Writing.io Jobs

Description

Why work for DreamHost?

We help people own their digital presence. It’s not just wishful thinking. It’s our noble cause — an idea that drives everything we do.

When you put your dreams online—your words, your photos, your creations—you shouldn’t have to worry about your service provider mining that data for marketing purposes. Those are your dreams — not ours! DreamHost’s open platform gives you the power to share your data and the freedom to control how it’s used.

Working for DreamHost you can be a steward of your own career. We invest in our people, we promote from within the organization when possible and we offer extensive training to aid in your success. In this role, we offer competitive salary, health, vision, and dental insurance, as well as a company-issued laptop, 401k, opportunities for growth, and much much more! We are proud to be a US employer with a fantastic culture and the ability to offer so much to our employees.

Benefits Offered

• Full health/vision/dental for the entire family at zero cost to team member

• 3% Safe Harbor contributed to 401(k) plus up to 1% employer match

• Opportunities for profit sharing and bonuses

• Generous time-off (starting at 15 vacation days)

• 11 Paid holidays (Technical Support and Technical Operations use a floating holiday policy)

• Paid sick leave (80 hours accrued)

• Tuition reimbursement (50⁄50 up to a specific amount)

• Pet Insurance

• Thrive Pass wellness allowance of $30 per month

• Udemy online learning courses

• Disability Insurance

• Generous maternity/paternity leave

• Discounted personal travel through corporate booking program Egencia

• Laid-back atmosphere

• Fun monthly company events

• Free web hosting

Overview

The Security Engineer II is responsible for protecting DreamHost, our infrastructure, and our customers in a large, multi-tenant Linux hosting environment where untrusted code runs on our machines by design. This is a hands-on engineering role. You will investigate live compromises, build the tooling and detections that find the next one, review the security of our own applications and infrastructure, and drive down long-standing risk across a fleet spanning shared hosting, VPS, managed WordPress, dedicated servers, cloud, and email.

You will work on a small security team where everyone owns real workstreams end to end, partners directly with Systems, Development, Abuse, and Support, and is expected to exercise judgment without waiting for permission.

What you’ll work on

• Incident response across shared, virtualized, and dedicated Linux hosts — compromise investigation, blast-radius scoping, containment, evidence preservation, and write-ups.

• Detection engineering: malware and webshell signatures, log-based detections, and reducing the false positives that create alert fatigue at fleet scale.

• Application security review of our in-house control plane, customer panel, and internal tooling, plus the third-party and open-source code we depend on.

• Secrets management modernization such as moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets from code, logs, and CI.

• Identity and access lifecycle: directory and SSO migration, privileged access review, and durable offboarding.

• Vulnerability management and patch velocity across a large, heterogeneous fleet, including end-of-life OS and runtime remediation.

• Automation. Anything done manually more than twice is a candidate for tooling, and you’ll build it.

• Security review and governance of AI and agent tooling as it’s adopted internally — data exposure, permission scope, agent identity, and abuse paths. You’ll also be using these tools heavily yourself; the team runs on them.

Responsibilities

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.

• Lead investigation and resolution of complex security incidents, coordinating across teams and communicating status clearly while facts are still incomplete.

• Design and implement safeguards protecting customer sites, accounts, and infrastructure from active and evolving threats.

• Conduct vulnerability assessments, security reviews, and risk analysis, with remediation guidance engineers can act on.

• Build automation and tooling that improves detection, monitoring, response, and operational safety.

• Partner with Systems, Development, Abuse, and Support to get security controls implemented rather than merely recommended.

• Mentor less experienced team members and contribute to the team’s shared knowledge and runbooks.

• Contribute to security policy, standards, and process, and support compliance efforts without mistaking compliance for security.

Requirements

• 3–6 years in security engineering, incident response, application security, offensive security, or systems administration, with demonstrated ability to resolve complex security problems independently.

• Depth in at least one of: application security, incident response and detection engineering, or offensive security and penetration testing plus working competence in the other two.

• Strong hands-on Linux (Debian/Ubuntu preferred), including low-level concepts: processes, namespaces, capabilities, filesystems, kernels, and how things actually break.

• Experience operating long-lived production systems that can’t simply be rebuilt including repairing hosts in place, under load, with real users on them.

• Experience in multi-tenant or customer-facing environments where users are untrusted.

• Scripting and automation you’ve shipped and operated in production. Python, Go, Bash, Perl, or similar. We care that you’ve built and maintained real tooling, not which language.

• Log analysis and investigation at scale, and comfort with intrusion detection and web application firewalls (mod_security or similar).

• Working knowledge of cloud platform security (AWS, GCP, Azure, or OpenStack) including IAM, network controls, and workload isolation.

• Familiarity with secrets management and CI/CD security (Vault or equivalent, pipeline hardening, dependency and supply-chain risk).

• Version control and infrastructure-as-code fluency (Git, Ansible or similar).

• Practical, current fluency with AI tooling in your own work. You use it daily, you know where it fails, and you can say what you don’t let it do. We are not looking for enthusiasm or for resistance, but for someone who has integrated these tools into real engineering work and formed opinions from experience.

• Clear written and verbal communication, including translating technical risk for non-technical stakeholders.

• A strong sense of ethics, healthy skepticism, and the patience to stay useful under pressure.

Nice to have

• Web hosting or WordPress-at-scale experience, as a provider or a customer.

• Container and orchestration security (Podman, Docker, Kubernetes) including escape and isolation failure modes.

• Malware analysis, YARA rule authorship, or reverse engineering.

• Detection-as-code or SIEM engineering experience.

• Hands-on experience securing AI/LLM systems, agent frameworks, or MCP tooling. Prompt injection, tool-permission scoping, or data-boundary work.

• Familiarity with PCI DSS, SOC 2, or ISO 27001 — as context, not as a career.

• Open source contributions.

Compensation

• $125,000-$145,000 / yearly

**DreamHost provides equal employment opportunities to all team members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.**

Company Description

Evolution ir daudznacionāls uzņēmums tiešsaistes spēļu industrijas priekšgalā. Mums ir plaša pieredze pirmajā vietā un vienmēr meklējam lieliskus cilvēkus, kas palīdzētu mums izveidot nākamo lielo produktu hitu. Mūsu komanda, kurā ir vairāk nekā 1000 inženieru, darbojas no 8 inženiertehniskajiem centriem, kas darbojas 24/7/365, lai apkalpotu lietotājus visā pasaulē. Tas tiek palaists, izmantojot modernu programmatūras steku, kas atbalsta vairāk nekā 250 pilnīgi automatizētus izlaidumus mēnesī mūsu galvenajai tiešraides videi. Mēs ticam iekšējai kompetencei un veikliem darba procesiem, lai mēs varētu īstenot savu inženierijas misiju: nevainojama spēlētāja pieredze.

---———————————————————————–

Evolution is a multinational business at the forefront of the online gaming industry. We have an extensive track record of number 1s and are always looking for great people to help us create the next big product hit. Our team of 1,000+ engineers operates out of 8 engineering hubs running code 24/7/365 to serve users around the world. This is run through a modern software stack supporting over 250 fully automated releases per month to our main live environment. We believe in building in-house competence and agile work processes so that we can deliver on our Engineering mission: A flawless player experience.

Job Description

At Evolution, you’ll work with IT, Legal and business colleagues to assess risks, support audits and help build security and privacy controls into everyday processes.

Joining our Information Security team and reporting to the GRC Manager, you’ll contribute across governance, risk and compliance while developing your expertise in data privacy. This role offers room to grow, whether your experience is mainly in GRC or combines privacy work with a foundation in information security.

What you will do

• Support our Information Security Management System (ISMS), including ISO 27001 audits and certification activities.
• Coordinate risk assessments, vulnerability scanning and penetration testing with relevant teams, and track remediation actions through to completion.
• Support Data Protection Impact Assessments (DPIAs), privacy risk assessments, and the maintenance of records of processing activities (RoPA).
• Help prepare for external audits, including ISAE 3402/SOC 1 and IT financial audits, by coordinating evidence and following up on findings.
• Maintain and improve security policies, privacy standards, procedures and supporting documentation.
• Work with technical and business stakeholders to identify risks, explain requirements and agree on practical security and privacy controls.

What we are looking for

• Practical experience in GRC, information security, audit, risk management or data privacy, ideally 2–5 years. We also welcome candidates earlier in their careers who bring a solid foundation and motivation to develop.
• A working understanding of ISO 27001, ISMS principles and how organizations assess risks and monitor controls.
• Experience supporting audits, risk assessments or compliance activities.
• An understanding of data protection principles and an interest in developing your privacy expertise.
• Strong organizational skills, attention to detail and the ability to follow up on actions across several teams.
• Clear spoken and written English, with confidence communicating with both technical and business colleagues.
• A collaborative, practical approach: you ask questions, understand business needs and help stakeholders find solutions that meet security and privacy requirements.

It would be a plus if you have

• Hands-on GDPR experience, including DPIAs, privacy audits, RoPA or personal data incident assessments.
• An ISO 27001 Auditor or Implementer certification.
• Other relevant certifications, such as CIPP/E, CIPM, CRISC, CISA or Security+.

We offer

• Gross monthly salary from 3,200 EUR to 4,200 EUR, depending on your experience and qualifications.
• An environment that encourages new ideas and practical improvements, supported by the stability and resources of an established company.
• The opportunity to work with international colleagues across Information Security, IT, Legal and business teams in a successful, publicly traded company.
• Opportunities to develop your expertise across GRC and data privacy, with potential involvement in AI governance and compliance projects.
• A hybrid working model, combining collaboration in our Riga office with remote work.
• Health insurance, a contemporary office environment, development opportunities, hackathons and other benefits and perks.

---————————————————————————————————————-

Darba apraksts

Evolution komandā Tu sadarbosies ar IT speciālistiem, juridisko un biznesa struktūrvienību kolēģiem, lai izvērtētu riskus, atbalstītu auditu norisi un palīdzētu ieviest drošības un privātuma aizsardzības pasākumus ikdienas procesos.

