Cyber Security Lead

Anaconda is built to advance AI with open source at scale, giving builders and organizations the confidence to increase productivity, and save time, spend and risk associated with open source. 95% of the Fortune 500 including Panasonic, AmTrust, Booz Allen Hamilton and over 50 million users rely on the value The Anaconda AI Platform delivers through a centralized approach to sourcing, securing, building, and deploying AI. With 21 billion downloads and growing, Anaconda has established itself as the gold standard for Python, data science, and AI and the enterprise-ready solution of choice for AI innovation. Anaconda is backed by world-class investors including Insight Partners. Learn more at .

Summary:

Anaconda's Security team protects and enables our platform, serving 50 million users and supporting our transition into an AI-native development platform. As a Security Engineer, you'll build secure-by-default systems through hands-on engineering—designing controls that reduce systemic risk while helping engineering teams ship faster. Your work spans firewalls, IAM, endpoint detection, secrets management, and CI/CD pipeline security across hybrid and multi-cloud environments.

What You'll Do:

Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments
Build security automation and tooling using Python, Go, or Bash, managing infrastructure as code with Terraform to scale security operations
Conduct vulnerability and threat management by triaging scanner output, investigating root causes, and driving risk reduction across the platform
Perform code reviews and architecture assessments to identify security risks early in the development lifecycle
Embed security into CI/CD pipelines through static analysis, dynamic testing, and dependency scanning
Respond to security incidents as an escalation point, perform forensic analysis, and maintain tested runbooks for critical risks and zero-day events
Partner with Legal, IT, Platform Engineering, and Developer Experience teams to balance security rigor with developer velocity
Develop secure-by-default templates, libraries, and tooling that add velocity rather than friction

Your Impact Will Be Measured By:

Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments
Risk reduction velocity measured by mean time to remediate high-severity vulnerabilities and percentage of defects caught in development versus production
Operational automation measured by reduction in false positive rates and percentage of security baselines managed through infrastructure as code
Cross-functional partnership measured by adoption of secure-by-default templates and feedback from engineering teams
Incident preparedness measured by runbook coverage and response effectiveness during critical risks or zero-day events

What You Need:

6+ years hands-on experience in systems administration, DevOps, network engineering, or software development prior to or alongside security work
Proficiency with cloud platforms such as AWS, Azure, or GCP
Experience managing infrastructure as code using Terraform
Experience writing scripts and automation in Python, Go, or Bash
Working knowledge of IAM, PKI, cryptography basics, network protocol analysis, and threat modeling frameworks
Experience working in containerized environments with Docker or Kubernetes
Ability to communicate technical security risks to non-security audiences and design workflows that respect developer experience

What Will Make You Stand Out:

Offensive security experience through penetration testing, red teaming, bug bounty programs, or reverse engineering
Experience with advanced container security tools such as Falco or eBPF-based monitoring
Implemented zero trust architecture and network isolation in production environments
Production engineering, SRE, or software engineering background with experience writing custom static or dynamic analysis rules, or managing SBOM and supply chain security
Specialized expertise in HSMs, hardware tokens (YubiKeys, FIDO2), applied cryptography, or identity provider integrations
Contributed to security culture through training programs, threat modeling workshops, CTF events, conference talks, or open-source security projects
Thrived in fast-paced startup environments balancing speed with pragmatic risk managementExperience working in a fast-paced startup environment
Experience working in an open-source, AI, or data science-oriented company

Why You'll Like Working Here:

You'll thrive in a high-performance environment where results are recognized and rewarded
Your work directly contributes to shaping the future of data science, machine learning, and AI in the enterprise.
You'll work alongside a collaborative team that values diverse, thoughtful discussion, clarity and candor.
You'll be supported by a culture that puts employees first - with flexible hours, a fully remote setup, and a genuine commitment to your wellbeing and growth.

We accept applications on an ongoing basis.

In addition to base salary, we offer a comprehensive benefits package that includes:

Office setup reimbursement
Monthly productivity stipend
Learning and Development reimbursement
Open vacation policy*
Public holidays
Snake Days-quarterly extra day off company wide

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Anaconda, Inc. (“We”, “Us”) are committed to protecting and respecting your privacy. This Privacy Notice sets out the basis on which the personal data collected from you, or that you provide to Us, will be processed by Us in connection with Our recruitment processes.

By clicking “Submit Application”, you acknowledge you have read our Privacy Policy and that Anaconda can retain your application data for up to 1-year, unless otherwise stated. For the purpose of the General Data Protection Regulation (“GDPR”) ”) and the version of the GDPR retained in UK law (the “UK GDPR”) the Data Controller is Vanessa Macilwaine.

Anaconda is an EEO/AA employer M/F/V/D.

