Vulnerability Jobs

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Software Engineer Job Type: Full-time Location: Ft. Meade, MD Clearance Requirements: Active TS/SCI with Polygraph required Work Schedule: 5 days per week onsite Travel Requirements: None Experience: 14+ years WHAT YOU'LL DO We are seeking a Software Engineer to support the implementation, troubleshooting, maintenance, and ongoing support of agile software development efforts focused on modernizing systems. This role requires applying advanced software engineering principles, theories, and concepts while contributing to the development of new approaches and solutions. The ideal candidate will tackle highly complex technical challenges, operate with significant autonomy, and provide technical leadership and mentorship to team members when needed. KEY RESPONSIBILITIES Software Development Design, develop, modify, and implement software applications using agile development methodologies. Write source code for new applications and enhance existing software solutions. Utilize both front-end and back-end technologies to develop complete software solutions. Support the modernization, maintenance, and enhancement of existing systems. Engineering & Technical Problem Solving Apply advanced software engineering principles to solve complex technical challenges. Develop innovative approaches and solutions to meet mission requirements. Contribute to software architecture, integration efforts, and application development activities. Collaborate across cross-functional teams to deliver effective solutions. Team Collaboration & Leadership Work closely with technical teams in a

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Systems Engineer Job Type: Full-time Location: Columbia, MD Clearance Requirements: Active TS/SCI with Polygraph required (U.S. Citizen Only) Work Schedule: 5 days per week onsite Experience: 10+ WHAT YOU'LL DO We are seeking a Systems Engineer with a diverse set of technical skills and the ability to adapt to unique mission requirements. The selected candidate will support projects focused on developing and implementing next-generation IT tools, systems, and capabilities while providing technical leadership throughout the engineering lifecycle. This role requires end-to-end responsibility for applied research and cyber capability development efforts, ensuring successful execution from concept through implementation. KEY RESPONSIBILITIES Systems Engineering Evaluate, develop, and deliver technical input to the systems engineering process. Develop technical documentation, system architecture, and system design documentation. Guide system development and implementation planning through system engineering management plans and system integration and test plans. Provide engineering guidance throughout the project lifecycle. Technical Leadership & Coordination Coordinate with administrators, engineers, developers, testers, government stakeholders, and mission partners. Interact with government representatives regarding technical considerations, issues, and conflicts. Establish effective working relationships with government agencies and mission partners. Deliver briefings on complex topics to technical and executive audiences. Research & Capability Development Suppor

About the Team The Human Data team at OpenAI is responsible for identifying and mitigating risks in advanced AI systems by designing evaluations, surfacing vulnerabilities, and collaborating closely with researchers to strengthen model reliability and public trust. About the Role As a Research Program Manager, you will lead initiatives that test the safety and robustness of OpenAI’s models through creative experimentation and structured evaluation. You’ll coordinate efforts across research and engineering teams to transform ambiguous risks into concrete research programs and influence future model development and deployment. We’re looking for people who are technically savvy, comfortable with ambiguity, and excited about shaping the future of safe AI. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Lead programs that explore unexpected model behaviors and identify failure modes. Translate vague or emergent risk signals into clear priorities and actionable research plans. Design and run creative evaluations, experiments, and red-teaming campaigns. Collaborate with research, product, and deployment teams to integrate findings into model training and deployment cycles. Develop repeatable systems for tracking model performance and understanding emerging behavior patterns. You might thrive in this role if you: Have strong experience in technical program management, with excellent organizational and communication skills. Are familiar with large language models, prompt engineering, or model evaluation techniques. Are comfortable managing fast-paced, high-uncertainty projects and shaping them from the ground up. Are creative and resourceful in devising new methods for testing model behavior and performance. Can effectively coordinate across technical and non-technical stakeholders to drive alignment and execution. About OpenAI OpenAI is an AI resear

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Senior Red Team Operator Job Type: Full Time Location: Hybrid (onsite 1/x week) -Washington D.C. Clearance Requirements: None Travel: Up to 10% ABOUT THE TEAM SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You’ll work with our highly skilled operators conducting research and assessments based on real-world threats. You’ll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you’ll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent. WHAT YOU'LL DO Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities. Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs). Develop and use custom tools and methods to evade detection and maintain stealth during engagements. Collaborate with blue and purple teams to improve detection, response, and overall security posture. Document findings and deliver clear, actionable reports to technical and executive stakeholders. REQUIRED QUALIFICATIONS US Citizen with the ability to obtain a Public Trust clearance. CRTO certification. CRTL, OSEP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required. Extensive Red Team Experience: Minimum 6 years of hands-on technical red te