Pievienojoties Informācijas drošības komandai, Tu strādāsi GRC vadītāja pakļautībā un iesaistīsies pārvaldības, risku vadības un atbilstības (GRC) procesos. Šajā amatā varēsi pilnveidot savas prasmes neatkarīgi no tā, vai Tava līdzšinējā pieredze galvenokārt saistīta ar GRC vai ar personas datu aizsardzību apvienojumā ar zināšanām informācijas drošībā.

Tavi pienākumi

• Palīdzēt uzturēt uzņēmuma informācijas drošības pārvaldības sistēmu (ISMS), tostarp piedalīties ISO 27001 auditos un sertifikācijas procesā.
• Sadarbībā ar atbildīgajām komandām koordinēt risku novērtēšanu, ievainojamību skenēšanu un ielaušanās testus, kā arī sekot trūkumu novēršanas pasākumu izpildei.
• Piedalīties novērtējumos par ietekmi uz datu aizsardzību (DPIA), palīdzēt analizēt privātuma riskus un uzturēt personas datu apstrādes darbību reģistru (RoPA).
• Palīdzēt sagatavoties ārējām pārbaudēm, tostarp ISAE 3402/SOC 1 un ar finanšu revīzijām saistītiem IT auditiem, koordinējot nepieciešamo pierādījumu apkopošanu un sekojot konstatēto nepilnību novēršanai.
• Uzturēt un pilnveidot informācijas drošības politikas, privātuma standartus, procedūras un saistīto dokumentāciju.
• Kopā ar tehnisko komandu un biznesa struktūrvienību pārstāvjiem identificēt riskus, skaidrot prasības un vienoties par praktiski īstenojamiem kontroles pasākumiem.

Ko mēs sagaidām

• Praktisku pieredzi GRC, informācijas drošības, audita, risku vadības vai personas datu aizsardzības jomā (vēlams 2–5 gadus). Aicinām pieteikties arī kandidātus karjeras sākumposmā ar labām pamatzināšanām un motivāciju profesionāli attīstīties.
• Izpratni par ISO 27001 prasībām, ISMS darbības principiem, risku novērtēšanu un kontroles pasākumu efektivitātes uzraudzību.
• Pieredzi auditu atbalstīšanā, risku izvērtēšanā vai atbilstības nodrošināšanā.
• Zināšanas par personas datu aizsardzības principiem un vēlmi padziļināt kompetenci privātuma jautājumos.
• Labas organizatoriskās prasmes, precizitāti un spēju sekot uzdevumu izpildei, sadarbojoties ar vairākām komandām.
• Labas angļu valodas zināšanas mutvārdos un rakstveidā, kā arī prasmi pārliecinoši sazināties ar tehnisko komandu un biznesa struktūrvienību kolēģiem.
• Praktisku, uz sadarbību vērstu pieeju: Tu uzdod jautājumus, iedziļinies biznesa vajadzībās un palīdzi rast risinājumus, kas atbilst drošības un privātuma aizsardzības prasībām.

Par priekšrocību uzskatīsim

• Praktisku pieredzi Vispārīgās datu aizsardzības regulas (VDAR jeb GDPR) prasību piemērošanā, piemēram, NIDA veikšanā, privātuma auditos, RoPA uzturēšanā vai personas datu aizsardzības pārkāpumu izvērtēšanā.
• ISO 27001 auditora vai standarta ieviešanas speciālista sertifikātu.
• Citus amatam atbilstošus sertifikātus, piemēram, CIPP/E, CIPM, CRISC, CISA vai Security+.

Mēs piedāvājam

• Bruto mēnešalgu 3200 - 4200 EUR apmērā atkarībā no Tavas pieredzes un kvalifikācijas.
• Darba vidi, kurā ir vieta jaunām idejām un praktiskiem uzlabojumiem, kā arī stabila uzņēmuma atbalstu un resursus.
• Iespēju sadarboties ar starptautiskiem kolēģiem informācijas drošības, IT, juridiskajā un biznesa jomā, strādājot veiksmīgā uzņēmumā, kura akcijas tiek kotētas biržā.
• Profesionālās attīstības iespējas GRC un personas datu aizsardzības jomā, tostarp potenciālu dalību mākslīgā intelekta pārvaldības un atbilstības projektos.
• Hibrīddarbu, apvienojot klātienes sadarbību Rīgas birojā ar iespēju strādāt attālināti.
• Veselības apdrošināšanu, mūsdienīgu biroju, mācību iespējas, hakatonus un citus darbinieku labumus.

Description

Why work for DreamHost?

We help people own their digital presence. It’s not just wishful thinking. It’s our noble cause — an idea that drives everything we do.

When you put your dreams online—your words, your photos, your creations—you shouldn’t have to worry about your service provider mining that data for marketing purposes. Those are your dreams — not ours! DreamHost’s open platform gives you the power to share your data and the freedom to control how it’s used.

Working for DreamHost you can be a steward of your own career. We invest in our people, we promote from within the organization when possible and we offer extensive training to aid in your success. In this role, we offer competitive salary, health, vision, and dental insurance, as well as a company-issued laptop, 401k, opportunities for growth, and much much more! We are proud to be a US employer with a fantastic culture and the ability to offer so much to our employees.

Benefits Offered

• Full health/vision/dental for the entire family at zero cost to team member

• 3% Safe Harbor contributed to 401(k) plus up to 1% employer match

• Opportunities for profit sharing and bonuses

• Generous time-off (starting at 15 vacation days)

• 11 Paid holidays (Technical Support and Technical Operations use a floating holiday policy)

• Paid sick leave (80 hours accrued)

• Tuition reimbursement (50⁄50 up to a specific amount)

• Pet Insurance

• Thrive Pass wellness allowance of $30 per month

• Udemy online learning courses

• Disability Insurance

• Generous maternity/paternity leave

• Discounted personal travel through corporate booking program Egencia

• Laid-back atmosphere

• Fun monthly company events

• Free web hosting

Overview

The Security Engineer II is responsible for protecting DreamHost, our infrastructure, and our customers in a large, multi-tenant Linux hosting environment where untrusted code runs on our machines by design. This is a hands-on engineering role. You will investigate live compromises, build the tooling and detections that find the next one, review the security of our own applications and infrastructure, and drive down long-standing risk across a fleet spanning shared hosting, VPS, managed WordPress, dedicated servers, cloud, and email.

You will work on a small security team where everyone owns real workstreams end to end, partners directly with Systems, Development, Abuse, and Support, and is expected to exercise judgment without waiting for permission.

What you’ll work on

• Incident response across shared, virtualized, and dedicated Linux hosts — compromise investigation, blast-radius scoping, containment, evidence preservation, and write-ups.

• Detection engineering: malware and webshell signatures, log-based detections, and reducing the false positives that create alert fatigue at fleet scale.

• Application security review of our in-house control plane, customer panel, and internal tooling, plus the third-party and open-source code we depend on.

• Secrets management modernization such as moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets from code, logs, and CI.

• Identity and access lifecycle: directory and SSO migration, privileged access review, and durable offboarding.

• Vulnerability management and patch velocity across a large, heterogeneous fleet, including end-of-life OS and runtime remediation.

• Automation. Anything done manually more than twice is a candidate for tooling, and you’ll build it.

• Security review and governance of AI and agent tooling as it’s adopted internally — data exposure, permission scope, agent identity, and abuse paths. You’ll also be using these tools heavily yourself; the team runs on them.

Responsibilities

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.

• Lead investigation and resolution of complex security incidents, coordinating across teams and communicating status clearly while facts are still incomplete.

• Design and implement safeguards protecting customer sites, accounts, and infrastructure from active and evolving threats.

• Conduct vulnerability assessments, security reviews, and risk analysis, with remediation guidance engineers can act on.

• Build automation and tooling that improves detection, monitoring, response, and operational safety.

• Partner with Systems, Development, Abuse, and Support to get security controls implemented rather than merely recommended.

• Mentor less experienced team members and contribute to the team’s shared knowledge and runbooks.

• Contribute to security policy, standards, and process, and support compliance efforts without mistaking compliance for security.

Requirements

• 3–6 years in security engineering, incident response, application security, offensive security, or systems administration, with demonstrated ability to resolve complex security problems independently.

• Depth in at least one of: application security, incident response and detection engineering, or offensive security and penetration testing plus working competence in the other two.

• Strong hands-on Linux (Debian/Ubuntu preferred), including low-level concepts: processes, namespaces, capabilities, filesystems, kernels, and how things actually break.

• Experience operating long-lived production systems that can’t simply be rebuilt including repairing hosts in place, under load, with real users on them.

• Experience in multi-tenant or customer-facing environments where users are untrusted.

• Scripting and automation you’ve shipped and operated in production. Python, Go, Bash, Perl, or similar. We care that you’ve built and maintained real tooling, not which language.

• Log analysis and investigation at scale, and comfort with intrusion detection and web application firewalls (mod_security or similar).

• Working knowledge of cloud platform security (AWS, GCP, Azure, or OpenStack) including IAM, network controls, and workload isolation.

• Familiarity with secrets management and CI/CD security (Vault or equivalent, pipeline hardening, dependency and supply-chain risk).

• Version control and infrastructure-as-code fluency (Git, Ansible or similar).

• Practical, current fluency with AI tooling in your own work. You use it daily, you know where it fails, and you can say what you don’t let it do. We are not looking for enthusiasm or for resistance, but for someone who has integrated these tools into real engineering work and formed opinions from experience.

• Clear written and verbal communication, including translating technical risk for non-technical stakeholders.

• A strong sense of ethics, healthy skepticism, and the patience to stay useful under pressure.

Nice to have

• Web hosting or WordPress-at-scale experience, as a provider or a customer.

• Container and orchestration security (Podman, Docker, Kubernetes) including escape and isolation failure modes.

• Malware analysis, YARA rule authorship, or reverse engineering.

• Detection-as-code or SIEM engineering experience.

• Hands-on experience securing AI/LLM systems, agent frameworks, or MCP tooling. Prompt injection, tool-permission scoping, or data-boundary work.

• Familiarity with PCI DSS, SOC 2, or ISO 27001 — as context, not as a career.

• Open source contributions.

Compensation

• $125,000-$145,000 / yearly

**DreamHost provides equal employment opportunities to all team members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.**

About the team:

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information.

