{"version":"0.1","company":{"name":"YubHub","url":"https://yubhub.co","jobsUrl":"https://yubhub.co/jobs/skill/security-automation"},"x-facet":{"type":"skill","slug":"security-automation","display":"Security Automation","count":11},"x-feed-size-limit":100,"x-feed-sort":"enriched_at desc","x-feed-notice":"This feed contains at most 100 jobs (the most recently enriched). For the full corpus, use the paginated /stats/by-facet endpoint or /search.","x-generator":"yubhub-xml-generator","x-rights":"Free to redistribute with attribution: \"Data by YubHub (https://yubhub.co)\"","x-schema":"Each entry in `jobs` follows https://schema.org/JobPosting. YubHub-native raw fields carry `x-` prefix.","jobs":[{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_770c5fe8-cce"},"title":"Staff Security Engineer, Vulnerability Management","description":"<p>We are seeking a Staff Security Engineer to lead the most complex technical work in CoreWeave&#39;s Vulnerability Management program.</p>\n<p>As a Staff Security Engineer, you will design and implement scalable triage, prioritization, and remediation-tracking systems across application, infrastructure, and hardware domains. You will set technical standards, drive high-impact initiatives, and mentor engineers through technical leadership, while partnering with leadership on priorities and execution risks.</p>\n<p>Key Responsibilities:</p>\n<ul>\n<li>Lead high-complexity VM technical initiatives and deliver architecture decisions for assigned program areas</li>\n<li>Design and build scalable triage automation, including integrations, decision logic, and production hardening</li>\n<li>Implement end-to-end workflow components from assessment and detection to ticket routing and remediation tracking</li>\n<li>Provide deep technical leadership on hardware-adjacent vulnerabilities (GPU firmware, DPU firmware/BlueField, and BMC surfaces)</li>\n<li>Act as senior technical responder for embargoed disclosures and zero-day events, coordinating with owner teams that deploy fixes</li>\n<li>Improve prioritization logic, severity models, and exception workflows through code, design reviews, and technical proposals</li>\n<li>Produce actionable technical metrics and risk insights for leadership consumption</li>\n<li>Lead root-cause analysis for high-impact vulnerability incidents and implement durable technical improvements</li>\n<li>Mentor IC3/IC4/IC5 engineers through design guidance, code review, and incident coaching</li>\n<li>Partner with security, engineering, and operational stakeholders to improve workflow reliability and accelerate remediation outcomes</li>\n</ul>\n<p>Requirements:</p>\n<ul>\n<li>9+ years of relevant experience with demonstrated strategic impact in vulnerability management, application security, platform security, or cloud security engineering</li>\n<li>Proven track record building and scaling security automation (SOAR workflows, AI/ML systems, detection pipelines) in production environments</li>\n<li>Deep subject matter expertise with vulnerability management best practices: CVSS, EPSS, CISA KEV, threat intelligence integration, and risk-based prioritization frameworks</li>\n<li>Excellent development background with strong coding skills in Python, Go, or similar languages for building scalable, production-grade security systems</li>\n<li>Significant experience with modern vulnerability management tooling (for example Wiz, Semgrep, Rapid7, Tenable, or equivalent)</li>\n<li>Experience with specialized infrastructure: GPU/DPU environments, firmware security, hardware vulnerabilities, or high-performance computing</li>\n<li>Demonstrated track record mentoring engineers across levels and driving cross-functional technical initiatives at organizational scale</li>\n<li>Strong business acumen and understanding of how security decisions impact engineering velocity, customer trust, and business outcomes</li>\n</ul>\n<p>Preferred Qualifications:</p>\n<ul>\n<li>Practical experience building AI/ML-powered security systems (LLM integration, automated decision-making, human-in-the-loop validation) in production</li>\n<li>Experience managing hardware vendor security partnerships (embargoed disclosures and pre-release collaboration)</li>\n<li>Production experience with security automation platforms such as TINES and serverless frameworks (AWS Lambda, GCP Cloud Functions)</li>\n<li>Strong DevOps, DevSecOps, or SRE background with deep experience in AWS/GCP/Azure cloud services and Infrastructure as Code (Terraform, CloudFormation)</li>\n<li>Deep understanding of Kubernetes security (container scanning, admission controllers, supply chain security, runtime protection)</li>\n<li>Experience leading security programs through rapid hypergrowth (10x+ infrastructure scaling) in startup or cloud-native environments</li>\n<li>Practical experience managing vulnerabilities within a FedRAMP-certified environment or similar regulatory frameworks</li>\n</ul>\n<p>Salary and Benefits: The base salary range for this role is $188,000 to $275,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility).</p>\n<p>Work Environment:</p>\n<p>While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration.</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_770c5fe8-cce","directApply":true,"hiringOrganization":{"@type":"Organization","name":"CoreWeave","sameAs":"https://www.coreweave.com","logo":"https://logos.yubhub.co/coreweave.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/coreweave/jobs/4653130006","x-work-arrangement":"hybrid","x-experience-level":"staff","x-job-type":"full-time","x-salary-range":"$188,000 to $275,000","x-skills-required":["vulnerability management","application security","platform security","cloud security engineering","security automation","AI/ML systems","detection pipelines","Python","Go","modern vulnerability management tooling","GPU/DPU environments","firmware security","hardware vulnerabilities","high-performance computing"],"x-skills-preferred":["AI/ML-powered security systems","LLM integration","automated decision-making","human-in-the-loop validation","security automation platforms","TINES","serverless frameworks","AWS Lambda","GCP Cloud Functions","DevOps","DevSecOps","SRE","Kubernetes security","container scanning","admission controllers","supply chain security","runtime protection"],"datePosted":"2026-04-18T15:59:06.360Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Livingston, NJ / New York, NY / Sunnyvale, CA / Bellevue, WA"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"vulnerability management, application security, platform security, cloud security engineering, security automation, AI/ML systems, detection pipelines, Python, Go, modern vulnerability management tooling, GPU/DPU environments, firmware security, hardware vulnerabilities, high-performance computing, AI/ML-powered security systems, LLM integration, automated decision-making, human-in-the-loop validation, security automation platforms, TINES, serverless frameworks, AWS Lambda, GCP Cloud Functions, DevOps, DevSecOps, SRE, Kubernetes security, container scanning, admission controllers, supply chain security, runtime protection","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":188000,"maxValue":275000,"unitText":"YEAR"}}},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_7ad63033-e7e"},"title":"Senior Security Engineer I, Vulnerability Management","description":"<p>We are seeking a Senior Security Engineer I to join our Vulnerability Management team. This is an execution-focused role where you will perform hands-on triage, drive remediation follow-through, and improve day-to-day operational quality across cloud and specialized infrastructure environments.</p>\n<p>Key responsibilities include:</p>\n<ul>\n<li>Performing hands-on vulnerability triage and risk assessment using team-defined standards and playbooks</li>\n<li>Tracking remediation progress with owner teams, escalating blockers, and ensuring clean issue closure</li>\n<li>Supporting automated triage workflows by validating outputs and improving signal quality</li>\n<li>Contributing to automated remediation campaigns (e.g., EOL cleanup, vulnerable software upgrades, and fix verification)</li>\n<li>Supporting zero-day and embargo response by helping inventory affected assets and tracking owner-team deployment status</li>\n<li>Participating in incident investigations by gathering technical evidence and supporting impact analysis</li>\n<li>Participating in on-call rotation for critical vulnerability events</li>\n<li>Maintaining high-quality documentation, runbooks, and operational updates</li>\n</ul>\n<p>The ideal candidate will have 3+ years of relevant experience in vulnerability management, security operations, application security, or related security engineering. Key skills include a strong understanding of vulnerability assessment fundamentals, hands-on experience with vulnerability management platforms, proficiency in scripting/automation for workflow support, and familiarity with cloud security concepts.