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. Position: Software Engineer Job Type: Full Time Location: Onsite, Ft-Meade, MD Clearance Requirements: TS/SCI w/ Poly Travel: None ABOUT THE TEAM SIXGEN supports missions by serving government and commercial organizations as they overcome global cybersecurity challenges. In this position, you’ll provide meaningful support to our customer’s missions and operations. You’ll work alongside a team of highly skilled operators who are dedicated to using innovative processes, tools, and techniques to get things done. WHAT YOU’LL DO Design, develop, test, and deploy software applications and systems in support of government and customer missions. Collaborate with systems engineers, analysts, and end users to understand technical requirements and translate them into software solutions. Write clean, efficient, and maintainable code using modern programming languages and development practices. Support integration, debugging, and testing activities in both lab and operational environments. Ensure software meets security, performance, and reliability standards, in compliance with government policies and frameworks. REQUIRED QUALIFICATIONS US Citizen with the ability to obtain a US Government Security clearance up to the Secret or TS level Proficiency in one or more programming languages such as Python, C++, Java, or C. Experience developing software in Linux-based environments. Familiarity with secure coding practices and software lifecycle principles. Strong problem-solving skills and the ability to work independently or as part of a collaborative team. Experience supporting DoD, IC, o

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Red Team Operator Job Type: Full Time Location: On-site 1x/week in Washington DC Clearance Requirements: None, but Public Trust preferred Travel: None ABOUT THE TEAM SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You’ll work with our highly skilled operators conducting research and assessments based on real-world threats. You’ll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you’ll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent. WHAT YOU'LL DO Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities. Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs). Develop and use custom tools and methods to evade detection and maintain stealth during engagements. Collaborate with blue and purple teams to improve detection, response, and overall security posture. Document findings and deliver clear, actionable reports to technical and executive stakeholders. REQUIRED QUALIFICATIONS US Citizen with the ability to obtain a Public Trust clearance. CRTO certification (or ability to earn within 3 months of hire). OSCP and/or GPEN certifications. Technical experience (4+ years each): Hands on red tea

Cloud Operations Engineer — Linux & Kubernetes Location: United Kingdom — 100% Remote. Preference will be given to candidates based in London or the surrounding area. Employment Type: Full-time Team: DevOps / Site Reliability Engineering Role Type: Individual Contributor Experience: Minimum 5 years of relevant hands-on experience; typically 5–7+ years About RapidFort RapidFort helps organisations secure their software supply chains, reduce software vulnerabilities, and minimise the attack surface of containerised applications. We are looking for an experienced Cloud Operations Engineer with strong Linux, Kubernetes, and Bash skills to support the production and delivery environments behind our SaaS platform. The Role This is a hands-on individual contributor position for an engineer who can independently investigate production issues, manage deployments, respond to incidents, and take ownership of operational requests. You will support the day-to-day operation of our platform while improving automation, monitoring, documentation, and operational processes. You should be comfortable troubleshooting beyond documented runbooks, gathering diagnostic evidence, and exercising sound judgment about remediation and escalation. You will work closely with our DevOps, SRE, and Development teams within a follow-the-sun operational model, initially covering India and Europe. This position supports scheduled European coverage and participates in an on-call rotation. Key Responsibilities Monitor production and SaaS environments, respond to alerts, and proactively investigate potential issues. Troubleshoot Linux, Kubernetes, application, and cloud infrastructure problems using logs, metrics, events, and diagnostic tools. Investigate failed or restarting workloads, deployment failures, resource constraints, configuration problems, and service connectivity issues. Execute application and platform deployments using established processes and tooling. Trigger, monitor, and troublesho

Procurement & Vendor Management Manager RapidFort | Palo Alto / San Francisco Bay Area — Hybrid Department: Finance Reports to: VP of Finance Employment type: Full-time, Exempt Base salary: $145,000–$165,000 annually Target bonus: 10% of base salary Equity: Eligible for stock options based on level and experience About RapidFort RapidFort is a cybersecurity company helping organisations secure their software supply chains, reduce vulnerabilities, and minimise the attack surface of containerised applications. As we grow, we are looking for a hands-on Procurement & Vendor Management Manager to build and manage the processes behind our purchasing, vendor relationships, and commercial commitments. The Opportunity You will own the vendor lifecycle—from sourcing and negotiation through contracting, onboarding, renewals, performance monitoring, and offboarding. Reporting to the VP of Finance, you will partner with IT, Security, Legal, Accounting, and department leaders to help RapidFort make informed purchasing decisions, strengthen financial controls, and get greater value from its vendor relationships. This role combines strategic negotiation with day-to-day execution. You should be comfortable building processes in a growing technology company and personally managing the details that keep purchasing and vendor operations running smoothly. What You Will Do Procurement & Strategic Sourcing Manage purchasing across software, cloud infrastructure, professional services, consulting, recruiting, marketing, facilities, and other operating needs. Partner with department leaders to define requirements, evaluate vendors, and assess commercial options. Lead competitive bids, requests for proposals, pricing comparisons, and vendor selection processes where appropriate. Negotiate pricing, discounts, payment terms, contract duration, renewal provisions, and termination rights. Identify opportunities to consolidate vendors, eliminate duplicate spending, and improve commerc

