application security research experience (Bachelor's + 2 years, or equivalent).
Broad knowledge of programming languages — JavaScript is a must, Python is a huge plus.
Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomi
Working knowledge of detection writing for DAST scanners, fuzzers, or comparable systems — including detection logic, response interpretation, and false-positive management.
Hands-on web application pentesting experience covering the OWASP Top 10 and adjacent classes — authentication, authorization, business logic, modern API surfaces (REST, GraphQL).
Comfortable researching and tackling hard problems and algorithms (e.g., parsing with ASTs).
Experience building or maintaining testing frameworks, evaluation harnesses, or automated validation systems is a strong plus.
Familiarity with offensive tooling (Burp Suite, sqlmap, nmap, ffuf, custom payload generation) and HTTP/web protocol fundamentals.
Familiarity with cloud infrastructure, containerized environments, and modern CI/CD or DevOps pipelines is a plus.
Fluent in English, with the ability to convey technical details to both technical and non-technical audiences.
Ability to collaborate effectively across multi-disciplinary teams and know when to escalate issues.
A hands-on attitude and intellectual curiosity, with a willingness to dig into both classic AppSec problems and emerging areas including AI security, LLM vulnerabilities, agentic systems, and MCP ecosystems.
Bonus Points
OpenGrep (or Semgrep) experience.
Static analysis experience.
Experience building production-ready systems.
Exposure to LLMs and prompt engineering.
Public security research output (CVEs, advisories, talks, open-source tools) or an interest in technical writing.
YARA experience.

Benefits

Why Invicti?

Your Health & Wellness Matters:

Tailored health, pension, and statutory perks customized to your country of residence

Employee Assistance Program: Emotional Support Counseling services 24/7. Life Coaching, Dependent Care, Elder Care, Financial & Legal Support, Wellness Coaching, New Parent Support and more

We value Adult/ Life Balance:

Excellent working Options: Working remotely

Quarterly Thrive-Wellness Days: One extra vacation day per quarter where the entire company takes a break from normal, daily activities to refresh and rejuvenate

Volunteerism Time Off: 5 days of paid time off each year to participate in the volunteer activities of your choice

Paid Birthday Off: Take your birthday off to celebrate you!

We Value You:

Employee Recognition: Ongoing recognition & rewards . A Culture that emphasizes personal and professional growth

At Invicti, we believe our people are at the core of our success. Our Total Rewards approach is designed to attract, support, and grow exceptional talent by offering a balanced mix of competitive compensation, meaningful benefits, and opportunities for recognition and development. We take a global, flexible approach that aligns with our business goals and values while adapting to regional needs. Above all, we are committed to transparency and ensuring our employees understand how we invest in their success and well-being.

As we operate in a dynamic, fast-paced industry, this role evolves with the business. While core responsibilities are outlined above, duties may adapt over time to meet operational needs and support both team success and your professional growth

"At Invicti, we embrace diversity and individuality in all forms. Discrimination has no place here - regardless of race, religion, gender, age, ability, sexual orientation, or any other aspect that makes you unique. We're all about creating a space where everyone

Originally posted on Himalayas

Job Description

Location: Open to candidates residing anywhere in Europe, time zones (CET ± 2 hours)

Who We Are:

Requirements

Who you Are:

What You'll Be Doing:

Build and maintain security checks and detection content that ship as part of the Invicti platform, with a focus on accuracy, coverage, and low false-positive rates.
Create new detection rules (primarily OpenGrep) to catch novel malware and vulnerability patterns and improve detection accuracy.
Research vulnerability classes, exploitation techniques, and emerging attack patterns, and translate them into production-ready detections.
Extend support for new programming languages across our analysis pipeline.
Triage packages from our analysis pipeline and validate findings.
Build attack chain templates that combine low-severity findings into higher-impact detection scenarios.
Contribute to evaluation harnesses and benchmarks that measure detection effectiveness — false-positive rates, coverage, and accuracy.
Build and maintain testing frameworks that validate detection quality, exploit reproducibility, and regression coverage.
Help maintain detection quality across the platform, including triaging difficult or ambiguous findings.
Apply established detection and exploitation principles, and help refine our internal standards and methodologies.
Explore and experiment with new tools and techniques to detect threats and malware at scale.
Stay current on AppSec, offensive security, AI security, LLM vulnerabilities, AI agent security, MCP security, and emerging attack techniques, and apply those insights to detection engineering.
Collaborate across engineering, product, AI/ML, and infrastructure teams to ship and operate detection content.
Work with cloud-native infrastructure and CI/CD pipelines to integrate detection, testing, and validation into the development lifecycle.