</p>\n<p>In addition to a competitive salary, we offer a variety of benefits to support your needs, including medical, dental, and vision insurance, 100% paid for by CoreWeave, company-paid life insurance, and flexible PTO.</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_7ad63033-e7e","directApply":true,"hiringOrganization":{"@type":"Organization","name":"CoreWeave","sameAs":"https://www.coreweave.com","logo":"https://logos.yubhub.co/coreweave.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/coreweave/jobs/4654263006","x-work-arrangement":"hybrid","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":"$139,000 to $204,000","x-skills-required":["vulnerability management","security operations","application security","vulnerability assessment fundamentals","vulnerability management platforms","scripting/automation for workflow support","cloud security concepts"],"x-skills-preferred":["security automation/SOAR platforms","container/Kubernetes vulnerability workflows","hardware-adjacent vulnerability domains","compliance evidence collection"],"datePosted":"2026-04-18T15:53:49.171Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Livingston, NJ / New York, NY / Sunnyvale, CA / Bellevue, WA"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"vulnerability management, security operations, application security, vulnerability assessment fundamentals, vulnerability management platforms, scripting/automation for workflow support, cloud security concepts, security automation/SOAR platforms, container/Kubernetes vulnerability workflows, hardware-adjacent vulnerability domains, compliance evidence collection","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":139000,"maxValue":204000,"unitText":"YEAR"}}},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_78ab6fa5-133"},"title":"Staff Security Engineer, Defensive Cyber Engineering","description":"<p>Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organisations to safely embrace this new era.</p>\n<p>This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We&#39;re all in on this mission. If you are too, let&#39;s talk.</p>\n<p>Join Okta’s Defensive Cyber Engineering team as a Staff Engineer responsible for safeguarding Okta’s environments. You’ll work closely with the Security, Business Technology Engineering and Product teams to implement and manage security solutions and ensure that core infrastructure applications are protecting our workforce, endpoints, and corporate data.</p>\n<p>A strong desire to make tools and people work together to solve complex security problems is central to this role. This approach mandates an engineering-first approach: maximising the utility of existing security tools before strategically building or buying new solutions to address any remaining security gaps.</p>\n<p>To execute this vision, you will combine your enterprise security expertise with your hands-on engineering skills, leveraging automation, policy-as-code, and cloud-native technologies to deliver scalable, resilient, and secure solutions. Your work will ultimately set standards for security best practices across the organisation and influence the architecture of business-critical systems.</p>\n<p>What you bring:</p>\n<ul>\n<li>Hands on experience with enterprise security tools such as Okta, Crowdstrike and Palo Alto suite covering EDR (Endpoint Detection and Response), CASB (Cloud Access Security Broker), DLP (Data Loss Prevention), MDM (Mobile Device Management), SASE (Secure Access Service Edge), and SSPM (SaaS Secure Posture Management) capabilities.</li>\n</ul>\n<ul>\n<li>Strong coding and scripting skills are required for building automation and custom tooling. Python experience is preferred, but proficiency in other languages (e.g., Bash, PowerShell, Go) is a plus.</li>\n</ul>\n<ul>\n<li>Proven track record automating security controls and workflows using a cloud-first approach</li>\n</ul>\n<ul>\n<li>Experience with Terraform and other infrastructure-as-code tools to orchestrate security infrastructure</li>\n</ul>\n<ul>\n<li>Familiarity with CI/CD pipelines for security automation and drift management</li>\n</ul>\n<ul>\n<li>Strong communication skills across technical staff, support teams, executive leadership, and external vendors.</li>\n</ul>\n<p>What you’ll be doing:</p>\n<ul>\n<li>Serve as a security subject matter expert (SME) for solution engineering, architecture reviews, security assessment, and vulnerability mitigation</li>\n</ul>\n<ul>\n<li>Lead technical efforts evaluating, designing, and implementing new enterprise security systems and feature enhancements</li>\n</ul>\n<ul>\n<li>Build, maintain, and enhance custom automation and cloud infrastructure using Terraform or similar tools to support team workflows and the enforcement of security controls</li>\n</ul>\n<ul>\n<li>Develop integrations with APIs, cloud platforms (AWS, GCP, Azure), and security infrastructure to improve detection, response, and remediation</li>\n</ul>\n<ul>\n<li>Collaborate with cross-functional teams to tackle global technology and security challenges</li>\n</ul>\n<ul>\n<li>Write and maintain scripts and automation to streamline security operations, with an emphasis on Python-based solutions</li>\n</ul>\n<ul>\n<li>Establish monitoring and alerting for security posture, misconfigurations, and threats across endpoints, SaaS, and cloud workloads</li>\n</ul>\n<ul>\n<li>Proactively identify and remediate security gaps; stay updated on emerging threats, solutions, and tooling across the industry</li>\n</ul>\n<p>And extra credit if you have experience in any of the following!</p>\n<ul>\n<li>Working with advanced identity management technologies (MFA, SAML, OAuth, OIDC, WebAuthn)</li>\n</ul>\n<ul>\n<li>Deep understanding of Okta&#39;s ecosystem, including advanced configuration and integrations</li>\n</ul>\n<ul>\n<li>Experience with continuous compliance solutions (e.g., policy-as-code, automated evidence gathering)</li>\n</ul>\n<p>What you can look forward to as an Full-Time Okta employee!</p>\n<p>World-class benefits, flexibility, and growth opportunities</p>\n<p>The chance to shape the security posture of a global leader in identity</p>\n<p>Opportunities to make a social Impact through technology and innovation</p>\n<p>Ready to join Okta and make security the foundation of our innovation? Apply today!</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_78ab6fa5-133","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Okta","sameAs":"https://www.okta.com/","logo":"https://logos.yubhub.co/okta.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/okta/jobs/7476261","x-work-arrangement":"hybrid","x-experience-level":"staff","x-job-type":"full-time","x-salary-range":"$141,000-$211,000 CAD","x-skills-required":["Enterprise security tools","Okta","Crowdstrike","Palo Alto suite","EDR","CASB","DLP","MDM","SASE","SSPM","Python","Bash","PowerShell","Go","Terraform","Infrastructure-as-code tools","CI/CD pipelines","Security automation","Drift management"],"x-skills-preferred":["Advanced identity management technologies","Okta's ecosystem","Continuous compliance solutions"],"datePosted":"2026-04-18T15:52:38.855Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Toronto, Ontario, Canada; Vancouver, Canada"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"Enterprise security tools, Okta, Crowdstrike, Palo Alto suite, EDR, CASB, DLP, MDM, SASE, SSPM, Python, Bash, PowerShell, Go, Terraform, Infrastructure-as-code tools, CI/CD pipelines, Security automation, Drift management, Advanced identity management technologies, Okta's ecosystem, Continuous compliance solutions","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":141000,"maxValue":211000,"unitText":"YEAR"}}},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_ee8b8728-edf"},"title":"Security Engineer - Detection & Response","description":"<p>As a Security Engineer - Detection &amp; Response at xAI, you will lead day-to-day security threat management, identify and manage potential incidents, and work with partner teams on known or suspected security threats. You will support threat intelligence, threat hunting, intrusion detection, and incident response efforts that adhere to, and push forward, best practices.</p>\n<p>Responsibilities:</p>\n<ul>\n<li>Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar are preferred.</li>\n<li>Drive continual improvement in processes, procedures, and automations to improve the quality and effectiveness of the team.</li>\n<li>Participate in a 24/7 on-call rotation performing security incident response.</li>\n<li>Commandeering security incidents and updating stakeholders.</li>\n<li>Identify and develop new detection use cases and optimize existing detections.</li>\n<li>Collaborate on technical directions and solutions with other teams.</li>\n<li>Research and analyze patterns in security events across X&#39;s global infrastructure.