Originally posted on Himalayas

Job Description

About Anaconda

Be at the center of AI

Summary:

What You'll Do:

Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments
Build security automation and tooling using Python, Go, or Bash, managing infrastructure as code with Terraform to scale security operations
Conduct vulnerability and threat management by triaging scanner output, investigating root causes, and driving risk reduction across the platform
Perform code reviews and architecture assessments to identify security risks early in the development lifecycle
Embed security into CI/CD pipelines through static analysis, dynamic testing, and dependency scanning
Respond to security incidents as an escalation point, perform forensic analysis, and maintain tested runbooks for critical risks and zero-day events
Partner with Legal, IT, Platform Engineering, and Developer Experience teams to balance security rigor with developer velocity
Develop secure-by-default templates, libraries, and tooling that add velocity rather than friction

Your Impact Will Be Measured By:

Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments
Risk reduction velocity measured by mean time to remediate high-severity vulnerabilities and percentage of defects caught in development versus production
Operational automation measured by reduction in false positive rates and percentage of security baselines managed through infrastructure as code
Cross-functional partnership measured by adoption of secure-by-default templates and feedback from engineering teams
Incident preparedness measured by runbook coverage and response effectiveness during critical risks or zero-day events

What You Need:

6+ years hands-on experience in systems administration, DevOps, network engineering, or software development prior to or alongside security work
Proficiency with cloud platforms such as AWS, Azure, or GCP
Experience managing infrastructure as code using Terraform
Experience writing scripts and automation in Python, Go, or Bash
Working knowledge of IAM, PKI, cryptography basics, network protocol analysis, and threat modeling frameworks
Experience working in containerized environments with Docker or Kubernetes
Ability to communicate technical security risks to non-security audiences and design workflows that respect developer experience

What Will Make You Stand Out:

Offensive security experience through penetration testing, red teaming, bug bounty programs, or reverse engineering
Experience with advanced container security tools such as Falco or eBPF-based monitoring
Implemented zero trust architecture and network isolation in production environments
Production engineering, SRE, or software engineering background with experience writing custom static or dynamic analysis rules, or managing SBOM and supply chain security
Specialized expertise in HSMs, hardware tokens (YubiKeys, FIDO2), applied cryptography, or identity provider integrations
Contributed to security culture through training programs, threat modeling workshops, CTF events, conference talks, or open-source security projects
Thrived in fast-paced startup environments balancing speed with pragmatic risk managementExperience working in a fast-paced startup environment
Experience working in an open-source, AI, or data science-oriented company

Why You'll Like Working Here:

You'll thrive in a high-performance environment where results are recognized and rewarded
Your work directly contributes to shaping the future of data science, machine learning, and AI in the enterprise.
You'll work alongside a collaborative team that values diverse, thoughtful discussion, clarity and candor.
You'll be supported by a culture that puts employees first - with flexible hours, a fully remote setup, and a genuine commitment to your wellbeing and growth.

We accept applications on an ongoing basis.

In addition to base salary, we offer a comprehensive benefits package that includes:

Office setup reimbursement
Monthly productivity stipend
Learning and Development reimbursement
Open vacation policy*
Public holidays
Snake Days-quarterly extra day off company wide

Anaconda is an EEO/AA employer M/F/V/D.

Originally posted on Himalayas

Job Description

About Anaconda

Be at the center of AI

Summary:

What You'll Do:

Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments
Build security automation and tooling using Python, Go, or Bash, managing infrastructure as code with Terraform to scale security operations
Conduct vulnerability and threat management by triaging scanner output, investigating root causes, and driving risk reduction across the platform
Perform code reviews and architecture assessments to identify security risks early in the development lifecycle
Embed security into CI/CD pipelines through static analysis, dynamic testing, and dependency scanning
Respond to security incidents as an escalation point, perform forensic analysis, and maintain tested runbooks for critical risks and zero-day events
Partner with Legal, IT, Platform Engineering, and Developer Experience teams to balance security rigor with developer velocity
Develop secure-by-default templates, libraries, and tooling that add velocity rather than friction

Your Impact Will Be Measured By:

Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments
Risk reduction velocity measured by mean time to remediate high-severity vulnerabilities and percentage of defects caught in development versus production
Operational automation measured by reduction in false positive rates and percentage of security baselines managed through infrastructure as code
Cross-functional partnership measured by adoption of secure-by-default templates and feedback from engineering teams
Incident preparedness measured by runbook coverage and response effectiveness during critical risks or zero-day events

What You Need:

6+ years hands-on experience in systems administration, DevOps, network engineering, or software development prior to or alongside security work
Proficiency with cloud platforms such as AWS, Azure, or GCP
Experience managing infrastructure as code using Terraform
Experience writing scripts and automation in Python, Go, or Bash
Working knowledge of IAM, PKI, cryptography basics, network protocol analysis, and threat modeling frameworks
Experience working in containerized environments with Docker or Kubernetes
Ability to communicate technical security risks to non-security audiences and design workflows that respect developer experience