About the role:

We are looking for a Manager, CyberSecurity Risk Management to join our security risk management team and support the delivery of Rubrik’s cybersecurity risk management program. Working closely with the team’s lead Program Manager, who owns the program, you will help drive day-to-day execution: coordinating cross-functional risk assessments, supporting risk review and acceptance processes, tracking risk remediation to closure, and producing risk reporting that gives leadership a clear view of Rubrik’s cybersecurity risk posture. You will partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to keep work on track and deliver measurable outcomes. Success in this role requires strong program management discipline, solid risk and compliance knowledge, and the ability to influence and build consensus at every level of the company.

What you’ll do:

• Support program operations for the overall Cybersecurity Risk Management Program.
• Support and conduct risk assessments and triage incoming security issues related to Rubrik’s core products, services, and infrastructure.
• Draft clear risk statements that translate technical findings into business impact, including likelihood/impact rationale and key assumptions.
• Maintain and update the risk register, ensuring ownership, status, target dates, and risk treatment decisions are accurate and timely.
• Coordinate and track cross-functional risk initiatives, managing timelines, dependencies, and action items; flag delivery risks early and drive follow-through.
• Drive remediation of risks to closure by conducting periodic cross-functional check-ins with risk owners to obtain updates, track milestones and target dates, document progress in the risk register, remove/escalate blockers, and communicate status through leadership reporting.
• Support the risk governance cadence, including preparing materials for risk committee meetings, facilitating risk acceptance and exception reviews, and tracking escalations, decisions, and actions to completion.
• Collect and analyze program metrics (KPIs/KRIs), build dashboards, and help prepare risk updates for leadership.
• Support the risk assessment program at scale, including enterprise, technical, and third-party/supplier risk assessments, helping keep methodology, quality, and turnaround times consistent.
• Execute and document cybersecurity risk assessments (inherent and residual) for systems, applications, cloud services, and initiatives; gather evidence and validate control implementation with stakeholders.
• Help map program activities to compliance obligations and frameworks (ISO 27001, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA) and emerging regulations (e.g., DORA, NIS2, EU AI Act).
• Contribute to risk quantification efforts so risks can be prioritized in business and financial terms.
• Support GRC tooling, automation, and AI-enabled improvement initiatives by gathering requirements, coordinating implementation tasks, piloting use cases (e.g., LLM-assisted intake triage, evidence mapping, and automated status summarization), and driving adoption of standardized workflows with appropriate governance and human review.
• Identify gaps and recommend process improvements to make risk management activities more efficient, consistent, and effective.

Experience you’ll need:

•     8+ years of experience in cybersecurity risk management, or GRC, including at least 3 years in a program or project management role.
•     Experience supporting or helping scale a cybersecurity risk management program in a fast-paced technology, SaaS, or cloud company.
•     Strong program management skills: project planning, dependency management, effort estimation, status reporting, and delivery of cross-functional initiatives.
•     Solid working knowledge of risk management methodologies (NIST RMF / 800-37 / 800-30, ISO 27005, COBIT) and common security frameworks such as ISO 27001⁄2, SOC 2, FedRAMP, NIST CSF / 800-53, CIS Controls, PCI DSS, and HIPAA.
•     Enough technical understanding of cloud, identity, network, and application security to engage credibly with engineering teams and follow remediation plans.
•     Able to communicate risk clearly to senior stakeholders and build consensus without direct authority.
•     Hands-on experience with agile project management and reporting tools (e.g., Jira, Confluence, Tableau).
•     Excellent written and verbal communication, organization, and stakeholder management skills.
•     Bachelor’s degree in Security, Computer Science, Management Information Systems, or a related field, or equivalent practical experience.

#LI-remote

The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

US (SF Bay Area, DC Metro, NYC, Seattle) Pay Range

$181,600—$272,400 USD

The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

US2 (all other US offices/remote) Pay Range

$163,400—$245,200 USD

Join Us in Securing and Accelerating the World’s AI Transformation

Rubrik (RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real-time guardrails, fine-tuning for accuracy and undoing agentic mistakes.

Linkedin | X (formerly Twitter) | Instagram | Rubrik.com

Inclusion @ Rubrik

At Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the world’s data.

Our goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest potential.

Our inclusion strategy focuses on three core areas of our business and culture:

• Our Company: We are committed to building a merit-based organization that offers equal access to growth and success for all employees globally. Your potential is limitless here.

• Our Culture: We strive to create an inclusive atmosphere where individuals from all backgrounds feel a strong sense of belonging, can thrive, and do their best work. Your contributions help us innovate and break boundaries.

• Our Communities: We are dedicated to expanding our engagement with the communities we operate in, creating opportunities for underrepresented talent and driving greater innovation for our clients. Your impact extends beyond Rubrik, contributing to safer and stronger communities.

Equal Opportunity Employer/Veterans/Disabled

Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, protected veteran status, or any other status protected by applicable law. Rubrik provides equal employment opportunities to employees and applicants in all terms and conditions of employment, including recruiting, hiring, promotion, compensation, training, leave, and termination.

Rubrik provides reasonable accommodations to qualified applicants and employees with disabilities in accordance with applicable law. If you need an accommodation to participate in the application process or to perform your job, please contact hr@rubrik.com. Accommodations may include changes to the application process, documents in an alternate format, a sign language interpreter, or specialized equipment.

EEO IS THE LAW

NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS

Description

Why work for DreamHost?

We help people own their digital presence. It’s not just wishful thinking. It’s our noble cause — an idea that drives everything we do.

When you put your dreams online—your words, your photos, your creations—you shouldn’t have to worry about your service provider mining that data for marketing purposes. Those are your dreams — not ours! DreamHost’s open platform gives you the power to share your data and the freedom to control how it’s used.

Working for DreamHost you can be a steward of your own career. We invest in our people, we promote from within the organization when possible and we offer extensive training to aid in your success. In this role, we offer competitive salary, health, vision, and dental insurance, as well as a company-issued laptop, 401k, opportunities for growth, and much much more! We are proud to be a US employer with a fantastic culture and the ability to offer so much to our employees.

Benefits Offered

• Full health/vision/dental for the entire family at zero cost to team member

• 3% Safe Harbor contributed to 401(k) plus up to 1% employer match

• Opportunities for profit sharing and bonuses

• Generous time-off (starting at 15 vacation days)

• 11 Paid holidays (Technical Support and Technical Operations use a floating holiday policy)

• Paid sick leave (80 hours accrued)

• Tuition reimbursement (50⁄50 up to a specific amount)

• Pet Insurance

• Thrive Pass wellness allowance of $30 per month

• Udemy online learning courses

• Disability Insurance

• Generous maternity/paternity leave

• Discounted personal travel through corporate booking program Egencia

• Laid-back atmosphere

• Fun monthly company events

• Free web hosting

Overview

The Security Engineer II is responsible for protecting DreamHost, our infrastructure, and our customers in a large, multi-tenant Linux hosting environment where untrusted code runs on our machines by design. This is a hands-on engineering role. You will investigate live compromises, build the tooling and detections that find the next one, review the security of our own applications and infrastructure, and drive down long-standing risk across a fleet spanning shared hosting, VPS, managed WordPress, dedicated servers, cloud, and email.

You will work on a small security team where everyone owns real workstreams end to end, partners directly with Systems, Development, Abuse, and Support, and is expected to exercise judgment without waiting for permission.

What you’ll work on

• Incident response across shared, virtualized, and dedicated Linux hosts — compromise investigation, blast-radius scoping, containment, evidence preservation, and write-ups.

• Detection engineering: malware and webshell signatures, log-based detections, and reducing the false positives that create alert fatigue at fleet scale.

• Application security review of our in-house control plane, customer panel, and internal tooling, plus the third-party and open-source code we depend on.

• Secrets management modernization such as moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets from code, logs, and CI.

• Identity and access lifecycle: directory and SSO migration, privileged access review, and durable offboarding.

• Vulnerability management and patch velocity across a large, heterogeneous fleet, including end-of-life OS and runtime remediation.

• Automation. Anything done manually more than twice is a candidate for tooling, and you’ll build it.

• Security review and governance of AI and agent tooling as it’s adopted internally — data exposure, permission scope, agent identity, and abuse paths. You’ll also be using these tools heavily yourself; the team runs on them.

Responsibilities

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.

• Lead investigation and resolution of complex security incidents, coordinating across teams and communicating status clearly while facts are still incomplete.

• Design and implement safeguards protecting customer sites, accounts, and infrastructure from active and evolving threats.

• Conduct vulnerability assessments, security reviews, and risk analysis, with remediation guidance engineers can act on.

• Build automation and tooling that improves detection, monitoring, response, and operational safety.

• Partner with Systems, Development, Abuse, and Support to get security controls implemented rather than merely recommended.

• Mentor less experienced team members and contribute to the team’s shared knowledge and runbooks.

• Contribute to security policy, standards, and process, and support compliance efforts without mistaking compliance for security.

Requirements

• 3–6 years in security engineering, incident response, application security, offensive security, or systems administration, with demonstrated ability to resolve complex security problems independently.

• Depth in at least one of: application security, incident response and detection engineering, or offensive security and penetration testing plus working competence in the other two.

• Strong hands-on Linux (Debian/Ubuntu preferred), including low-level concepts: processes, namespaces, capabilities, filesystems, kernels, and how things actually break.

• Experience operating long-lived production systems that can’t simply be rebuilt including repairing hosts in place, under load, with real users on them.

• Experience in multi-tenant or customer-facing environments where users are untrusted.

• Scripting and automation you’ve shipped and operated in production. Python, Go, Bash, Perl, or similar. We care that you’ve built and maintained real tooling, not which language.

• Log analysis and investigation at scale, and comfort with intrusion detection and web application firewalls (mod_security or similar).

• Working knowledge of cloud platform security (AWS, GCP, Azure, or OpenStack) including IAM, network controls, and workload isolation.

• Familiarity with secrets management and CI/CD security (Vault or equivalent, pipeline hardening, dependency and supply-chain risk).

• Version control and infrastructure-as-code fluency (Git, Ansible or similar).