</li>\n<li>Identify, design, and lead threat hunting missions to quantify and reduce threats.</li>\n<li>Manage and support the log collection, security scanning, intrusion detection, and other security-related systems.</li>\n<li>Design and assist in the development of automation to reduce false positives and handle events automatically.</li>\n<li>Analyze the security posture of systems via testing and vulnerability impact analysis.</li>\n</ul>\n<p>Basic Qualifications:</p>\n<ul>\n<li>2+ years of relevant information security experience.</li>\n<li>Self-starter, can receive a task and execute with minimal supervision.</li>\n<li>Strong Python scripting skills for implementing security automation.</li>\n<li>Knowledge of networking and macOS, Windows, or Linux operating systems.</li>\n<li>Knowledge of cloud security fundamentals and practices (vendor agnostic).</li>\n<li>Experience managing and/or deploying security technology.</li>\n<li>Experience with building queries and dashboards for security monitoring.</li>\n<li>Knowledge of current threats and techniques and a desire to research and learn more.</li>\n<li>Experience with malware analysis, forensics, or penetration testing.</li>\n<li>Problem-solving skills or experience with troubleshooting.</li>\n</ul>\n<p>ITAR Requirements:</p>\n<p>To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.</p>\n<p>Preferred Skills and Experience:</p>\n<ul>\n<li>Elastic / OpenSearch or similar platforms.</li>\n<li>Open Source security automation tooling.</li>\n</ul>\n<p>Compensation and Benefits:</p>\n<p>$180,000 - $440,000 USD. Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short &amp; long-term disability insurance, life insurance, and various other discounts and perks.</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_ee8b8728-edf","directApply":true,"hiringOrganization":{"@type":"Organization","name":"xAI","sameAs":"https://www.xai.com/","logo":"https://logos.yubhub.co/xai.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/xai/jobs/5008186007","x-work-arrangement":"onsite","x-experience-level":"mid","x-job-type":"full-time","x-salary-range":"$180,000 - $440,000 USD","x-skills-required":["CISA","CRISC","CGEIT","Security+","CASP+","Python","Networking","macOS","Windows","Linux","Cloud Security","Security Technology","Malware Analysis","Forensics","Penetration Testing"],"x-skills-preferred":["Elastic","OpenSearch","Open Source Security Automation Tooling"],"datePosted":"2026-04-18T15:51:35.367Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"New York, NY; Palo Alto, CA"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"CISA, CRISC, CGEIT, Security+, CASP+, Python, Networking, macOS, Windows, Linux, Cloud Security, Security Technology, Malware Analysis, Forensics, Penetration Testing, Elastic, OpenSearch, Open Source Security Automation Tooling","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":180000,"maxValue":440000,"unitText":"YEAR"}}},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_9e667b9c-eb8"},"title":"Senior Security Engineer II, Vulnerability Management","description":"<p>We are seeking a Senior Security Engineer to build the Vulnerability Management program protecting CoreWeave&#39;s AI infrastructure. You will architect intelligent automation systems that defend the GPU clusters powering breakthrough AI research and enterprise AI applications.</p>\n<p>This role combines technical depth, strategic thinking, and the autonomy to design workflows that will protect infrastructure driving the future of AI.</p>\n<p><strong>Key Responsibilities:</strong></p>\n<ul>\n<li>Build and scale AI-powered triage workflows: evaluate tools (LLM integration, TINES orchestration), architect solutions, and deploy to production</li>\n<li>Drive intelligent, risk-based vulnerability prioritization while simultaneously training AI models,your assessments become the foundation for automation</li>\n<li>Influence automation priorities: recommend which areas of the vulnerability pipeline would most benefit from automation to improve team efficiency</li>\n<li>Design and implement automated detection-to-ticket pipelines: build workflows that generate vulnerability detections, test them, scale across the environment, and auto-create Jira tickets</li>\n<li>Execute remediation campaigns: build automated workflows for EOL product removal, vulnerable software upgrades, and OS migrations at scale</li>\n<li>Manage embargoed vendor disclosures from hardware partners, including embargo verification and zero-day response coordination</li>\n<li>Lead security incident investigations related to high-profile vulnerabilities, coordinating cross-functional response and impact assessment</li>\n<li>Participate in on-call rotation for rapid-response vulnerability analysis during active zero-day events or critical security incidents</li>\n<li>Partner with IT, Infrastructure, and Engineering teams to drive remediation efforts, enforce SLAs, and escalate blockers strategically</li>\n<li>Write daily operations reports documenting vulnerability trends, remediation velocity, and emerging threats for security leadership</li>\n<li>Drive process improvements and workflow automation to improve operational efficiency and reduce manual toil</li>\n</ul>\n<p><strong>Requirements:</strong></p>\n<ul>\n<li>7+ years of relevant experience with demonstrated impact in vulnerability management, application security, platform security, or cloud security engineering</li>\n<li>Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent practical experience</li>\n<li>Proven hands-on experience building security automation (SOAR workflows, detection pipelines, or vulnerability prioritization frameworks)</li>\n<li>Deep subject matter expertise with vulnerability management best practices: CVSS, EPSS, CISA KEV, exploit intelligence, and compensating controls</li>\n<li>Strong development background with proficiency in Python, Go, or similar languages for building production-grade security tools</li>\n<li>Experience with modern vulnerability management tooling such as Wiz, Semgrep, Rapid7, or similar platforms</li>\n<li>Demonstrated ability to partner with cross-functional teams (IT, SRE, Engineering) to drive remediation without formal authority</li>\n<li>Strong familiarity with common security vulnerabilities and the ability to judge their severity and business impact</li>\n</ul>\n<p><strong>Preferred Qualifications:</strong></p>\n<ul>\n<li>Practical experience building AI/ML-powered security workflows (LLM integration, automated triage, human-in-the-loop validation)</li>\n<li>Experience managing hardware security vulnerabilities (GPU/DPU firmware, BMC/IPMI, specialized compute environments)</li>\n<li>Production experience with security automation platforms such as TINES, Splunk SOAR, or serverless frameworks (AWS Lambda)</li>\n<li>Strong DevOps, DevSecOps, or SRE background with experience in AWS/GCP/Azure cloud services and Infrastructure as Code (Terraform, CloudFormation)</li>\n<li>Deep understanding of container security and Kubernetes (image scanning, admission control, runtime protection, supply chain security)</li>\n<li>Experience supporting customer audits (SOC 2, ISO 27001, FedRAMP) with vulnerability evidence and control validation</li>\n<li>Experience integrating vulnerability management into modern CI/CD pipelines with a &#39;shift-left&#39; mentality</li>\n</ul>\n<p><strong>What We Offer:</strong></p>\n<p>The base salary range for this role is $165,000 to $242,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility).</p>\n<p>The range we’ve posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location.</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_9e667b9c-eb8","directApply":true,"hiringOrganization":{"@type":"Organization","name":"CoreWeave","sameAs":"https://www.coreweave.com","logo":"https://logos.yubhub.co/coreweave.