The Applications Development Intermediate Programmer Analyst is an intermediate level position responsible for participation in the establishment and implementation of new or revised application systems and programs in coordination with the Technology team. The overall objective of this role is to contribute to applications systems analysis and programming activities. Responsibilities: Utilize knowledge of applications development procedures and concepts, and basic knowledge of other technical areas to identify and define necessary system enhancements, including using script tools and analyzing/interpreting code Consult with users, clients, and other technology groups on issues, and recommend programming solutions, install, and support customer exposure systems Apply fundamental knowledge of programming languages for design specifications. Analyze applications to identify vulnerabilities and security issues, as well as conduct testing and debugging Serve as advisor or coach to new or lower level analysts Identify problems, analyze information, and make evaluative judgements to recommend and implement solutions Resolve issues by identifying and selecting solutions through the applications of acquired technical experience and guided by precedents Has the ability to operate with a limited level of direct supervision. Can exercise independence of judgement and autonomy. Acts as SME to senior stakeholders and /or other team members. Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing an

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Job Purpose and Summary: The purpose of the Asset Protection Coordinator (APC) is to improve the retail customer experience and mitigate company losses to external theft in their assigned store. This position requires superior customer service skills and experience implementing loss prevention and opeartional strategies. This position reports dierctly to the District Asset Protection Leader but involves close collaboration with business partners including store leadership and specialized divisions within the Asset Protection Department. The APC will closely monitor all store activity and gather information on theft and operational vulnerabilities. This is a high visibility position with strong emphasis on customer service and preventing theft, not a covert position apprehending shoplifters. APC’s will be required to wear specialized CVS store uniform as a deterrent to theft. The APC does not perform operational duties such as unloading truck deliveries or manning a POS terminal. Primary Job Duties & Responsibilities: Provides attentive, friendly customer service. Greets all customers, provides answers to general customer questions, and assists with opening and securing locked shelves and showcases per customer requests. Moves throughout the store to monitor assigned store(s) for activity that causes the loss of CVS Pharmacy assets

JOB TITLE: Senior Security Software Engineer (Backend Focus) CLASSIFICATION: Exempt Approved by: Jitendra Patil EXPERIENCE: 5–10 Years Approved Date: REPORTS TO: Shivendra Ashish Revised Dates: POSITIONS SUPERVISED: Core Responsibilities: Security Microservices: Architect and build centralized security services (e.g., Authentication/Authorization, Secrets Management, PKI) using high-performance languages. Secure Libraries: Develop standard SDKs/Libraries that abstract complex security logic (Encryption, Input Validation) for other engineering teams. Automated Remediation: Build bots or "Self-Healing" code that automatically detects and fixes infrastructure misconfigurations or code vulnerabilities. AI Security ( AISec ): Build guardrails and "Firewalls" for internal LLM applications to prevent data leakage and prompt injection. Must-Have Skills: Backend Engineering: Expert in Golang or Python. Ability to write production-grade, testable, and concurrent code. System Design: Strong understanding of distributed systems, microservices architecture, and API design. Application Security: Deep knowledge of OWASP standards, Cryptography fundamentals, and Auth protocols (OAuth2/SAML/OIDC). DevSecOps : Experience integrating security checks into CI/CD pipelines (Linters, SAST/DAST wrappers). Preferred / Nice to Have: Experience with Policy-as-Code frameworks (e.g., OPA). Knowledge of Service Mesh security patterns. Experience contributing to open-source security projects. Ability to embrace Clearwater's CLEAR core values (Commitment to Client Success, Lead with Accountability, Integrity & Collaboration, Excellence in All That We Do, Advance Colleague Success, Respect & Transparency) and culture. Disclaimer: The above statements are intended to describe the general natu