• Practical, current fluency with AI tooling in your own work. You use it daily, you know where it fails, and you can say what you don’t let it do. We are not looking for enthusiasm or for resistance, but for someone who has integrated these tools into real engineering work and formed opinions from experience.

• Clear written and verbal communication, including translating technical risk for non-technical stakeholders.

• A strong sense of ethics, healthy skepticism, and the patience to stay useful under pressure.

Nice to have

• Web hosting or WordPress-at-scale experience, as a provider or a customer.

• Container and orchestration security (Podman, Docker, Kubernetes) including escape and isolation failure modes.

• Malware analysis, YARA rule authorship, or reverse engineering.

• Detection-as-code or SIEM engineering experience.

• Hands-on experience securing AI/LLM systems, agent frameworks, or MCP tooling. Prompt injection, tool-permission scoping, or data-boundary work.

• Familiarity with PCI DSS, SOC 2, or ISO 27001 — as context, not as a career.

• Open source contributions.

Compensation

• $125,000-$145,000 / yearly

**DreamHost provides equal employment opportunities to all team members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.**

Company Description

Evolution ir daudznacionāls uzņēmums tiešsaistes spēļu industrijas priekšgalā. Mums ir plaša pieredze pirmajā vietā un vienmēr meklējam lieliskus cilvēkus, kas palīdzētu mums izveidot nākamo lielo produktu hitu. Mūsu komanda, kurā ir vairāk nekā 1000 inženieru, darbojas no 8 inženiertehniskajiem centriem, kas darbojas 24/7/365, lai apkalpotu lietotājus visā pasaulē. Tas tiek palaists, izmantojot modernu programmatūras steku, kas atbalsta vairāk nekā 250 pilnīgi automatizētus izlaidumus mēnesī mūsu galvenajai tiešraides videi. Mēs ticam iekšējai kompetencei un veikliem darba procesiem, lai mēs varētu īstenot savu inženierijas misiju: nevainojama spēlētāja pieredze.

---———————————————————————–

Evolution is a multinational business at the forefront of the online gaming industry. We have an extensive track record of number 1s and are always looking for great people to help us create the next big product hit. Our team of 1,000+ engineers operates out of 8 engineering hubs running code 24/7/365 to serve users around the world. This is run through a modern software stack supporting over 250 fully automated releases per month to our main live environment. We believe in building in-house competence and agile work processes so that we can deliver on our Engineering mission: A flawless player experience.

Job Description

At Evolution, you’ll work with IT, Legal and business colleagues to assess risks, support audits and help build security and privacy controls into everyday processes.

Joining our Information Security team and reporting to the GRC Manager, you’ll contribute across governance, risk and compliance while developing your expertise in data privacy. This role offers room to grow, whether your experience is mainly in GRC or combines privacy work with a foundation in information security.

What you will do

• Support our Information Security Management System (ISMS), including ISO 27001 audits and certification activities.
• Coordinate risk assessments, vulnerability scanning and penetration testing with relevant teams, and track remediation actions through to completion.
• Support Data Protection Impact Assessments (DPIAs), privacy risk assessments, and the maintenance of records of processing activities (RoPA).
• Help prepare for external audits, including ISAE 3402/SOC 1 and IT financial audits, by coordinating evidence and following up on findings.
• Maintain and improve security policies, privacy standards, procedures and supporting documentation.
• Work with technical and business stakeholders to identify risks, explain requirements and agree on practical security and privacy controls.

What we are looking for

• Practical experience in GRC, information security, audit, risk management or data privacy, ideally 2–5 years. We also welcome candidates earlier in their careers who bring a solid foundation and motivation to develop.
• A working understanding of ISO 27001, ISMS principles and how organizations assess risks and monitor controls.
• Experience supporting audits, risk assessments or compliance activities.
• An understanding of data protection principles and an interest in developing your privacy expertise.
• Strong organizational skills, attention to detail and the ability to follow up on actions across several teams.
• Clear spoken and written English, with confidence communicating with both technical and business colleagues.
• A collaborative, practical approach: you ask questions, understand business needs and help stakeholders find solutions that meet security and privacy requirements.

It would be a plus if you have

• Hands-on GDPR experience, including DPIAs, privacy audits, RoPA or personal data incident assessments.
• An ISO 27001 Auditor or Implementer certification.
• Other relevant certifications, such as CIPP/E, CIPM, CRISC, CISA or Security+.

We offer

• Gross monthly salary from 3,200 EUR to 4,200 EUR, depending on your experience and qualifications.
• An environment that encourages new ideas and practical improvements, supported by the stability and resources of an established company.
• The opportunity to work with international colleagues across Information Security, IT, Legal and business teams in a successful, publicly traded company.
• Opportunities to develop your expertise across GRC and data privacy, with potential involvement in AI governance and compliance projects.
• A hybrid working model, combining collaboration in our Riga office with remote work.
• Health insurance, a contemporary office environment, development opportunities, hackathons and other benefits and perks.

---————————————————————————————————————-

Darba apraksts

Evolution komandā Tu sadarbosies ar IT speciālistiem, juridisko un biznesa struktūrvienību kolēģiem, lai izvērtētu riskus, atbalstītu auditu norisi un palīdzētu ieviest drošības un privātuma aizsardzības pasākumus ikdienas procesos.

Pievienojoties Informācijas drošības komandai, Tu strādāsi GRC vadītāja pakļautībā un iesaistīsies pārvaldības, risku vadības un atbilstības (GRC) procesos. Šajā amatā varēsi pilnveidot savas prasmes neatkarīgi no tā, vai Tava līdzšinējā pieredze galvenokārt saistīta ar GRC vai ar personas datu aizsardzību apvienojumā ar zināšanām informācijas drošībā.

Tavi pienākumi

• Palīdzēt uzturēt uzņēmuma informācijas drošības pārvaldības sistēmu (ISMS), tostarp piedalīties ISO 27001 auditos un sertifikācijas procesā.
• Sadarbībā ar atbildīgajām komandām koordinēt risku novērtēšanu, ievainojamību skenēšanu un ielaušanās testus, kā arī sekot trūkumu novēršanas pasākumu izpildei.
• Piedalīties novērtējumos par ietekmi uz datu aizsardzību (DPIA), palīdzēt analizēt privātuma riskus un uzturēt personas datu apstrādes darbību reģistru (RoPA).
• Palīdzēt sagatavoties ārējām pārbaudēm, tostarp ISAE 3402/SOC 1 un ar finanšu revīzijām saistītiem IT auditiem, koordinējot nepieciešamo pierādījumu apkopošanu un sekojot konstatēto nepilnību novēršanai.
• Uzturēt un pilnveidot informācijas drošības politikas, privātuma standartus, procedūras un saistīto dokumentāciju.
• Kopā ar tehnisko komandu un biznesa struktūrvienību pārstāvjiem identificēt riskus, skaidrot prasības un vienoties par praktiski īstenojamiem kontroles pasākumiem.

Ko mēs sagaidām

• Praktisku pieredzi GRC, informācijas drošības, audita, risku vadības vai personas datu aizsardzības jomā (vēlams 2–5 gadus). Aicinām pieteikties arī kandidātus karjeras sākumposmā ar labām pamatzināšanām un motivāciju profesionāli attīstīties.
• Izpratni par ISO 27001 prasībām, ISMS darbības principiem, risku novērtēšanu un kontroles pasākumu efektivitātes uzraudzību.
• Pieredzi auditu atbalstīšanā, risku izvērtēšanā vai atbilstības nodrošināšanā.
• Zināšanas par personas datu aizsardzības principiem un vēlmi padziļināt kompetenci privātuma jautājumos.
• Labas organizatoriskās prasmes, precizitāti un spēju sekot uzdevumu izpildei, sadarbojoties ar vairākām komandām.
• Labas angļu valodas zināšanas mutvārdos un rakstveidā, kā arī prasmi pārliecinoši sazināties ar tehnisko komandu un biznesa struktūrvienību kolēģiem.
• Praktisku, uz sadarbību vērstu pieeju: Tu uzdod jautājumus, iedziļinies biznesa vajadzībās un palīdzi rast risinājumus, kas atbilst drošības un privātuma aizsardzības prasībām.

Par priekšrocību uzskatīsim

• Praktisku pieredzi Vispārīgās datu aizsardzības regulas (VDAR jeb GDPR) prasību piemērošanā, piemēram, NIDA veikšanā, privātuma auditos, RoPA uzturēšanā vai personas datu aizsardzības pārkāpumu izvērtēšanā.
• ISO 27001 auditora vai standarta ieviešanas speciālista sertifikātu.
• Citus amatam atbilstošus sertifikātus, piemēram, CIPP/E, CIPM, CRISC, CISA vai Security+.

Mēs piedāvājam

• Bruto mēnešalgu 3200 - 4200 EUR apmērā atkarībā no Tavas pieredzes un kvalifikācijas.
• Darba vidi, kurā ir vieta jaunām idejām un praktiskiem uzlabojumiem, kā arī stabila uzņēmuma atbalstu un resursus.
• Iespēju sadarboties ar starptautiskiem kolēģiem informācijas drošības, IT, juridiskajā un biznesa jomā, strādājot veiksmīgā uzņēmumā, kura akcijas tiek kotētas biržā.
• Profesionālās attīstības iespējas GRC un personas datu aizsardzības jomā, tostarp potenciālu dalību mākslīgā intelekta pārvaldības un atbilstības projektos.
• Hibrīddarbu, apvienojot klātienes sadarbību Rīgas birojā ar iespēju strādāt attālināti.
• Veselības apdrošināšanu, mūsdienīgu biroju, mācību iespējas, hakatonus un citus darbinieku labumus.

Headquarters: Australia (Remote)

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including GitHub, Yelp, Paramount, and JetBlue.

We're building a more trustworthy Internet. Come join us.

Threat Detection Analyst - (Japanese speaking desirable)

Fastly is seeking a Threat Detection Analyst to join our dedicated Customer Security Operations Centre. In this role, you will be a frontline defender for Fastly’s global enterprise customers. You will leverage our edge cloud platform and an array of security products in monitoring traffic, detect sophisticated anomalies, and deploy real-time mitigations against DDoS, Bot, and Web Application attacks.

This is a high-impact role where you act as a strategic partner for our Managed Security Service (MSS) clients, providing the expert visibility and rapid response necessary to address internet-scale threats.