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/coreweave/jobs/4650290006","x-work-arrangement":"hybrid","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":"$165,000 to $242,000","x-skills-required":["vulnerability management","application security","platform security","cloud security engineering","Python","Go","security automation","SOAR workflows","detection pipelines","vulnerability prioritization frameworks","CVSS","EPSS","CISA KEV","exploit intelligence","compensating controls","Wiz","Semgrep","Rapid7"],"x-skills-preferred":["AI/ML-powered security workflows","hardware security vulnerabilities","security automation platforms","DevOps","DevSecOps","SRE","container security","Kubernetes","customer audits","CI/CD pipelines"],"datePosted":"2026-04-18T15:48:06.696Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Livingston, NJ / New York, NY / Sunnyvale, CA / Bellevue, WA"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"vulnerability management, application security, platform security, cloud security engineering, Python, Go, security automation, SOAR workflows, detection pipelines, vulnerability prioritization frameworks, CVSS, EPSS, CISA KEV, exploit intelligence, compensating controls, Wiz, Semgrep, Rapid7, AI/ML-powered security workflows, hardware security vulnerabilities, security automation platforms, DevOps, DevSecOps, SRE, container security, Kubernetes, customer audits, CI/CD pipelines","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":165000,"maxValue":242000,"unitText":"YEAR"}}},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_bdf949b3-c66"},"title":"Databricks Enterprise Lead Security Architect -   Principal IT Software Engineer","description":"<p>We are seeking a highly skilled Lead Security Architect to join our team within Databricks IT. As a Lead Security Architect, you will be responsible for designing and implementing a secure and scalable architecture to protect our corporate assets. You will focus on key areas of IT security, including Identity and Access Management, Zero Trust architecture, and endpoint security, while also working to secure critical business applications and sensitive data.</p>\n<p>Your expertise will be crucial in building proactive security strategies that align with our business goals and protect the company from an ever-evolving threat landscape. This position demands deep expertise in security principles and a comprehensive understanding of the entire infrastructure stack and IAM systems to design robust, future-ready security solutions.</p>\n<p>You will be instrumental in safeguarding our systems&#39; resilience and integrity against ever-evolving cyber threats. You will play a critical role in shaping our security strategy for modern platforms across AWS, Azure, GCP, network infrastructure, storage, and SaaS solutions, help establish a strong least privilege (PoLP) model, providing specialized IAM expertise, and securely supporting SaaS with sensitive information (NHI).</p>\n<p>You will also be a key contributor in building our internal strategy for secure AI development. Additionally, you will support the secure integration of SaaS platforms such as Google Workspace, collaboration tools, and GTM systems, maintaining alignment with enterprise security standards.</p>\n<p>Close collaboration with cross-functional teams is essential to embed security throughout the technology stack.</p>\n<p>The impact you will have:</p>\n<ul>\n<li>Design and implement secure, scalable reference architectures for the Databricks IT across Cloud Infra (Compute, DBs, Network, Storage), SaaS, Custom Built Applications, Data &amp; AI systems.</li>\n<li>Establish and enforce security controls for: Core Security Areas: - Databricks Workspace Management: Workspace isolation, Unity Catalog for data governance.</li>\n<li>Secure Networking: VPC configs, PrivateLink, IP Allow Lists.</li>\n<li>Identity and Access Management (IAM): SSO, SCIM user provisioning, RBAC via Un, Strong MFA best practices for enterprise identities and customers.</li>\n<li>Data Encryption: At rest and in transit, customer-managed keys for critical assets.</li>\n<li>Data Exfiltration Prevention: Admin console settings, VPC endpoint controls.</li>\n<li>Cluster Security: User isolation, compliance with enhanced security monitoring/Compliance Security Profiles (HIPAA, PCI-DSS, FedRAMP).</li>\n<li>Offensive Security: Test and challenge the effectiveness of the organization’s security defenses by mimicking the tactics, techniques, and procedures used by actual attackers.</li>\n<li>Specialized Security Functions: - Non-human Identity Management: Design and implement secure authentication and authorization for automated systems (service accounts, API keys, machine identities), focusing on automation and integration with existing identity management systems.</li>\n<li>IAM Best Practices: Develop and document comprehensive Identity and Access Management policies, including user provisioning, de-provisioning, access reviews, privileged access management, and multi-factor authentication, ensuring security and compliance.</li>\n<li>Data Loss Prevention (DLP): Implement DLP solutions to identify, monitor, and protect sensitive data across endpoints, networks, and cloud environments, preventing unauthorized access, use, or transmission.</li>\n<li>SaaS Proxy Design and Implementation: Design and implement cloud-based proxies for SaaS applications (SASE solutions) to provide secure access, enforce security policies, monitor user activity, and protect against threats.</li>\n<li>Cloud Infrastructure Best Practices: Establish and document best practices for VPC configurations, cloud networking, and infrastructure as code using Terraform, ensuring secure network segmentation, routing, firewalls, and VPNs for consistent, automated, and secure deployments.</li>\n<li>Least Privilege Access for Data Security: Design and implement data security controls based on the principle of least privilege, ensuring users and systems have only the minimum necessary access through fine-grained controls, data classification, and regular access reviews.</li>\n<li>Guide internal IT on Databricks’ security and compliance certifications (SOC 2, ISO 27001/27017/27018, HIPAA, PCI-DSS, FedRAMP), and support security reviews/audits.</li>\n<li>Support incident response, vulnerability management, threat modeling, and red teaming using audit logs, cluster policies, and enhanced monitoring.</li>\n<li>Stay current on industry trends and emerging threats in GenAI, AI Agentic flow, MCPs to enhance security posture.</li>\n<li>Advise executive leadership on security architecture, risks, and mitigation.</li>\n<li>Mentor security engineers and developers on secure design and best practices.</li>\n</ul>\n<p>What we look for:</p>\n<ul>\n<li>Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field</li>\n<li>Master’s degree in Computer Science specifically in Information Security or a related discipline is strongly preferred</li>\n<li>Minimum 12 years in cybersecurity, with 5+ in security architecture or senior technical roles.</li>\n<li>Experience in FedRAMP High systems/ GovCloud preferred.</li>\n<li>Must have direct experience designing and securing enterprise platforms in complex multi-cloud environments, deep knowledge of enterprise architecture and security features (control plane/data plane separation, network infra, workspace hardening, network segmentation/ isolation), and hands-on experience automating security controls with Terraform and scripting.</li>\n<li>Proven expertise securing data analytics pipelines, SaaS integrations, and workload isolation in enterprise ecosystems.</li>\n<li>Experience with Enterprise Security Analysis Tools and monitoring/security policy optimization.</li>\n<li>Deep experience in threat modeling, design, PoC, and implementing large-scale enterprise solutions.</li>\n<li>Extensive hands-on experience in AWS cloud security, network security, with knowledge of Zero Trust, Data Protection, and Appsec.</li>\n<li>Strong understanding of enterprise IAM systems (Okta, SailPoint, VDI, Entra ID) and Data Protection.</li>\n<li>Expert experience with SIEM platforms, XDR, and cloud-native threat detection tools.</li>\n<li>Expert in web application security, OWASP, API security, and secure design and testing.</li>\n<li>Hands-on experience with security automation is required, with proficiency in AI-assisted development, Python, Cursor, Lambda, Terraform, or comparable scripting/IaC tools for operational efficiency.</li>\n<li>Industry certifications like CISSP, CCSP, CEH, AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional, or AWS Certified Advanced Networking – Specialty (or equivalent) are preferred.</li>\n<li>Ability to influence stakeholders and drive alignment.</li>\n<li>Strategic thinker with a passion for security innovation, continuous improvement, and building scalable defenses.</li>\n</ul>\n<p>Pay Range Transparency</p>\n<p>Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipates utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above.</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_bdf949b3-c66","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Databricks","sameAs":"https://databricks.com","logo":"https://logos.yubhub.co/databricks.