What You'll Need:

5+ years of offensive security or application security research experience (Bachelor's + 2 years, or equivalent).
Broad knowledge of programming languages — JavaScript is a must, Python is a huge plus.
Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomi
Working knowledge of detection writing for DAST scanners, fuzzers, or comparable systems — including detection logic, response interpretation, and false-positive management.
Hands-on web application pentesting experience covering the OWASP Top 10 and adjacent classes — authentication, authorization, business logic, modern API surfaces (REST, GraphQL).
Comfortable researching and tackling hard problems and algorithms (e.g., parsing with ASTs).
Experience building or maintaining testing frameworks, evaluation harnesses, or automated validation systems is a strong plus.
Familiarity with offensive tooling (Burp Suite, sqlmap, nmap, ffuf, custom payload generation) and HTTP/web protocol fundamentals.
Familiarity with cloud infrastructure, containerized environments, and modern CI/CD or DevOps pipelines is a plus.
Fluent in English, with the ability to convey technical details to both technical and non-technical audiences.
Ability to collaborate effectively across multi-disciplinary teams and know when to escalate issues.
A hands-on attitude and intellectual curiosity, with a willingness to dig into both classic AppSec problems and emerging areas including AI security, LLM vulnerabilities, agentic systems, and MCP ecosystems.
Bonus Points
OpenGrep (or Semgrep) experience.
Static analysis experience.
Experience building production-ready systems.
Exposure to LLMs and prompt engineering.
Public security research output (CVEs, advisories, talks, open-source tools) or an interest in technical writing.
YARA experience.

Benefits

Why Invicti?

Your Health & Wellness Matters:

Tailored health, pension, and statutory perks customized to your country of residence

Employee Assistance Program: Emotional Support Counseling services 24/7. Life Coaching, Dependent Care, Elder Care, Financial & Legal Support, Wellness Coaching, New Parent Support and more

We value Adult/ Life Balance:

Excellent working Options: Working remotely

Quarterly Thrive-Wellness Days: One extra vacation day per quarter where the entire company takes a break from normal, daily activities to refresh and rejuvenate

Volunteerism Time Off: 5 days of paid time off each year to participate in the volunteer activities of your choice

Paid Birthday Off: Take your birthday off to celebrate you!

We Value You:

Employee Recognition: Ongoing recognition & rewards . A Culture that emphasizes personal and professional growth

Originally posted on Himalayas

Job Description

Location: Open to candidates residing anywhere in Europe, time zones (CET ± 2 hours)

Who We Are:

Requirements

Who you Are:

What You'll Be Doing:

Build and maintain security checks and detection content that ship as part of the Invicti platform, with a focus on accuracy, coverage, and low false-positive rates.
Create new detection rules (primarily OpenGrep) to catch novel malware and vulnerability patterns and improve detection accuracy.
Research vulnerability classes, exploitation techniques, and emerging attack patterns, and translate them into production-ready detections.
Extend support for new programming languages across our analysis pipeline.
Triage packages from our analysis pipeline and validate findings.
Build attack chain templates that combine low-severity findings into higher-impact detection scenarios.
Contribute to evaluation harnesses and benchmarks that measure detection effectiveness — false-positive rates, coverage, and accuracy.
Build and maintain testing frameworks that validate detection quality, exploit reproducibility, and regression coverage.
Help maintain detection quality across the platform, including triaging difficult or ambiguous findings.
Apply established detection and exploitation principles, and help refine our internal standards and methodologies.
Explore and experiment with new tools and techniques to detect threats and malware at scale.
Stay current on AppSec, offensive security, AI security, LLM vulnerabilities, AI agent security, MCP security, and emerging attack techniques, and apply those insights to detection engineering.
Collaborate across engineering, product, AI/ML, and infrastructure teams to ship and operate detection content.
Work with cloud-native infrastructure and CI/CD pipelines to integrate detection, testing, and validation into the development lifecycle.

What You'll Need:

5+ years of offensive security or application security research experience (Bachelor's + 2 years, or equivalent).
Broad knowledge of programming languages — JavaScript is a must, Python is a huge plus.
Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomi
Working knowledge of detection writing for DAST scanners, fuzzers, or comparable systems — including detection logic, response interpretation, and false-positive management.
Hands-on web application pentesting experience covering the OWASP Top 10 and adjacent classes — authentication, authorization, business logic, modern API surfaces (REST, GraphQL).
Comfortable researching and tackling hard problems and algorithms (e.g., parsing with ASTs).
Experience building or maintaining testing frameworks, evaluation harnesses, or automated validation systems is a strong plus.
Familiarity with offensive tooling (Burp Suite, sqlmap, nmap, ffuf, custom payload generation) and HTTP/web protocol fundamentals.
Familiarity with cloud infrastructure, containerized environments, and modern CI/CD or DevOps pipelines is a plus.
Fluent in English, with the ability to convey technical details to both technical and non-technical audiences.
Ability to collaborate effectively across multi-disciplinary teams and know when to escalate issues.
A hands-on attitude and intellectual curiosity, with a willingness to dig into both classic AppSec problems and emerging areas including AI security, LLM vulnerabilities, agentic systems, and MCP ecosystems.
Bonus Points
OpenGrep (or Semgrep) experience.
Static analysis experience.
Experience building production-ready systems.
Exposure to LLMs and prompt engineering.
Public security research output (CVEs, advisories, talks, open-source tools) or an interest in technical writing.
YARA experience.