What you’ll Do :

• Active Incident Response: Lead the identification and mitigation of high-impact security events. You will analyze sophisticated traffic patterns and implement precise countermeasures, including rate limiting and custom WAF & Security rules to neutralize threats in real-time.
• Managed Security Delivery: Serve as a primary security consultant for MSS Customers. This involves continuous tuning and refining of security policies to optimize detection accuracy and maintaining a hardened security posture tailored to each client's unique environment.
• Advanced Threat Hunting: Conduct data-driven investigations using log analysis to uncover potential threats and hardenings opportunities
• Security Intelligence & Reporting: Author comprehensive After Action Reports (AARs) and monthly security summaries. You will translate complex telemetry and attack data into high-level actionable insights for customer stakeholders.
• Strategic Communication: Act as the Subject Matter Expert (SME) during active security incidents. You will provide clear, calm, and professional guidance via real-time communication channels, ensuring customers are informed and confident in our defensive strategy.

What we are looking for :

• Web Security Expertise: Comprehensive understanding of the OWASP Top 10 and advanced attack vectors (e.g., Credential Stuffing, API Abuse, and Layer 7 DDoS). You can interpret raw payloads to distinguish between malicious intent and legitimate traffic.
• Protocol Proficiency: Deep technical knowledge of the internet stack, specifically HTTP/S, TCP/IP, DNS, and TLS. You should be comfortable analyzing handshake processes, header structures, and status codes.
• Analytical Rigor: A methodical approach to digital forensics and incident response. You possess the ability to correlate disparate data points within JSON or CSV logs to reconstruct an attack narrative.
• Communication Excellence: The ability to distill complex technical findings into concise, professional, and empathetic communications for both technical and non-technical audiences.

We’ll be super impressed if you have experience in any of these:

• Proficiency in Python or Bash for log parsing and workflow automation.
• Experience with Infrastructure as Code/Security as Code(SaC) (Terraform) or edge-based configurations.
• Industry-standard certifications such as CompTIA CySA+, GCIH, or Security+.

Work Hours:

• This position will require you to be available during core business hours.
• Tuesday to Saturday : 10 am to 6 PM AEST and 11 am to 7 pm AEDT 

Work Location(s) & Travel Requirements

This position is a remote position based out of (locality), with the possibility of becoming a hybrid position as Fastly expands its presence in the region.

This position will require travel to the US and Internationally, as required by your role or requested by your manager.

Benefits:

We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with Fastly. Curious about our offerings?

We offer a comprehensive benefits package designed to meet your needs. Our offerings may vary depending on the country where you work and are subject to change.

 

Why Fastly?

• We have a huge impact. Fastly is a small company with a big reach. Not only do our customers have a tremendous user base, but we also support a growing number of open source projects and initiatives. Outside of code, employees are encouraged to share causes close to their heart with others so we can help lend a supportive hand.

• We value diversity. Growing and maintaining our inclusive and diverse team matters to us. We are committed to being a company where our employees feel comfortable bringing their authentic selves to work and have the ability to be successful -- every day.

• We are passionate. Fastly is chock full of passionate people and we’re not ‘one size fits all’. Fastly employs authors, pilots, skiers, parents (of humans and animals), makeup geeks, coffee connoisseurs, and more. We love employees for who they are and what they are passionate about.

We’re always looking for humble, sharp, and creative folks to join the Fastly team. If you think you might be a fit please apply! A fully completed application and resume or CV are required when applying.

All job applications must be submitted through our official careers site at www.fastly.com/about/careers. We will never request sensitive information, such as your Social Security number, bank account or credit card information during the application process. All official communication will come from an @fastly.com or @recruiting.fastly.com email address.

Fastly is committed to ensuring equal employment opportunity and to providing employees with a safe and welcoming work environment free of discrimination and harassment. Our employment decisions are based on business needs, job requirements and individual qualifications. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, family or parental status, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.

Consistent with the Americans with Disabilities Act (ADA) and federal or state disability laws, Fastly will provide reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact your Recruiter, or the Fastly Employee Relations team at candidateaccommodations@fastly.com or 501-287-4901. 

Fastly collects and processes personal data submitted by job applicants in accordance with our Privacy Policy. Please see our privacy notice for job applicants.

To apply: https://weworkremotely.com/remote-jobs/fastly-threat-detection-analyst-japanese-speaking-desirable

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and...

Why join Nextech?

We are a leader in specialty healthcare technology solutions.

We’re committed to hiring and retaining talent, which is why we invest in our employees through competitive pay, a generous bonus structure, great healthcare, a comprehensive wellness program, and many other benefits.

If you are a software engineer, finance or accounting professional, customer support specialist, or a business development expert with a passion for healthcare technology (just to name a few), we want to hear from you.

We are an equal opportunity employer with a commitment to diversity.  All individuals, regardless of personal characteristics are encouraged to apply. If you are a candidate in need of assistance or an accommodation in the application process, please contact [email protected].

Job Summary

The Security Engineer will be a key contributor to our cybersecurity team. They will utilize CrowdStrike’s advanced endpoint detection and response (EDR) tools to protect our organization from emerging threats. They will focus on monitoring and analyzing security data to identify potential issues and handle security incidents swiftly. The ideal candidate will have a strong grasp of cybersecurity principles and practical experience in managing security challenges and will play a crucial role in enhancing our threat detection capabilities.

All activities must be in compliance with Equal Employment Opportunity laws, HIPAA, ERISA and other regulations, as appropriate.

Essential Functions

• Security Alert Monitoring: Continuously track and analyze security alerts and incidents through tools like CrowdStrike and Zscaler, identifying potential threats in real time.
• Incident Response: Investigate security incidents, determine root causes and take immediate action to contain and resolve issues, minimizing impact.
• Proactive Threat Hunting: Conduct proactive threat-hunting activities across the network to detect signs of malicious activity, leveraging CrowdStrike’s advanced capabilities.
• Vulnerability Management: Identify and assess system vulnerabilities across networks, applications and infrastructure, coordinating with teams to ensure timely remediation.
• Security Reporting: Create detailed reports on incidents, threats, and vulnerabilities, offering actionable recommendations for enhancing security measures.
• Cross-Functional Collaboration: Partner with IT, compliance, and other security teams to develop and execute comprehensive security strategies.
• Security Awareness & Training: Support the development and delivery of security awareness programs, reinforcing cybersecurity best practices across the organization.
• Continuous Learning: Stay informed on emerging threats, tools and best practices to strengthen the organization’s security framework.
• Compliance & Standards Alignment: Ensure adherence to technical security controls and guidelines per industry standards, including HIPAA, PCI, SOC2, ISO 27001⁄27013, and NIST 800-53.

Minimum Requirements

• Cybersecurity Experience: 5+ years, specializing in incident response and threat detection.
• CrowdStrike Proficiency: Hands-on experience with CrowdStrike EDR platform for threat hunting, incident response and vulnerability management.
• Education & Certifications: Bachelor’s degree in computer science, Information Security, or a related field. Relevant certifications like CISSP, CEH, or CCFA are advantageous.
• Cloud Security: Familiarity with cloud platforms such as Azure and AWS.
• Security Tools: Skilled in using Zscaler, CrowdStrike, Abnormal Security, and Tenable.io, as well as broader tools like SIEM, firewalls, IDS/IPS and vulnerability scanners.
• Analytical Skills: Strong problem-solving abilities and expertise in analyzing complex data to detect threats.
• Communication: Clear and effective verbal and written communication skills, especially in translating technical information for non-technical audiences.
• Attention to Detail: Strong ability to identify anomalies that may signal security threats.

Preferred Qualifications

• Certified Ethical Hacker (CEH)
• CISSP
• Experience with other EDR platforms, SIEM tools, or network security technologies.
• Familiarity with scripting or programming languages (Python, PowerShell, etc.) for automation and threat detection tasks.
• Previous experience working in a SOC (Security Operations Center) environment.

Working Environment/Physical Demands

• Remote - Work from home
• Activities require a significant amount of work in front of a computer monitor.

Total Rewards:

Generous annual bonus opportunity

401(k) with Employer Match

Flexible Time Off: take time off when you need it without worrying about available hours

11 paid holidays

Your Day Your Way - Celebrate a day of cultural or social significance to you

Access to Linkedin Learning courses for professional development

Insurance: Choice of Medical, Dental, and Vision plans

Health Savings Account with employer match

Flexible Spending Account

100% Company-Paid Parental leave (After 6 months with the company)

Company-Paid Life Insurance and Short/Long Term Disability Insurance

Nextech Luminary Peer Recognition Program

Employee Assistance Program with free counseling sessions available

Corporate Discounts on Retail, Travel, and Entertainment

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Overview:SOFTSWISS is looking for an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across our systems.

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at...

Job Type: FTE

Level: Mid-Level

Department: Security

Location: Remote (US or Canada)

Rate: $80,000-$130,000 USD (rates vary in Canada)

Position Overview

We are looking for a Microsoft Purview Compliance Engineer with expertise in both Microsoft 365 and Azure aspects of Microsoft Purview. The candidate should have experience with compliance, data loss prevention, classification, data governance, and risk management. The candidate should be proficient in the implementation and management of compliance solutions across both Microsoft 365 and Azure capabilities. An Engineer works closely with a lead Architect to execute provided technical designs, aid in creation of those designs, guide clients through implementation steps, and be the first point of contact for technical help.

An ideal candidate would be, technically skilled in Microsoft 365 Purview and Microsoft Purview in Azure, experienced in client-focused consulting, consistent in creating a positive impression on clients and maintain confidence while guiding client IT teams in enterprise deployments of Purview, and able to generate accurate, comprehensive as-built documentation representing the total output of work delivered to the client.

Responsibilities

• Work with clients to understand needs and design a comprehensive Microsoft Purview solution for data governance, compliance, and risk management across Azure and Microsoft 365 platforms.

• Develop policies and controls for data classification, retention, and protection, ensuring compliance with organizational and regulatory standards.

• Collaborate with the Purview Architect and client data governance and compliance teams to ensure alignment with organizational policies and regulatory requirements.

• Develop policies for data classification, retention, and protection within Microsoft Purview.