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/databricks/jobs/8207910002","x-work-arrangement":"onsite","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":null,"x-skills-required":["Security Architecture","Identity and Access Management","Zero Trust","Endpoint Security","Data Encryption","Data Exfiltration Prevention","Cluster Security","Offensive Security","Non-human Identity Management","IAM Best Practices","Data Loss Prevention","SaaS Proxy Design and Implementation","Cloud Infrastructure Best Practices","Least Privilege Access for Data Security","Guide internal IT on Databricks’ security and compliance certifications","Support incident response, vulnerability management, threat modeling, and red teaming","Stay current on industry trends and emerging threats in GenAI, AI Agentic flow, MCPs","Advise executive leadership on security architecture, risks, and mitigation","Mentor security engineers and developers on secure design and best practices"],"x-skills-preferred":["Terraform","Python","Cursor","Lambda","AWS cloud security","Network security","Data Protection","Appsec","SIEM platforms","XDR","cloud-native threat detection tools","Web application security","OWASP","API security","Secure design and testing","AI-assisted development","Security automation","Scripting/IaC tools","CISSP","CCSP","CEH","AWS Certified Security – Specialty","AWS Certified Solutions Architect – Professional","AWS Certified Advanced Networking – Specialty"],"datePosted":"2026-04-18T15:45:19.828Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mountain View, California; San Francisco, California"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"Security Architecture, Identity and Access Management, Zero Trust, Endpoint Security, Data Encryption, Data Exfiltration Prevention, Cluster Security, Offensive Security, Non-human Identity Management, IAM Best Practices, Data Loss Prevention, SaaS Proxy Design and Implementation, Cloud Infrastructure Best Practices, Least Privilege Access for Data Security, Guide internal IT on Databricks’ security and compliance certifications, Support incident response, vulnerability management, threat modeling, and red teaming, Stay current on industry trends and emerging threats in GenAI, AI Agentic flow, MCPs, Advise executive leadership on security architecture, risks, and mitigation, Mentor security engineers and developers on secure design and best practices, Terraform, Python, Cursor, Lambda, AWS cloud security, Network security, Data Protection, Appsec, SIEM platforms, XDR, cloud-native threat detection tools, Web application security, OWASP, API security, Secure design and testing, AI-assisted development, Security automation, Scripting/IaC tools, CISSP, CCSP, CEH, AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional, AWS Certified Advanced Networking – Specialty"},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_85f1ada0-78d"},"title":"Security Engineer","description":"<p>We&#39;re seeking a Security Engineer at the senior-level or above on our Security Operations team with strong detection engineering experience. You&#39;ll design and develop high-fidelity detection content, build and operate the data pipelines that power our security operations, develop automation playbooks that accelerate response, and work across a uniquely diverse telemetry landscape spanning cloud infrastructure, embedded vessel platforms, corporate systems, and operational technology.</p>\n<p>This role is heavily weighted toward detection engineering. You should think in terms of adversary behaviour and telemetry coverage, not just alert triage. You&#39;ll own detections end-to-end: from identifying gaps in coverage, through designing and testing detection logic, to tuning and validating in production.</p>\n<p>Key Responsibilities:</p>\n<ul>\n<li><p>Design, build, test, and tune high-fidelity detection rules and analytic queries across endpoint, cloud, network, identity, and DLP telemetry sources</p>\n</li>\n<li><p>Develop and maintain detection content using detection-as-code practices including version-controlled logic, automated testing, and CI/CD deployment</p>\n</li>\n<li><p>Map detection coverage to MITRE ATT&amp;CK, identify gaps, and prioritise new detection development based on threat intelligence and business risk</p>\n</li>\n<li><p>Engineer correlation rules, behavioural analytics, and anomaly-based detections that minimise false positives while surfacing real adversary tradecraft</p>\n</li>\n<li><p>Own the detection lifecycle from initial development through production tuning, performance monitoring, and retirement</p>\n</li>\n<li><p>Build and operate pipelines to ingest, normalise, enrich, and manage security telemetry at scale across diverse data sources, using Terraform and infrastructure-as-code practices to deploy and maintain logging and detection infrastructure</p>\n</li>\n<li><p>Design and maintain log collection, parsing, and enrichment configurations that ensure the right telemetry is available at the right fidelity for detection and investigation</p>\n</li>\n<li><p>Evaluate and onboard new telemetry sources as Saronic&#39;s infrastructure and threat landscape evolve</p>\n</li>\n<li><p>Monitor pipeline health, data quality, and ingestion reliability to ensure detections operate on complete and accurate data</p>\n</li>\n<li><p>Develop and manage automated response playbooks in SOAR platforms to accelerate containment and reduce analyst toil</p>\n</li>\n<li><p>Build automation that enriches alerts with contextual data, reducing investigation time and improving analyst decision-making</p>\n</li>\n<li><p>Support incident response efforts and translate lessons learned into improved detections and playbooks</p>\n</li>\n<li><p>Partner with SOC analysts, Cloud Security, Product Security, and IT teams to close visibility and detection gaps across environments</p>\n</li>\n<li><p>Collaborate with threat intelligence to ensure detection engineering is informed by current adversary TTPs relevant to defence, maritime, and autonomous systems</p>\n</li>\n</ul>\n<p>Required Qualifications:</p>\n<ul>\n<li><p>3+ years of hands-on experience in detection engineering, security operations, security automation, or a closely related security engineering role</p>\n</li>\n<li><p>Demonstrated experience designing, testing, and tuning detection rules and analytic queries across production security telemetry (endpoint, cloud, network, identity, or DLP)</p>\n</li>\n<li><p>Hands-on experience with SIEM platforms and proficiency with query languages such as SPL, KQL, or equivalent</p>\n</li>\n<li><p>Experience building and operating security data pipelines, including log ingestion, normalisation, enrichment, and data quality management</p>\n</li>\n<li><p>Understanding of data engineering concepts including ETL pipelines, data modelling, schema design, and indexing as applied to security telemetry</p>\n</li>\n<li><p>Hands-on coding experience in Python, PowerShell, Go, or Rust for security automation, detection tooling, or pipeline development, and familiarity with Terraform for managing detection and logging infrastructure as code</p>\n</li>\n<li><p>Understanding of MITRE ATT&amp;CK framework and its application to detection coverage and gap analysis</p>\n</li>\n<li><p>Ability to obtain and maintain a security clearance</p>\n</li>\n</ul>\n<p>Preferred Qualifications:</p>\n<ul>\n<li><p>Experience in defence, aerospace, robotics, autonomy, or other high-assurance environments</p>\n</li>\n<li><p>Experience with EDR platforms including custom detection rule creation and telemetry analysis</p>\n</li>\n<li><p>Experience with cloud-native detection in AWS and Microsoft 365/Azure</p>\n</li>\n<li><p>Experience using Terraform to deploy and manage security monitoring infrastructure, log pipeline components, or cloud-native security service configurations</p>\n</li>\n<li><p>Hands-on experience with incident response, threat hunting, or adversary emulation</p>\n</li>\n<li><p>Exposure to embedded Linux, operational technology, or ICS telemetry and detection</p>\n</li>\n<li><p>Familiarity with NIST SP 800-171, NIST SP 800-53, or CMMC and their logging and monitoring requirements</p>\n</li>\n<li><p>Relevant certifications such as GCIH, GCIA, GCDA, GSOM, OSDA, or OSCP</p>\n</li>\n</ul>\n<p>Additional Information:</p>\n<ul>\n<li><p>Benefits: Medical Insurance, Dental and Vision Insurance, Time Off, Parental Leave, Competitive Salary, Retirement Plan, Stock Options, Life and Disability Insurance, Pet Insurance</p>\n</li>\n<li><p>This role requires access to export-controlled information or items that require &#39;U.S. Person&#39; status.