At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations. We're looking for a Product Security Engineer to join our Product Security team in Warsaw. You'll be a foundational member of the security presence in a key engineering hub, partnering directly with product and infrastructure teams to ensure we design and ship secure software. You will be instrumental in scaling our security practices by building secure-by-default frameworks, eliminating entire classes of vulnerabilities, and championing a security-first mindset across our web, mobile, and AI-powered product surfaces. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you'll achieve Partner with product and engineering teams across the full software development lifecycle to ensure security is designed and built into Asana's products and platform. Conduct security architecture reviews, threat modeling, and code reviews for new features and services. Develop, implement, and maintain secure-by-default frameworks and libraries that empower engineering teams to build secure systems easily. Build and maintain automated security tooling (static and dynamic analysis rules, custom SAST/DAST checks, and automated red-teaming) to scale security coverage without scaling headcount. Identify and address AI-specific security risks such as prompt injection, insecure tool permissions, and abuse-resistant design in Asana's

Threat Hunter / Purple Team Operator SIXGEN's mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and leading technical capabilities to uncover vulnerabilities, protect vital systems, and strengthen operational resilience. POSITION OVERVIEW Position: Mid-Level Threat Hunter / Purple Team Operator Job Type: Full Time Location: Remote with travel to customers and test locations as required Clearance Requirement: Active Top Secret with SCI eligibility Salary Range ; $115-$140K WHAT YOU'LL DO SIXGEN is seeking a mid-level Threat Hunter / Purple Team Operator to identify threats that evade existing detection methods, develop and test hunting hypotheses, and feed findings back into detection engineering. This role will combine remote threat hunting and on-site purple team coordination in direct support of red team engagements to secure systems, strengthen the defenders, and build and validate detection methods that can catch offensive traffic in real time. This role requires comfort working independently through remote hunts as well as the ability to translate adversary tradecraft into defensive guidance. Responsibilities include: Conduct hypothesis-driven and intelligence-led threat hunts across endpoints, networks, and cloud telemetry for several weeks prior to each red team engagement. Analyze logs, alerts, and historical data for indicators of compromise (IOCs), anomalous behavior, and adversary TTPs mapped to the MITRE ATT&CK from partner-provided sources (EDR, SIEM, authentication/identify logs). Document hunt coverage and methodology, findings, detection recommendations, and any confirmed or suspected compromise, escalating immediately if active adversary activity is found. Deliver a threat hunt summary and determine if the customer environment is clear prior to red team assessments. Partner with

Senior Space Red Team Operator SIXGEN's mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and leading technical capabilities to uncover vulnerabilities, protect vital systems, and strengthen operational resilience. POSITION OVERVIEW Position: Senior Space Red Team Operator Job Type: Full Time Location: Remote or Hybrid with travel to customer and test locations as required Clearance Requirement: Ability to obtain and maintain a U.S. Government security clearance; active Secret or higher preferred WHAT YOU'LL DO SIXGEN is seeking a hands-on Senior Space Red Team Operator to lead authorized adversarial assessments of space systems and the infrastructure that supports them. You will evaluate attack paths across spacecraft, payload, ground, cloud, mission-network, and operator environments; develop safe and repeatable test methods; and translate technical findings into clear mission risk and practical engineering improvements. This role is suited to an operator who can move comfortably between Linux hosts, cloud services, embedded targets, and customer briefings while maintaining disciplined authorization and mission-safety boundaries. Responsibilities include: Lead end-to-end red team assessments, penetration tests, and threat-informed adversary emulation against authorized space and mission systems. Develop assessment plans, attack paths, test cases, and Rules of Engagement that define objectives, authorization boundaries, safety controls, prohibited actions, and stop-work criteria. Assess Linux-based systems, embedded devices, flight and payload software, ground-station services, mission networks, cloud environments, and supporting applications for exploitable weaknesses. Research and validate vulnerabilities in firmware, operating systems, communications interfaces, authentication flows, APIs, containers,

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role AI is changing what security teams can do. Claude can find and help fix vulnerabilities in code at a pace that wasn't possible a year ago, and we want defenders to have that advantage first. As a Cybersecurity Sales Specialist, you'll own Anthropic's security business across the accounts in one of our business units, such as financial services, healthcare and life sciences, or technology. You'll lead the security strategy with CISOs, partnering with the Account Executives who own the accounts in your industry to drive opportunities and put Claude to work on their hardest security problems. You'll help decide how we sell security, what we learn from customers, and how that shapes our products. The work matters to our mission: a safe transition through transformative AI depends on the people who defend critical systems being able to use it well. Key responsibilities Build and close security business, from the first conversation with a CISO's team through contract and expansion, working with the Account Executive who owns each relationship Create security pipeline with the Account Executives in your industry, from their existing accounts and through outbound to security leaders, events and joint work with partners Lead with the customer's problem: finding and fixing vulnerabilities, application security, security operations, and deploying AI agents securely Partner with your Applied AI engineers on discovery, proofs of concept and architecture, and know when to bring them in Guide customers through security reviews, verification for security use cases, and procurement Teach the Account Executives in your business unit to s