• Monitor and manage data access and usage compliance using Purview’s advanced data governance tools.

• Coordinate with different teams to integrate Purview with other Azure services and Microsoft 365 applications.

• Provide technical guidance for clients, team members and stakeholders on Microsoft Purview capabilities and best practices.

• Stay updated with the latest developments in Microsoft Azure and Microsoft 365 compliance and data governance features.

Qualifications

• Strong knowledge of Azure architecture, services, and security best practices.
• Proficient in Microsoft 365 administration and security configurations.
• Experience with Microsoft Purview, including data governance, compliance management, and risk assessment functionalities. Specific experience strongly recommended and will be thoroughly assessed in technical interviews.
• Familiarity with compliance standards such as GDPR, HIPAA, ISO 27001, etc.
• Excellent problem-solving skills and the ability to work in a fast-paced environment.
• Strong communication and collaboration skills.
• Azure or Microsoft 365 certifications related to security and compliance.
• Experience in scripting and automation using PowerShell, Azure CLI, or similar technologies.
• Background in IT compliance, risk management, or related fields.
• Experience deploying other Microsoft 365 and Azure tools including Microsoft Defender, Microsoft Entra, Microsoft Intune, and more.

Additional Knowledge & Skills

• A sanitized example deliverable will be required, representing quality of your written work This can be a public blog, deliverable or documentation you have created (non-client-identifiable, and adhering to confidentiality requirements where appropriate), or something comparable.

About the Company

Cyclotron is a Microsoft Solutions Partner focused on the modern workplace, data, and AI. We are dedicated to empowering clients to streamline operations and achieve their business goals. The company fosters a collaborative and inclusive environment, encouraging continuous learning and professional growth for its employees. Cyclotron’s mission is to deliver reliable, forward-thinking technology solutions that drive success for clients across various industries.

What We Can Offer

Cyclotron offers a comprehensive benefits package designed to support our employees’ well-being and professional growth in a fully remote work environment. We provide competitive health, dental, and vision insurance, and we cover 100% of employee medical premiums. Our team members benefit from generous and flexible paid time off (PTO), retirement plan options, and ongoing training opportunities. Additionally, Cyclotron promotes work-life balance with flexible work arrangements and robust wellness programs, creating a rewarding and supportive workplace for all.

Cyclotron relies on diversity of culture and thought to deliver on our goals. To ensure we can do that, we seek talented, qualified employees to join our team, regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. We are proud to be an Equal Employment Opportunity/Affirmative Action Employer.

We also provide reasonable accommodation for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law.

Cyclotron is an Equal Opportunity Employer. Cyclotron values diversity, equity and inclusion, and aims to practice DE&I in all that we do.

Job Type: FTE

Level: Mid-Level

Department: Security

Location: Remote (US or Canada)

Rate: $80,000-$130,000 USD (rates vary in Canada)

Position Overview

As a Threat Protection Security Engineer at Cyclotron, you’ll make an impact on diverse enterprise organizations by guiding and assisting enterprise deployments of Microsoft Defender XDR and Microsoft Sentinel, including Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, Microsoft Defender for Cloud, Entra Identity Protection, Microsoft Sentinel, and related Azure security features. You will be the implementation engineer that works with Cyclotron clients to deploy industry-leading solutions to improve the protection of Microsoft-based assets within their on-premises and cloud environments. You will work with other security engineers and architects on multiple client engagements, collaborating, sharing information, skills and experience.  You will understand how to use a wide variety of approaches to improve cloud, network and endpoint security posture within client security architectures.

The ideal candidate for this job will be a goal-oriented, client-focused Threat Protection and SIEM/SOAR engineer who possesses the ability to generate & execute technical designs based on client requirements to assist the customer to make the most of their investments in Microsoft technologies and services.

Responsibilities

• Work directly with client teams to drive discovery, design, configuration, validation, piloting, deployment and support of Microsoft cloud and on-premises security capabilities.
• Work across Cyclotron business units to provide a holistic approach that combines your areas of expertise in threat protection with identity & devices, compliance, and more.
• Contribute to the development of new Threat Protection and SIEM services offered by Cyclotron.
• Engage with other Cyclotron and customer teams to get and share information to improve processes and security posture.

Qualifications

• Demonstrated knowledge and skill with Microsoft cloud security solutions and services such as Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, Microsoft Defender for Cloud, and Sentinel.
• Strong and demonstrated experience with KQL queries, Attack Simulation services, on-premises Microsoft security solutions including Windows 10 and 11, Windows Server and Active Directory as well as third party solutions used to protect hosts.
• Strong communication skills, experience in leading technical discussions, providing guidance and direction when resolving technical challenges along with demonstrated technical writing experience.
• History with competitive security tools (Crowdstrike, Cortex, Webroot, Soti, XenMobile, Workspace ONE, Okta, PingFederate, etc.).
• Experience with Microsoft Intune, Configuration Manager, Entra ID, Entra ID Connect, SSO and Microsoft Purview capabilities.
• Experience with data connectors, data sources, and Logic Apps.
• Experience with migration of third party email security applications (Proofpoint, Mimecast, Cisco Secure Email, Tessian and Ironscales).
• Currently holds a Microsoft 365 Certified Security Administrator Associate or Azure Security Engineer Associated certification.
• Currently holds a Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM)
• Security Operations (SecOps) experience with Microsoft Defender XDR.

Additional Knowledge & Skills

• A sanitized example deliverable will be required, representing quality of your written work This can be a public blog, deliverable or documentation you have created (non-client-identifiable, and adhering to confidentiality requirements where appropriate), or something comparable.

About the Company

Cyclotron is a Microsoft Solutions Partner focused on the modern workplace, data, and AI. We are dedicated to empowering clients to streamline operations and achieve their business goals. The company fosters a collaborative and inclusive environment, encouraging continuous learning and professional growth for its employees. Cyclotron’s mission is to deliver reliable, forward-thinking technology solutions that drive success for clients across various industries.

What We Can Offer

Cyclotron offers a comprehensive benefits package designed to support our employees’ well-being and professional growth in a fully remote work environment. We provide competitive health, dental, and vision insurance, and we cover 100% of employee medical premiums. Our team members benefit from generous and flexible paid time off (PTO), retirement plan options, and ongoing training opportunities. Additionally, Cyclotron promotes work-life balance with flexible work arrangements and robust wellness programs, creating a rewarding and supportive workplace for all.

Cyclotron relies on diversity of culture and thought to deliver on our goals. To ensure we can do that, we seek talented, qualified employees to join our team, regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. We are proud to be an Equal Employment Opportunity/Affirmative Action Employer.

We also provide reasonable accommodation for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law.

Cyclotron is an Equal Opportunity Employer. Cyclotron values diversity, equity and inclusion, and aims to practice DE&I in all that we do.

Cybersecurity Engineer – Applications – Remote Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

Working for a company like Smile Digital Health means supporting our mandate for #BetterGlobalHealth. We strive towards this goal every day, and the results can be seen in the impact of our innovative health data platform and data management solutions, which are used in over 20 countries. We were #19 on Deloitte’s Technology Fast 50 Ranking for 2024!

Smile Digital Health makes it easy for healthcare stakeholders to collect and exchange data with our leading FHIR-based data liberation platform.

At its heart, the Smile platform enables people and organizations to better manage healthcare data. We help generate and liberate structured healthcare data to ensure effective delivery across care teams and health systems bringing  #BetterGlobalHealth to patients everyday!

Apply today and find plenty of reasons to SMILE!

The Cloud Security Engineer is responsible for designing, automating and deploying production-grade services on behalf of the customers to a variety of clouds such as AWS, Azure, OCI and GCP. This position works closely with the Cloud Architect and Development teams to ensure infrastructure fulfills the project’s deliverables while keeping a high standard of quality and operational maturity.

Responsibilities:

• Collaborate with Development and Architecture teams to build  complex and highly available cloud environments for Internal and External infrastructure builds.
• Provide Level 3 Technical support to Internal teams, customers, and Partners to support our core product.
• Lead and educate clients on cloud deployment patterns.
• Act as a SME for implementing and building infrastructure to support our core product.
• Investigate and resolve any customer integration issues that arise during implementation.
• Design procedures for system troubleshooting and maintenance.
• Perform root cause analysis for any implementation errors and provide feedback to the Core dev team.
• Document best practices and lessons learned.
• Design, implement and maintain a secure and scalable infrastructure platform.
• Provide ongoing maintenance and support of internal tools, improve system health and reliability.

Requirements:

• At least 5+ years of experience in Information technology, with infrastructure and platform services automation expertise.
• 4+ years of experience with engineering and supporting containerization technology.
• 4+ years of experience on AWS, Azure, OCI or GCP.
• Professional Cloud Certifications are preferred.
• Experience building end-to-end cloud solutions using low-level architecture documents.
• Demonstrated experience in translating customer requirements to net new infrastructure to address business needs.
• Drive to innovate and use various technologies to solve complex business needs.
• Expertise in troubleshooting support escalation, on-Call process optimization and documenting knowledge.
• Solid networking fundamentals and proven experience with Security and Compliance (SOC2, HIPAA, ISO27001) best practices and how to implement controls that support high-velocity software delivery teams.
• Proven experiencewith Kubernetes/Openshift and Docker.
• Experience with Infrastructure as Code tools such as Ansible, Terraform or CloudFormation.
• Deep knowledge of cloud service providers and best practices around implementation and configuration, preferably managing customer environments.

$115,000 - $130,000 a year

Smile discloses that artificial intelligence (AI) may be used in portions of the recruitment and selection process, such as resume screening or application assessment. All hiring decisions are ultimately made by qualified human decision-makers, and AI tools are used to support — not replace — fair and equitable hiring practices.

This position is a new role, created to support Smile’s continued growth and commitment to operational excellence.

Some of the benefits we offer:

\* Remote Work Environment

\* Flexible Time Away From Work Policy including PTO, Personal and Sick Days

\* Competitive Salary and Health/Medical Benefits

\* RRSP/TFSA/401K Employee Contribution

\* Life and Disability

\* Employee Assistance Program

\* FHIR Study Program and Skillsoft Learning

\* Super HAPI Fun Club

Smile’s core values include respect, inclusion, embracing our differences, and celebrating shared values because our people are the foundation of our success. We are big on creating a sense of belonging and empowering each other to bring our authentic selves to work.  We are dedicated to fostering a workplace that values diversity, equity, and inclusion.