What Will Make You Stand Out:

Offensive security experience through penetration testing, red teaming, bug bounty programs, or reverse engineering
Experience with advanced container security tools such as Falco or eBPF-based monitoring
Implemented zero trust architecture and network isolation in production environments
Production engineering, SRE, or software engineering background with experience writing custom static or dynamic analysis rules, or managing SBOM and supply chain security
Specialized expertise in HSMs, hardware tokens (YubiKeys, FIDO2), applied cryptography, or identity provider integrations
Contributed to security culture through training programs, threat modeling workshops, CTF events, conference talks, or open-source security projects
Thrived in fast-paced startup environments balancing speed with pragmatic risk managementExperience working in a fast-paced startup environment
Experience working in an open-source, AI, or data science-oriented company

Why You'll Like Working Here:

You'll thrive in a high-performance environment where results are recognized and rewarded
Your work directly contributes to shaping the future of data science, machine learning, and AI in the enterprise.
You'll work alongside a collaborative team that values diverse, thoughtful discussion, clarity and candor.
You'll be supported by a culture that puts employees first - with flexible hours, a fully remote setup, and a genuine commitment to your wellbeing and growth.

We accept applications on an ongoing basis.

In addition to base salary, we offer a comprehensive benefits package that includes:

Office setup reimbursement
Monthly productivity stipend
Learning and Development reimbursement
Open vacation policy*
Public holidays
Snake Days-quarterly extra day off company wide

Anaconda is an EEO/AA employer M/F/V/D.

Originally posted on Himalayas

Job Description

About Anaconda

Be at the center of AI

Summary:

What You'll Do:

Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments
Build security automation and tooling using Python, Go, or Bash, managing infrastructure as code with Terraform to scale security operations
Conduct vulnerability and threat management by triaging scanner output, investigating root causes, and driving risk reduction across the platform
Perform code reviews and architecture assessments to identify security risks early in the development lifecycle
Embed security into CI/CD pipelines through static analysis, dynamic testing, and dependency scanning
Respond to security incidents as an escalation point, perform forensic analysis, and maintain tested runbooks for critical risks and zero-day events
Partner with Legal, IT, Platform Engineering, and Developer Experience teams to balance security rigor with developer velocity
Develop secure-by-default templates, libraries, and tooling that add velocity rather than friction

Your Impact Will Be Measured By:

Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments
Risk reduction velocity measured by mean time to remediate high-severity vulnerabilities and percentage of defects caught in development versus production
Operational automation measured by reduction in false positive rates and percentage of security baselines managed through infrastructure as code
Cross-functional partnership measured by adoption of secure-by-default templates and feedback from engineering teams
Incident preparedness measured by runbook coverage and response effectiveness during critical risks or zero-day events

What You Need:

6+ years hands-on experience in systems administration, DevOps, network engineering, or software development prior to or alongside security work
Proficiency with cloud platforms such as AWS, Azure, or GCP
Experience managing infrastructure as code using Terraform
Experience writing scripts and automation in Python, Go, or Bash
Working knowledge of IAM, PKI, cryptography basics, network protocol analysis, and threat modeling frameworks
Experience working in containerized environments with Docker or Kubernetes
Ability to communicate technical security risks to non-security audiences and design workflows that respect developer experience

What Will Make You Stand Out:

Offensive security experience through penetration testing, red teaming, bug bounty programs, or reverse engineering
Experience with advanced container security tools such as Falco or eBPF-based monitoring
Implemented zero trust architecture and network isolation in production environments
Production engineering, SRE, or software engineering background with experience writing custom static or dynamic analysis rules, or managing SBOM and supply chain security
Specialized expertise in HSMs, hardware tokens (YubiKeys, FIDO2), applied cryptography, or identity provider integrations
Contributed to security culture through training programs, threat modeling workshops, CTF events, conference talks, or open-source security projects
Thrived in fast-paced startup environments balancing speed with pragmatic risk managementExperience working in a fast-paced startup environment
Experience working in an open-source, AI, or data science-oriented company

Why You'll Like Working Here:

You'll thrive in a high-performance environment where results are recognized and rewarded
Your work directly contributes to shaping the future of data science, machine learning, and AI in the enterprise.
You'll work alongside a collaborative team that values diverse, thoughtful discussion, clarity and candor.
You'll be supported by a culture that puts employees first - with flexible hours, a fully remote setup, and a genuine commitment to your wellbeing and growth.

We accept applications on an ongoing basis.

In addition to base salary, we offer a comprehensive benefits package that includes:

Office setup reimbursement
Monthly productivity stipend
Learning and Development reimbursement
Open vacation policy*
Public holidays
Snake Days-quarterly extra day off company wide

Anaconda is an EEO/AA employer M/F/V/D.

Originally posted on Himalayas