Benefits

Why Invicti?

Your Health & Wellness Matters:

Tailored health, pension, and statutory perks customized to your country of residence

Employee Assistance Program: Emotional Support Counseling services 24/7. Life Coaching, Dependent Care, Elder Care, Financial & Legal Support, Wellness Coaching, New Parent Support and more

We value Adult/ Life Balance:

Excellent working Options: Working remotely

Quarterly Thrive-Wellness Days: One extra vacation day per quarter where the entire company takes a break from normal, daily activities to refresh and rejuvenate

Volunteerism Time Off: 5 days of paid time off each year to participate in the volunteer activities of your choice

Paid Birthday Off: Take your birthday off to celebrate you!

We Value You:

Employee Recognition: Ongoing recognition & rewards . A Culture that emphasizes personal and professional growth

Originally posted on Himalayas

Job Description

Location: Open to candidates residing anywhere in Europe, time zones (CET ± 2 hours)

Who We Are:

Requirements

Who you Are:

What You'll Be Doing:

Build and maintain security checks and detection content that ship as part of the Invicti platform, with a focus on accuracy, coverage, and low false-positive rates.
Create new detection rules (primarily OpenGrep) to catch novel malware and vulnerability patterns and improve detection accuracy.
Research vulnerability classes, exploitation techniques, and emerging attack patterns, and translate them into production-ready detections.
Extend support for new programming languages across our analysis pipeline.
Triage packages from our analysis pipeline and validate findings.
Build attack chain templates that combine low-severity findings into higher-impact detection scenarios.
Contribute to evaluation harnesses and benchmarks that measure detection effectiveness — false-positive rates, coverage, and accuracy.
Build and maintain testing frameworks that validate detection quality, exploit reproducibility, and regression coverage.
Help maintain detection quality across the platform, including triaging difficult or ambiguous findings.
Apply established detection and exploitation principles, and help refine our internal standards and methodologies.
Explore and experiment with new tools and techniques to detect threats and malware at scale.
Stay current on AppSec, offensive security, AI security, LLM vulnerabilities, AI agent security, MCP security, and emerging attack techniques, and apply those insights to detection engineering.
Collaborate across engineering, product, AI/ML, and infrastructure teams to ship and operate detection content.
Work with cloud-native infrastructure and CI/CD pipelines to integrate detection, testing, and validation into the development lifecycle.

What You'll Need:

5+ years of offensive security or application security research experience (Bachelor's + 2 years, or equivalent).
Broad knowledge of programming languages — JavaScript is a must, Python is a huge plus.
Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomi
Working knowledge of detection writing for DAST scanners, fuzzers, or comparable systems — including detection logic, response interpretation, and false-positive management.
Hands-on web application pentesting experience covering the OWASP Top 10 and adjacent classes — authentication, authorization, business logic, modern API surfaces (REST, GraphQL).
Comfortable researching and tackling hard problems and algorithms (e.g., parsing with ASTs).
Experience building or maintaining testing frameworks, evaluation harnesses, or automated validation systems is a strong plus.
Familiarity with offensive tooling (Burp Suite, sqlmap, nmap, ffuf, custom payload generation) and HTTP/web protocol fundamentals.
Familiarity with cloud infrastructure, containerized environments, and modern CI/CD or DevOps pipelines is a plus.
Fluent in English, with the ability to convey technical details to both technical and non-technical audiences.
Ability to collaborate effectively across multi-disciplinary teams and know when to escalate issues.
A hands-on attitude and intellectual curiosity, with a willingness to dig into both classic AppSec problems and emerging areas including AI security, LLM vulnerabilities, agentic systems, and MCP ecosystems.
Bonus Points
OpenGrep (or Semgrep) experience.
Static analysis experience.
Experience building production-ready systems.
Exposure to LLMs and prompt engineering.
Public security research output (CVEs, advisories, talks, open-source tools) or an interest in technical writing.
YARA experience.

Benefits

Why Invicti?

Your Health & Wellness Matters:

Tailored health, pension, and statutory perks customized to your country of residence

Employee Assistance Program: Emotional Support Counseling services 24/7. Life Coaching, Dependent Care, Elder Care, Financial & Legal Support, Wellness Coaching, New Parent Support and more

We value Adult/ Life Balance:

Excellent working Options: Working remotely

Quarterly Thrive-Wellness Days: One extra vacation day per quarter where the entire company takes a break from normal, daily activities to refresh and rejuvenate

Volunteerism Time Off: 5 days of paid time off each year to participate in the volunteer activities of your choice

Paid Birthday Off: Take your birthday off to celebrate you!

We Value You:

Employee Recognition: Ongoing recognition & rewards . A Culture that emphasizes personal and professional growth

Originally posted on Himalayas