We welcome and encourage candidates of all backgrounds to apply. Candidates are encouraged to inform us if they wish to discuss or require accommodations during interviews or while working at Smile.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Working for a company like Smile Digital Health means supporting our mandate for #BetterGlobalHealth. We strive towards this goal every day, and the results can be seen in the impact of our innovative health data platform and data management solutions, which are used in over 20 countries. We were #19 on Deloitte’s Technology Fast 50 Ranking for 2024!

Smile Digital Health makes it easy for healthcare stakeholders to collect and exchange data with our leading FHIR-based data liberation platform.

At its heart, the Smile platform enables people and organizations to better manage healthcare data. We help generate and liberate structured healthcare data to ensure effective delivery across care teams and health systems bringing  #BetterGlobalHealth to patients everyday!

Apply today and find plenty of reasons to SMILE!

The Cloud Security Engineer is responsible for designing, automating and deploying production-grade services on behalf of the customers to a variety of clouds such as AWS, Azure, OCI and GCP. This position works closely with the Cloud Architect and Development teams to ensure infrastructure fulfills the project’s deliverables while keeping a high standard of quality and operational maturity.

Responsibilities:

• Collaborate with Development and Architecture teams to build  complex and highly available cloud environments for Internal and External infrastructure builds.
• Provide Level 3 Technical support to Internal teams, customers, and Partners to support our core product.
• Lead and educate clients on cloud deployment patterns.
• Act as a SME for implementing and building infrastructure to support our core product.
• Investigate and resolve any customer integration issues that arise during implementation.
• Design procedures for system troubleshooting and maintenance.
• Perform root cause analysis for any implementation errors and provide feedback to the Core dev team.
• Document best practices and lessons learned.
• Design, implement and maintain a secure and scalable infrastructure platform.
• Provide ongoing maintenance and support of internal tools, improve system health and reliability.

Requirements:

• At least 5+ years of experience in Information technology, with infrastructure and platform services automation expertise.
• 4+ years of experience with engineering and supporting containerization technology.
• 4+ years of experience on AWS, Azure, OCI or GCP.
• Professional Cloud Certifications are preferred.
• Experience building end-to-end cloud solutions using low-level architecture documents.
• Demonstrated experience in translating customer requirements to net new infrastructure to address business needs.
• Drive to innovate and use various technologies to solve complex business needs.
• Expertise in troubleshooting support escalation, on-Call process optimization and documenting knowledge.
• Solid networking fundamentals and proven experience with Security and Compliance (SOC2, HIPAA, ISO27001) best practices and how to implement controls that support high-velocity software delivery teams.
• Proven experiencewith Kubernetes/Openshift and Docker.
• Experience with Infrastructure as Code tools such as Ansible, Terraform or CloudFormation.
• Deep knowledge of cloud service providers and best practices around implementation and configuration, preferably managing customer environments.

$115,000 - $130,000 a year

Smile discloses that artificial intelligence (AI) may be used in portions of the recruitment and selection process, such as resume screening or application assessment. All hiring decisions are ultimately made by qualified human decision-makers, and AI tools are used to support — not replace — fair and equitable hiring practices.

This position is a new role, created to support Smile’s continued growth and commitment to operational excellence.

Some of the benefits we offer:

\* Remote Work Environment

\* Flexible Time Away From Work Policy including PTO, Personal and Sick Days

\* Competitive Salary and Health/Medical Benefits

\* RRSP/TFSA/401K Employee Contribution

\* Life and Disability

\* Employee Assistance Program

\* FHIR Study Program and Skillsoft Learning

\* Super HAPI Fun Club

Smile’s core values include respect, inclusion, embracing our differences, and celebrating shared values because our people are the foundation of our success. We are big on creating a sense of belonging and empowering each other to bring our authentic selves to work.  We are dedicated to fostering a workplace that values diversity, equity, and inclusion.

We welcome and encourage candidates of all backgrounds to apply. Candidates are encouraged to inform us if they wish to discuss or require accommodations during interviews or while working at Smile.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

About the Role

Abnormal AI is looking for a Trust Analyst II to join the Compliance Trust team within Abnormal’s Trust organization. The Trust organization is made up of the Compliance Trust and Customer Trust teams. This role sits on the Compliance Trust team, which owns the company’s GRC (Governance, Risk, and Compliance) programs. The Compliance Trust team drives internal and external audit readiness, manages enterprise and third-party risk, and leads governance across information security, AI, and data to deliver a foundation to maintain company’s information security, privacy, and AI compliance certifications…

This role owns Abnormal’s governance and policy program, chairing and running the company’s governance committees, including AI Governance, Data Governance, Security Governance, and other governance programs as they are implemented. Additionally this role will hold end-to-end ownership of policy management, from drafting through stakeholder acknowledgment and management of the company’s Policy Center. Governance and policy ownership make up the majority of this role’s scope. The remainder of the role will be a key stakeholder in risk management operations, including managing the risk register, performing risk assessments, and risk exception administration. Lastly, this role will also include general compliance support such as audit readiness, control evaluation, and issue remediation.

The ideal candidate will have the mindset of an auditor with keen attention to detail, possess exceptional skills in project management, be a good communicator who excels at explaining complex technology to diverse audiences in a way that fosters understanding and ownership, has strong collaboration and business sense, and an adept awareness of our customers’ requirements of Abnormal as a leading cybersecurity SaaS provider.

Who You Are

• Proven security experience in an audit or advisory capacity
• Analytical thinker who exercises good business judgment and resolves ambiguous or judgment call questions without direction
• Resolves multi-framework or complex audit questions where the path isn’t obvious, and designs an approach when standard procedure falls short and brings a recommendation to the table, not just a problem, and knows when to loop in Legal or Security to get it right
• Confidence and willingness to ask questions, raise issues, and concerns in a timely manner
• Comfortable owning and running cross-functional governance committees (e.g., AI Governance, Data Governance, Security Governance), setting agendas, driving decisions, and following through on action items without needing to be chased
• Experienced managing a policy program end to end. Authoring, revising, and defending policy positions to stakeholders, not just administering logistics
• High attention to detail, process, and organization with strong project management skills to ensure accountability and results
• Acts as a trusted partner to other Abnormal teams and external auditors on their domain, leading structured discussions grounded in evidence rather than assumption, and represents the function credibly in auditor-facing settings
• Comfortable interpreting requirements in business context rather than taking a control requirement at face value, and anticipating how upstream changes affect compliance posture
• Ability to adapt to change, including evolving business and technical environments, and manage multiple priorities while meeting deadlines in a fast-paced environment
• Team player, collaborative work style
• Self-motivated and able to work efficiently with minimal oversight/direction
• Owns outcomes rather than activity — accountable for a compliance domain end to end, including audit outcomes and remediation tracking

What You Will Do

• Own and run Abnormal’s governance committees  including AI Governance, Data Governance, Security Governance, and any additional governance programs the business needs. Running these committees will include setting agendas, facilitating cross-functional stakeholders, and driving decisions to closure.

• Hold end-to-end ownership of the policy program, including drafting, revising, and maintaining policies across governance domains, and driving stakeholder review and acknowledgment. Manage the company’s Policy Center which hosts all enterprise policies.Own risk management operations, including the risk register, risk assessments, and administration of risk exceptions, including enforcing the 12-month exception cap with mandatory renewal review and required documentation.

• Keep abreast of regulatory and industry developments and advise leadership on the potential impact on the program strategy and plans.

• Ensure program activities align with strategy and manage the timely and high-quality execution of GRC landmarks.

• Drive internal control effectiveness through rigorous internal control monitoring, implementing control enhancements, and providing thought leadership on control design, operations, and supporting processes and policies.

• Perform compliance readiness assessments and provide updates, recommendations, and roadmap to senior management both within Security and to our business partners.

• Advise, educate, and train process and control owners with the preparation and ongoing maintenance of controls and control documentation (e.g., policies, procedures, narratives, and matrices) to better understand the security controls framework and their responsibilities.

• Recommend, develop, and manage the company’s risk register, including the definition and reporting on key risk indicators (KRIs) and key performance indicators (KPIs).

• Conduct regular risk assessments and work with relevant departments to identify, evaluate, and mitigate risks across the organization.

• Advise, educate, and train risk owners with the identification, assessment, mitigation, and monitoring of risks to better understand the risk management process and their responsibilities.

• Proactively identify gaps or conflicts in existing policies and processes and work to develop solutions with internal business partners.

• Drive remediation and risk mitigation activities, including root cause analysis and owning the design, tracking, and progress of action plans across compliance, policy, or process gap remediation activities and risk mitigation activities in partnership with internal business partners. Tracks risk trends across cycles and flags recurring patterns before they become repeat findings.

• Design and manage program operations to support the program goals and implement and maintain technology to support the program and its operations.

• Engage in ad-hoc projects as required.

• Maintain regular, clear communication with project teams, key partners, and management regarding the status of controls testing, audit progress, risk assessment progress, and progress of issues management.

• Effectively communicate program and project execution status, program health and effectiveness, key accomplishments, and risks to senior management both within Security and to our business partners.