</p>\n</li>\n</ul>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_85f1ada0-78d","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Saronic Technologies","sameAs":"https://www.saronictechnologies.com/","logo":"https://logos.yubhub.co/saronictechnologies.com.png"},"x-apply-url":"https://jobs.lever.co/saronic/79424778-76c1-41c6-8385-cba5f6ddc50e","x-work-arrangement":"onsite","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":null,"x-skills-required":["detection engineering","security operations","security automation","SIEM platforms","query languages","data engineering","ETL pipelines","data modelling","schema design","indexing","Python","PowerShell","Go","Rust","Terraform","MITRE ATT&CK framework","security clearance"],"x-skills-preferred":["EDR platforms","cloud-native detection","incident response","threat hunting","adversary emulation","embedded Linux","operational technology","ICS telemetry","NIST SP 800-171","NIST SP 800-53","CMMC","GCIH","GCIA","GCDA","GSOM","OSDA","OSCP"],"datePosted":"2026-04-17T12:56:57.672Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"San Francisco"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"detection engineering, security operations, security automation, SIEM platforms, query languages, data engineering, ETL pipelines, data modelling, schema design, indexing, Python, PowerShell, Go, Rust, Terraform, MITRE ATT&CK framework, security clearance, EDR platforms, cloud-native detection, incident response, threat hunting, adversary emulation, embedded Linux, operational technology, ICS telemetry, NIST SP 800-171, NIST SP 800-53, CMMC, GCIH, GCIA, GCDA, GSOM, OSDA, OSCP"},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_abafedbd-d92"},"title":"CyberSecurity Engineer, DevSecOps","description":"<p>About Mistral At Mistral AI, we believe in the power of AI to simplify tasks, save time, and enhance learning and creativity. Our technology is designed to integrate seamlessly into daily working life. We democratize AI through high-performance, optimized, open-source and cutting-edge models, products and solutions. Our comprehensive AI platform is designed to meet enterprise needs, whether on-premises or in cloud environments. Our offerings include le Chat, the AI assistant for life and work. We are a team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between France, USA, UK, Germany and Singapore. We are creative, low-ego and team-spirited. Join us to be part of a pioneering company shaping the future of AI. Together, we can make a meaningful impact.</p>\n<p>Role summary Mistral AI is looking for a DevSecOps Engineer to architect and maintain the security posture of our rapidly scaling AI infrastructure and application lifecycle. You will treat security as a seamless enabler for our research and engineering teams. Your objective is to embed robust security controls into our CI/CD pipelines, infrastructure environments, and developer workflows, without compromising deployment velocity.</p>\n<p>Responsibilities\n• Drive threat modeling and risk prioritization exercises, serving as the security counterpart to system-design reviews for our core infrastructure and new products.\n• Own end-to-end vulnerability management across CI/CD pipelines and runtime environments, covering both underlying infrastructure and applications.\n• Secure our Kubernetes deployments and containerized workloads, implementing advanced pod and node hardening to prevent lateral movement across distributed systems.\n• Define and enforce Infrastructure-as-Code security by building robust Terraform guardrails and integrating policy-as-code directly into deployment pipelines.\n• Design and execute a comprehensive security tooling strategy, managing solutions for CNAPP, CSPM, SAST, SCA, secrets management, and SBOM-CVE tracking.\n• Champion developer enablement by building secure defaults, streamlining remediation workflows, and drafting actionable security guidelines.\n• Build foundational security automation to scale alongside hyper-growth, minimizing manual overhead while establishing a pragmatic security culture from the ground up.</p>\n<p>About you\n• 5+ years of experience in DevSecOps, Security Engineering, or Cloud Security, ideally acting as an early security hire in a fast-paced or hyper-scale environment.\n• Deep understanding of Kubernetes and container security, alongside strong experience securing Infrastructure-as-Code (Terraform) across major cloud providers.\n• Strong programming and scripting skills (Python, Go, or similar) to build security automation and seamlessly integrate diverse security tools into the developer workflow.\n• Extensive experience deploying and tuning modern security tooling with a pragmatic approach to vulnerability management and threat modeling.\n• Strong communication skills with a proven track record of partnering with developers and researchers to embed secure defaults without creating engineering friction.</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_abafedbd-d92","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Mistral AI","sameAs":"https://mistral.ai","logo":"https://logos.yubhub.co/mistral.ai.png"},"x-apply-url":"https://jobs.lever.co/mistral/94a331c8-0ddf-4e88-a6ad-7a70c212e0fa","x-work-arrangement":"onsite","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":null,"x-skills-required":["Kubernetes","container security","Infrastructure-as-Code","Terraform","DevSecOps","security engineering","cloud security","Python","Go","security automation","vulnerability management","threat modeling"],"x-skills-preferred":[],"datePosted":"2026-04-17T12:46:54.417Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Paris"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"Kubernetes, container security, Infrastructure-as-Code, Terraform, DevSecOps, security engineering, cloud security, Python, Go, security automation, vulnerability management, threat modeling"},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_4ad5f4fd-dc6"},"title":"Cybersecurity Engineering, Staff - Infrastructure Security","description":"<p>You are a passionate and forward-thinking security engineer who thrives in dynamic environments and embraces the challenge of securing complex, enterprise-scale infrastructures. With a deep technical background in cloud, network, endpoint, email, and SASE security, you are motivated by solving intricate security challenges and are committed to continuous learning in an ever-evolving threat landscape. Your expertise is backed by over six years of hands-on experience in infrastructure security, and you are adept at collaborating across teams to drive holistic security initiatives that safeguard both business and customer assets.</p>\n<p>You are detail-oriented, analytical, and have a proven track record of delivering robust security solutions that address both immediate risks and long-term strategic objectives. Your communication skills enable you to bridge the gap between technical and non-technical stakeholders, ensuring that security requirements are understood and implemented organization-wide. You value diversity and inclusion, welcoming perspectives from all backgrounds to foster creative problem-solving and innovation. You are energized by mentoring others, sharing your knowledge, and empowering teams to adopt best practices in security engineering and operations. If you are ready to make a significant impact, drive security excellence, and help shape the future of Synopsys&#39; infrastructure, we want to hear from you.</p>\n<p><strong>Responsibilities:</strong></p>\n<ul>\n<li>Design, implement, and manage security tools, automation, and metrics across cloud, network, endpoint, email, and SASE environments to ensure robust protection.</li>\n<li>Engineer and operationalize security processes and frameworks, aligning with enterprise security strategy and regulatory requirements.</li>\n<li>Consult with product and development teams to integrate security and privacy requirements into infrastructure solutions, safeguarding organizational and customer assets.</li>\n<li>Provide technical leadership and guidance in infrastructure security engineering, applying best practices and advocating for security at every stage of the product lifecycle.</li>\n<li>Research and develop next-generation security solutions, including the integration of AI-driven tools to enhance security reviews and streamline processes.</li>\n<li>Lead and participate in cross-functional security consulting engagements, delivering actionable recommendations and ensuring compliance with industry standards.</li>\n<li>Deliver security frameworks and documentation that inform the organization about emerging industry trends and solutions across multiple security pillars.</li>\n</ul>\n<p><strong>Impact:</strong></p>\n<ul>\n<li>Elevate Synopsys&#39; security posture by designing and operationalizing industry-leading infrastructure security solutions.</li>\n<li>Enable secure innovation and business agility by embedding security into the fabric of Synopsys&#39; products and services.</li>\n<li>Drive adoption of security automation and metrics, increasing efficiency and visibility across security operations</li>\n<li>Mentor and empower teams to adopt best practices, fostering a culture of security awareness and accountability.</li>\n<li>Ensure compliance with global regulations and standards, reducing organizational risk and enhancing customer trust.</li>\n<li>Champion the integration of cutting-edge technologies, such as AI, to stay ahead of emerging threats and industry trends.</li>\n<li>Shape the overall enterprise security strategy, contributing to Synopsys&#39; reputation as a market leader in secure technology solutions.</li>\n</ul>\n<p><strong>Requirements:</strong></p>\n<ul>\n<li>Bachelor’s degree in Computer Science, Information Security, or a related discipline, with over 6 years of relevant professional experience.</li>\n<li>Extensive hands-on experience in infrastructure security domains, including cloud, network, endpoint, email, and SASE security.</li>\n<li>Strong knowledge of security architecture, engineering, and assurance best practices across multiple security pillars.</li>\n<li>Proven ability to design and implement security automation and metrics for enterprise environments.</li>\n<li>Experience integrating AI-driven tools and methodologies into security processes a strong plus.</li>\n<li>Comprehensive understanding of U.S. and international security regulations and standards.</li>\n</ul>\n<p><strong>Team:</strong></p>\n<p>You will join the Synopsys Infrastructure Security Engineering team—a diverse, high-performing group of experts dedicated to enabling secure innovation across the enterprise. The team’s focus spans multiple security pillars, collaborating with stakeholders company-wide to deliver scalable, automated, and resilient security solutions. Together, you’ll tackle complex challenges, drive strategic initiatives, and ensure Synopsys remains at the forefront of infrastructure security excellence.</p>\n<p><strong>Rewards and Benefits:</strong></p>\n<p>We offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings. Your recruiter will provide more details about the salary range and benefits during the hiring process.</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_4ad5f4fd-dc6","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Synopsys","sameAs":"https://careers.synopsys.com","logo":"https://logos.yubhub.co/careers.synopsys.com.png"},"x-apply-url":"https://careers.synopsys.com/job/austin/cybersecurity-engineering-staff-infrastructure-security-canonsburg-pa-exton-pa-raleigh-nc-or-austin/44408/91386421808","x-work-arrangement":"onsite","x-experience-level":"staff","x-job-type":"full-time","x-salary-range":"$129000-$193000","x-skills-required":["cloud security","network security","endpoint security","email security","SASE security","security architecture","security engineering","security assurance","AI-driven tools","security automation","security metrics"],"x-skills-preferred":["security consulting","security frameworks","security documentation","emerging industry trends","cutting-edge technologies"],"datePosted":"2026-03-09T11:03:37.563Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Canonsburg, PA; Exton, PA; Raleigh, NC; OR Austin, TX"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"cloud security, network security, endpoint security, email security, SASE security, security architecture, security engineering, security assurance, AI-driven tools, security automation, security metrics, security consulting, security frameworks, security documentation, emerging industry trends, cutting-edge technologies","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":129000,"maxValue":193000,"unitText":"YEAR"}}},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_a634db45-4fd"},"title":"Security Engineer Lead, Corporate Security","description":"<p><strong>About the Role:</strong></p>\n<p>We’re looking for a Security Engineering Lead to own and drive Anthropic’s Corporate Security programme. This is a player-coach Tech Lead Manager (TLM) role: you’ll be both the most senior technical individual contributor on corporate security and the people leader for a lean, high-impact team of Security Engineers.</p>\n<p>Corporate Security at Anthropic encompasses everything that protects our people, endpoints, networks, SaaS ecosystem, and corporate data—the full surface area outside of production infrastructure. The scope is broad and the team is deliberately small, which means you’ll need deep technical skills across multiple domains, strong judgment about where to invest, and a bias toward automation and engineering-driven solutions over manual process.</p>\n<p>You’ll report into Security leadership and partner closely with IT, Infrastructure Security, Detection &amp; Response, and GRC teams. This role is high-visibility and high-autonomy: you’ll be expected to define the roadmap, make architectural decisions, and represent Corporate Security across the company.</p>\n<p><strong>Responsibilities:</strong></p>\n<p><strong>Technical Leadership &amp; Hands-on Engineering</strong></p>\n<ul>\n<li>Own the security architecture, tooling, and controls for Anthropic’s corporate environment end-to-end, including endpoint fleets (macOS, Windows, ChromeOS), campus and office networks, SaaS applications, mobile devices</li>\n<li>Design, build, and ship security automation, integrations, and internal tooling—including leveraging Claude and LLMs to accelerate security workflows</li>\n<li>Define and enforce security baselines, hardening standards, and configuration policies across all corporate platforms</li>\n<li>Define what it means to operate safely in an environment where AI agents act more like humans than actual humans</li>\n<li>Evaluate, select, deploy, and operate corporate security tools (EDR/XDR, MDM, ZTNA, CASB/SSPM, email security, DLP, browser security, etc.)</li>\n<li>Drive vulnerability management for corporate assets, including patch orchestration, risk-based prioritization, and exception management</li>\n<li>Lead security reviews of new SaaS adoptions, corporate infrastructure changes, and IT projects</li>\n</ul>\n<p><strong>People Leadership &amp; Team Building</strong></p>\n<ul>\n<li>Manage, mentor, and grow a purposefully lean team of Security Engineers; set clear expectations, run effective 1:1s, and create an environment where engineers do the best work of their careers</li>\n<li>Hire and build the team as scope expands—own the hiring bar and pipeline for Corporate Security Engineering roles</li>\n<li>Balance your own IC contributions with the team’s needs; know when to go deep on a problem yourself and when to delegate and coach</li>\n<li>Foster a culture of operational excellence, blameless incident review, and continuous improvement</li>\n</ul>\n<p><strong>Strategy &amp; Cross-Functional Partnership</strong></p>\n<ul>\n<li>Define and own the Corporate Security roadmap, aligning investments to Anthropic’s risk profile and growth trajectory</li>\n<li>Partner with IT Operations to ensure security is embedded in endpoint provisioning, network design, and SaaS lifecycle management</li>\n<li>Collaborate with Detection &amp; Response on telemetry coverage, detection engineering, and incident handling for corporate-sourced events</li>\n<li>Partner with Infrastructure and Security Engineering teams to ensure security standards are consistent across all of Anthropic</li>\n<li>Communicate security posture, risks, and investment needs to Security leadership and cross-functional stakeholders clearly and persuasively</li>\n</ul>\n<p><strong>You may be a good fit if you:</strong></p>\n<ul>\n<li>Have 8+ years of Security Engineering experience in a corporate/enterprise security domain (endpoint security, network security, SaaS security, identity, or a combination)</li>\n<li>Have 2+ years of experience managing or tech-leading a team of engineers, with a demonstrated track record of developing talent and shipping results through others</li>\n<li>Are a strong engineer who still writes code regularly—you can prototype a tool, write a detection, build an integration, or debug a complex configuration issue</li>\n<li>Have deep experience with macOS fleet security (this is our primary platform) and solid working knowledge of Windows and ChromeOS security</li>\n<li>Have hands-on experience deploying and operating EDR/XDR, MDM, ZTNA/zero trust, and identity security solutions at scale</li>\n<li>Understand modern SaaS security challenges: shadow IT, OAuth token sprawl, data exfiltration paths, SaaS-to-SaaS integrations, and SSPM/CASB tooling</li>\n<li>Can work independently with high autonomy, manage ambiguity, and make sound risk-based prioritization decisions in a fast-paced environment</li>\n<li>Have excellent communication skills and can translate complex security topics into clear recommendations for technical and non-technical audiences</li>\n</ul>\n<p>Strong candidates may have:</p>\n<ul>\n<li>Securing corporate environments at high-growth AI, cloud, or developer-tools companies</li>\n<li>Maturing a Corporate Security function from early stage, including defining scope, selecting the initial toolset, and hiring the founding team</li>\n<li>Advanced macOS security (system extensions, endpoint security framework, MDM profile engineering, Declarative Device Management)</li>\n<li>Network security architecture for hybrid/multi-office environments, including SD-WAN, ZTNA, DNS security, and network segmentation</li>\n<li>Browser security and isolation technologies (e.g., Island, Talon/Palo Alto, Chrome Enterprise)</li>\n<li>Proficiency in Python, Go, or similar languages for building sec</li>\n</ul>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_a634db45-4fd","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Anthropic","sameAs":"https://www.anthropic.com","logo":"https://logos.yubhub.co/anthropic.