Must Haves

• 4-7 years of experience in cyber security, technology risk, GRC, and/or technical compliance roles, with at least 2 years focused on ISO 27001 implementation and maintenance
• Demonstrated experience leading at least one full ISO 27001 certification cycle (including the 2022 revision of ISO 27001) from start to finish
• Proven project management experience, including: managing multiple concurrent compliance projects with competing deadlines; leading cross-functional teams across technical and business units; experience with project management methodologies (Agile, Waterfall) and tools (ServiceNow, etc.); and a track record of delivering complex compliance projects on time and within scope
• Experience owning or facilitating cross-functional governance programs or committees (e.g., AI governance, data governance, security governance), including running working groups and driving decisions with senior stakeholders
• Strong understanding of security concepts and practical usage, including Information Security Management System (ISMS) implementation and maintenance, control mapping across multiple frameworks, and continuous control monitoring and automation
• Experience implementing and managing compliance programs aligned with ISO 27001 and ISO 27701, including development and maintenance of Statement of Applicability, risk treatment plans and risk acceptance criteria, internal audit programs, and management review processes
• Proven track record working with external auditors, including internal stakeholder management
• Experience with audit automation and continuous control monitoring tools
• Proven ability to manage multiple stakeholders and vendors while maintaining project momentum

Nice to Have

• Bachelor’s degree or equivalent military experience
• ISO 27001, 27701, or 42001 Lead Auditor Certification
• CRISC, CISSP, CPA, CISA, PMP, CISM certification(s)
• Experience with NIST CSF, NIST SP 800-53 / 171 or other control frameworks
• Familiarity with AI governance frameworks (e.g., ISO/IEC 42001, NIST AI RMF)
• Experience preferably at a technology or SaaS / Cloud company and/or with a regulated public company
• 2+ years of Big 4 experience

#LI-ML1

Actual compensation will be determined based on several non-discriminatory factors including skills, experience, qualifications, and geographic location.

In addition to base salary, this role may be eligible for bonus or incentive compensation, equity, and a comprehensive benefits package.

Base salary range:

$114,800—$165,000 USD

A note on AI in our process: Abnormal AI uses AI-assisted tools to help our recruiting team prepare for candidate interviews. These tools analyze resume content and role requirements to suggest interview questions and areas for the interviewer to explore.They do not make hiring decisions or screen candidates automatically. Every decision about a candidacy is made by a person. Further, if your application is successful and Abnormal AI makes a conditional offer of employment, we will carry out pre-employment checks which must be successfully completed to progress to a final offer. All processes and pre-employment checks are in line with prevailing legislation and Abnormal AI’s policies relevant to our security and privacy standards.

Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please click here. If you would like more information on your EEO rights under the law, please click here.

Headquarters: Estonia - Remote

Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work.   Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you.   Our vision:  A world where everyone is free to focus on their most purposeful work, together.   

About the Role:

You'll work alongside diverse, cross-border teams and supportive colleagues who share knowledge and want to see you succeed. Salesforce, Marketo, Salesloft, and a growing web of integrated SaaS tools run large parts of Wrike's business. As that footprint grows, we're hiring a dedicated analyst to bring stronger visibility, governance, and risk understanding to this business systems estate — partnering closely with the teams who own and use these tools.

Your Impact:

• Own security for Wrike's business systems SaaS tools such as Salesforce, Marketo, Salesloft, and the integrations that connect them, covering permissions, sharing rules, connected apps, OAuth scopes, and integrations.
• Build and maintain clear visibility into what data lives in these systems, why it's there, and how it flows between integrated tools.
• Partner with RevOps, Marketing, Legal and others to embed security into how these platforms are configured, extended, and connected to third-party services.
• Translate security and business-continuity issues into clear, actionable terms for non-technical stakeholders.
• Ensure business systems handling personal data hold up against privacy frameworks including GDPR and CCPA, in close collaboration with Legal and Compliance.
• Chase data-flow and permission questions to ground truth which means following through until the answer and its implications are genuinely clear.

Your Qualifications:

Your primary expertise is in Salesforce administration and business systems security. Everything else listed here is context you'll operate in. Depth in the primary domain matters more than breadth across all of them.

• Salesforce administration experience with a strong security lens. This means permissions, sharing rules, connected apps, and integration patterns.
• Solid understanding of how business systems interconnect and why that matters for data exposure and business continuity.
• Able to communicate issues precisely to both technical and non-technical audiences.
• Working knowledge of privacy frameworks such as GDPR and CCPA at minimum.

You don't need to tick every box! We're looking for depth in business systems security and the drive to grow across the rest.

Standout Qualities:

• Certified Salesforce Administrator credential.
• Security+, ISC2 CC, or an equivalent security certification.
• Experience auditing or governing SaaS-to-SaaS integrations
• Exposure to data security posture management (DSPM) or data classification in SaaS environments.
• You use AI as a force multiplier — to move faster, think wider, and go deeper — but your security instincts and judgement are your own. You don't outsource thinking to a tool.
• Demonstrated tenacity in chasing complex data flows and access permissions across multi-tool integrations to a definitive answer.

Team Dynamics:

You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal.

Our Work Style:

• Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling.
• Collaborative environment working closely with RevOps, Legal, and Marketing teams.
• Hybrid mode.

Benefits & Perks:

• 28 calendar days of paid vacation
• Sick Leave Compensation (5 Paid Uncertified Sick Days)
• Parental Leave: 18 Weeks Maternity / 4 Week Paternity 
• 2 Volunteer Days
• Health Insurance (Employees + Dependents)
• Life Insurance Plan
• Utility Allowance (30 EUR/month, subject to taxation)
• Fitness Plan (800 EUR/year)
• Full-remote & On-demand access to Co-working space

What's Next?

• Recruiter Screen (30 mins)
• Department Interview / Technical Discussion (60 mins)
• Cultural Interview with Hiring Manager, CISO, and HRBP

Your recruitment buddy will be Aleksandar Chernev, Senior Technical Recruiter.

#LI-AC1 

 

Who Is Wrike and Our Culture

We’re a team of innovators and creators who solve the complex work problems of today and tomorrow.   Hybrid work mode
Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations.   While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection.

Our persona 

  Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched.   Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too!   Approachable: We're friendly, easy to get along with, considerate, and helpful. 

Our culture and Values 

Customer-Focused

We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind.

Collaborative

We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement.

Creative

We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. 

Committed

We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth.

  Check out our LinkedIn Life Page, Company culture page, Instagram, Wrike Engineering Team, Medium, Meetup.com, Youtube for a feel for what life is like at Wrike. 

To apply: https://weworkremotely.com/remote-jobs/wrike-business-systems-security-analyst

About Us

At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.

At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a “normalized” problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.

Available Locations: Austin,TX and Washington, D.C.

Role Summary

Cloudforce One is Cloudflare’s threat operations and research team, responsible for identifying and disrupting cyber threats ranging from sophisticated cyber criminal activity to nation-state sponsored advanced persistent threats (APTs).  Cloudforce One works in close partnership with external organizations and internal Cloudflare teams, continuously developing operational tradecraft and expanding ever-growing sources of threat intelligence to enable expedited threat hunting and remediation.  Members of Cloudforce One are at the helm of leveraging an incredibly vast and varied set of data points that only one of the world’s largest global networks can provide.  The team is able to analyze these unique data points, at massive scale and efficiency, synthesizing findings into actionable threat intelligence to better protect our customers.

As a Software Engineer on this team, you build and evolve systems that help security practitioners assess technical risk, investigate complex systems, prioritize issues, and deliver actionable guidance to engineering teams. You will be responsible for translating complex security requirements and investigative methods into robust, scalable, and high-performance applications that have a direct impact on making the internet better, safer, and more powerful every day.

Role Responsibilities

While the majority of our services are now written in Go and TypeScript, you will also work with technologies such as Rust, Kafka, Redis, Kubernetes, Terraform, and PostgreSQL. We also pride ourselves in dogfooding our own products and services so you will be extensively working with Cloudflare’s developer platform as well. We are looking for great engineers regardless of experience with any of these specific technologies.

Responsibilities include:

• Design, build, run, and scale distributed tools and services that translate security tradecraft into scalable, evidence-based systems and workflows.
• Partner with security practitioners to understand workflows, bottlenecks, and opportunities for automation.
• Improve system design and architecture to ensure stability, performance, and maintainability of both internal and customer-facing services.
• Analyze, communicate, and help prioritize complex technical concepts across teams.
• Mentor and guide other developers in the team, helping to build collective technical expertise and promote best practices for writing well-tested, modular, and reusable code.

This role may require flexibility to be on-call outside of standard working hours to address technical issues as needed.

Desirable Skills and Experience

• Working knowledge of cybersecurity concepts such as threat modeling, attack techniques, trust boundaries, exploitability, and defensive controls
• Familiarity with incident response workflows, network containment, and remediation
• Practical experience in vulnerability research/exploit development and translating findings into actionable mitigations
• Experience with AI-assisted development and designing agentic AI workflows
• At least 5 years of experience building large-scale software applications, preferably distributed systems
• Experience designing and integrating RESTful APIs and/or gRPC services
• Knowledge of SQL and common relational database systems such as PostgreSQL
• Ability to independently define and deliver solutions in ambiguous problem spaces
• Prior experience writing production-ready code in Go and/or TypeScript
• Excellent debugging and optimization skills
• Expertise in writing well-tested code
• Interest in opportunities to be a technical mentor for teammates

Bonus/Nice-to-Have Skills

• Application security, security research, or security automation experience
• Deep understanding of DNS, TLS/SSL and HTTP
• Experience evaluating probabilistic systems

Compensation

Compensation may be adjusted depending on work location.

• For Washington D.C. based hires: Estimated annual salary of $150,000 - $206,000

Equity

This role is eligible to participate in Cloudflare’s equity plan.

Benefits

Cloudflare offers a complete package of benefits and programs to support you and your family.  Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun!  The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.

Health & Welfare Benefits

• Medical/Rx Insurance
• Dental Insurance
• Vision Insurance
• Flexible Spending Accounts
• Commuter Spending Accounts
• Fertility & Family Forming Benefits
• On-demand mental health support and Employee Assistance Program
• Global Travel Medical Insurance

Financial Benefits

• Short and Long Term Disability Insurance
• Life & Accident Insurance
• 401(k) Retirement Savings Plan
• Employee Stock Participation Plan

Time Off

• Flexible paid time off covering vacation and sick leave
• Leave programs, including parental, pregnancy health, medical, and bereavement leave

What Makes Cloudflare Special?

We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.

Project Galileo: Since 2014, we’ve equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers–at no cost.

Athenian Project: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we’ve provided services to more than 425 local government election websites in 33 states.

1.1.1.1: We released1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers.

Sound like something you’d like to be a part of? We’d love to hear from you!

Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.  More details about this will be available at that stage of the interview process.

This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.

Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person’s, perceived or actualrace, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.

Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

We AreAccenture Security helps organizations prepare, protect, detect, respond, and recover along with all points of the security lifecycle.