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/anthropic/jobs/5135098008","x-work-arrangement":"hybrid","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":null,"x-skills-required":["macOS fleet security","endpoint security","network security","SaaS security","identity security","EDR/XDR","MDM","ZTNA","CASB/SSPM","email security","DLP","browser security","patch orchestration","risk-based prioritization","exception management","security automation","integrations","internal tooling","Claude","LLMs","security baselines","hardening standards","configuration policies","vulnerability management","security reviews","IT projects","team management","team building","operational excellence","blameless incident review","continuous improvement","security roadmap","risk profile","growth trajectory","IT operations","endpoint provisioning","network design","SaaS lifecycle management","detection engineering","incident handling","infrastructure security","security engineering","security standards","communication","security posture","risks","investment needs"],"x-skills-preferred":["Python","Go","similar languages","macOS security","Windows security","ChromeOS security","advanced macOS security","system extensions","endpoint security framework","MDM profile engineering","Declarative Device Management","network security architecture","SD-WAN","ZTNA","DNS security","network segmentation","browser security and isolation technologies","Island","Talon/Palo Alto","Chrome Enterprise"],"datePosted":"2026-03-08T13:46:03.242Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"San Francisco, CA | New York City, NY"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"macOS fleet security, endpoint security, network security, SaaS security, identity security, EDR/XDR, MDM, ZTNA, CASB/SSPM, email security, DLP, browser security, patch orchestration, risk-based prioritization, exception management, security automation, integrations, internal tooling, Claude, LLMs, security baselines, hardening standards, configuration policies, vulnerability management, security reviews, IT projects, team management, team building, operational excellence, blameless incident review, continuous improvement, security roadmap, risk profile, growth trajectory, IT operations, endpoint provisioning, network design, SaaS lifecycle management, detection engineering, incident handling, infrastructure security, security engineering, security standards, communication, security posture, risks, investment needs, Python, Go, similar languages, macOS security, Windows security, ChromeOS security, advanced macOS security, system extensions, endpoint security framework, MDM profile engineering, Declarative Device Management, network security architecture, SD-WAN, ZTNA, DNS security, network segmentation, browser security and isolation technologies, Island, Talon/Palo Alto, Chrome Enterprise"},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_a100bbea-105"},"title":"Security Engineer, Detection and Response","description":"<p><strong>Security Engineer, Detection and Response</strong></p>\n<p><strong>About the Team</strong></p>\n<p>Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity.</p>\n<p>The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture.</p>\n<p><strong>About the Role</strong></p>\n<p>As a Security Engineer on Detection &amp; Response, you’ll help protect OpenAI’s most sensitive assets– including our intellectual property, customer data, and the infrastructure that supports them– by building and operating the systems we use to detect suspicious activity and respond effectively when it matters. You’ll work across endpoints, identity, cloud, hyperscale compute infrastructure, and datacenter-adjacent layers, partnering closely with security teams and infrastructure owners to define the telemetry and response requirements we need and building tooling and automation where it delivers the most leverage.</p>\n<p><strong>In this role, you will:</strong></p>\n<ul>\n<li>Build and evolve Detection &amp; Response capabilities across OpenAI’s infrastructure, products, and research environments, with an emphasis on high-signal detection and reliable operational response.</li>\n</ul>\n<ul>\n<li>Engineer detection pipelines and tooling: develop rule lifecycle management, measurement/quality loops (coverage, precision, latency), tuning processes, and safe rollout patterns.</li>\n</ul>\n<ul>\n<li>Automate response and investigations by building workflows that reduce toil (triage, enrichment, containment, evidence capture) and improve time-to-understand/time-to-contain.</li>\n</ul>\n<ul>\n<li>Partner with other Security teams and system/infrastructure owners across the company to ensure new systems ship with the right telemetry, threat models, and response playbooks from day one.</li>\n</ul>\n<ul>\n<li>Define D&amp;R requirements and drive visibility across endpoints, identity, SaaS, cloud, Kubernetes: identify telemetry/control gaps, prioritize them, and advocate for fixes with partner teams (and implement directly when it’s the fastest/most effective path).</li>\n</ul>\n<ul>\n<li>Evaluate and respond to emergent security concerns in a frontier AI lab environment, such as detection and response strategies for agents operating across infrastructure at scale.</li>\n</ul>\n<p><strong>You might thrive in this role if you:</strong></p>\n<ul>\n<li>Have hands-on threat detection and/or incident response experience, including building detections, running investigations, and improving operational playbooks.</li>\n</ul>\n<ul>\n<li>Understand modern adversary tradecraft (TTPs) and can translate it into practical detection strategies and response actions.</li>\n</ul>\n<ul>\n<li>Bring a threat modeling mindset. You can evaluate new infrastructure or features, identify D&amp;R implications (what could go wrong, what we’d need to see, how we’d respond), and turn that into concrete requirements for teams shipping the system.</li>\n</ul>\n<ul>\n<li>Have experience working in Kubernetes/containerized environments, including building detections from cluster telemetry and understanding common failure and attack modes (workloads, nodes, control plane, networking).</li>\n</ul>\n<ul>\n<li>Are comfortable reasoning about lower-level infrastructure and datacenter risks, such as firmware/BMC surfaces, network segmentation/telemetry, and hard-to-observe control paths.</li>\n</ul>\n<ul>\n<li>Have experience across major cloud platforms (Azure, AWS, GCP, OCI), and can design cloud-agnostic detection approaches where possible.</li>\n</ul>\n<ul>\n<li>Like building automation that replaces repetitive D&amp;R work, including thoughtfully using agent-style workflows where they meaningfully reduce toil, while keeping outcomes measurable, auditable, and safe.</li>\n</ul>\n<ul>\n<li>Are energized by new problem areas at a forward-leaning technology company: e.g., thinking through how to detect and respond to agents operating across systems at scale, and turning those ideas into pragmatic telemetry and response requirements.</li>\n</ul>\n<ul>\n<li>Communicate clearly and collaborate well across teams. You can translate D&amp;R needs into clear requirements, align stakeholders, and drive follow-through across technical and non-technical audiences.</li>\n</ul>\n<ul>\n<li>Are comfortable with scripting and enjoy using AI/agent tooling to accelerate investigations and automation—more “directing” than doing everything by hand.</li>\n</ul>\n<p><strong>About OpenAI</strong></p>\n<p>OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_a100bbea-105","directApply":true,"hiringOrganization":{"@type":"Organization","name":"OpenAI","sameAs":"https://jobs.ashbyhq.com","logo":"https://logos.yubhub.co/openai.com.png"},"x-apply-url":"https://jobs.ashbyhq.com/openai/3728b144-f640-42be-84af-94f6b0743d7c","x-work-arrangement":"hybrid","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":"Competitive salary and benefits package","x-skills-required":["threat detection","incident response","Kubernetes","cloud platforms","scripting","AI/agent tooling","security automation","threat modeling","adversary tradecraft"],"x-skills-preferred":["cloud-agnostic detection","network segmentation","firmware/BMC surfaces","datacenter risks","containerized environments","cloud platforms","security orchestration","incident response automation"],"datePosted":"2026-03-06T18:30:38.077Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Sydney, Australia; Singapore; Tokyo, Japan"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"threat detection, incident response, Kubernetes, cloud platforms, scripting, AI/agent tooling, security automation, threat modeling, adversary tradecraft, cloud-agnostic detection, network segmentation, firmware/BMC surfaces, datacenter risks, containerized environments, cloud platforms, security orchestration, incident response automation"}]}