Vulnerability Jobs

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of the role We are seeking a Staff Security Research Engineer to join our Application Security Team to conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities. As GitLab transforms software development through intelligent collaboration between developers and specialized AI agents, we need security researchers who can proactively identify and validate vulnerabilities before they impact our platform or customers. In this role, you'll be at the forefront of security research, working with our GitLab DevSecOps platform, Duo Agent Platform, GitLab Duo Chat, and AI workflows that represent the f

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of the role We are seeking a Principal Security Researcher to join our Application Security Team to conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities. As GitLab transforms software development through intelligent collaboration between developers and specialized AI agents, we need security researchers who can proactively identify and validate vulnerabilities before they impact our platform or customers. In this role, you'll be at the forefront of security research, working with our GitLab DevSecOps platform, Duo Agent Platform, GitLab Duo Chat, and AI workflows that represent the futu

This role is responsible to manage the continuous availability, reliability, and functionality of DCS and PLC systems. This includes scheduling and performing regular system backups, maintenance, and troubleshooting, as well as coordinating with OEMs for system upgrades. The role also involves managing hardware and software resources, network integrity, and cybersecurity measures to prevent data loss and system vulnerabilities. Source: Adani Group | Job ID: 57492

This role is responsible to manage the continuous availability, reliability, and functionality of DCS and PLC systems. This includes scheduling and performing regular system backups, maintenance, and troubleshooting, as well as coordinating with OEMs for system upgrades. The role also involves managing hardware and software resources, network integrity, and cybersecurity measures to prevent data loss and system vulnerabilities. Source: Adani Group | Job ID: 57491

This role is responsible to manage the continuous availability, reliability, and functionality of DCS and PLC systems. This includes scheduling and performing regular system backups, maintenance, and troubleshooting, as well as coordinating with OEMs for system upgrades. The role also involves managing hardware and software resources, network integrity, and cybersecurity measures to prevent data loss and system vulnerabilities. Source: Adani Group | Job ID: 57496

This role is responsible to manage the continuous availability, reliability, and functionality of DCS and PLC systems. This includes scheduling and performing regular system backups, maintenance, and troubleshooting, as well as coordinating with OEMs for system upgrades. The role also involves managing hardware and software resources, network integrity, and cybersecurity measures to prevent data loss and system vulnerabilities. Source: Adani Group | Job ID: 57504

This role is responsible to manage the continuous availability, reliability, and functionality of DCS and PLC systems. This includes scheduling and performing regular system backups, maintenance, and troubleshooting, as well as coordinating with OEMs for system upgrades. The role also involves managing hardware and software resources, network integrity, and cybersecurity measures to prevent data loss and system vulnerabilities. Source: Adani Group | Job ID: 57503

This role is responsible to manage the continuous availability, reliability, and functionality of DCS and PLC systems. This includes scheduling and performing regular system backups, maintenance, and troubleshooting, as well as coordinating with OEMs for system upgrades. The role also involves managing hardware and software resources, network integrity, and cybersecurity measures to prevent data loss and system vulnerabilities. Source: Adani Group | Job ID: 57491

This role is responsible to manage the continuous availability, reliability, and functionality of DCS and PLC systems. This includes scheduling and performing regular system backups, maintenance, and troubleshooting, as well as coordinating with OEMs for system upgrades. The role also involves managing hardware and software resources, network integrity, and cybersecurity measures to prevent data loss and system vulnerabilities. Source: Adani Group | Job ID: 57492

As a Wireless Firmware Validation Engineer on the Firmware team, you will own the performance validation, optimization, and debugging of our TCU (Telematics Control Unit). Managing a complex architecture that integrates third-party hardware with our autonomous vehicle platform, you will analyze diagnostics and log outputs across cellular networks, 4G/5G modems, internal software layers, Wi-Fi, and Bluetooth. You will not only reactively troubleshoot complex field issues but also proactively design, facilitate, and evaluate advanced testing campaigns—utilizing industry-standard network emulation tools like the Keysight UXM—to identify cellular edge cases and vulnerabilities before they impact operations. Your work will directly safeguard the safety, reliability, and scaling of the Zoox autonomous fleet. Robust, low-latency connectivity is fundamental to autonomous vehicle deployment, powering essential real-time cloud services, fleet management pipelines, and teleoperation capabilities. By ensuring our vehicles maintain seamless, high-performance connections under the most demanding real-world conditions, you will bridge the gap between cutting-edge hardware, cloud infrastructure, and test systems to enable Zoox to deliver the future of autonomous mobility. You will leverage your substantial prior expertise in connectivity software and protocols (cellular modem cross-layers, Wi-Fi MAC/PHY) to provide critical insights and feedback, guaranteeing that our systems are rigorously tested and hardened for operational deployment. In this role, you will: Test Architecture & Strategy: Define component integration plans (from initial hardware bring-up to advanc

As a Software Engineer on the Firmware team, you will own the software integration, performance, optimization, and debugging of our TCU (Telematics Control Unit). Managing a complex architecture that integrates third-party hardware with our autonomous vehicle platform, you will analyze diagnostics and log outputs across cellular networks, 4G/5G modems, internal software layers, Wi-Fi, and Bluetooth. You will not only reactively troubleshoot complex field issues but also proactively architect and develop robust host-side connectivity software to handle cellular edge cases and vulnerabilities before they impact operations. Your work will directly safeguard the safety, reliability, and scaling of the Zoox autonomous fleet. Robust, low-latency connectivity is fundamental to autonomous vehicle deployment, powering essential real-time cloud services, fleet management pipelines, and teleoperation capabilities. By ensuring our vehicles maintain seamless, high-performance connections under the most demanding real-world conditions, you will bridge the gap between cutting-edge hardware, cloud infrastructure, and test systems to enable Zoox to deliver the future of autonomous mobility. You will leverage a profound understanding of how these stacks operate to define the architecture, utilize vendor interfaces, and debug complex cross-layer issues. Responsibilities Contribute and Develop: Contribute to Zoox's firmware and cellular wireless connectivity stack (LTE/5G), developing and enhancing connectivity features across multiple generations of hardware. Vendor Integration: Act as the primary technical expert working with cellular chipset vendors (e.g., Qualcomm) to integrate their proprietary firmware, SW stacks, and L1-L3 implementations into our custom embedded Linux platform. Architecture Definition: Define, architect, and validate the critical software interfaces betw

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together. Information Security Engineer I Location: McLean, VA | Work Model: On-site (5 days/week) About the Team The Appian Information Security department continuously evaluates the global threat landscape to protect Appian operations and service offerings. Our mission is to build, monitor, and scale robust security tools and processes that shield critical corporate and customer assets from emerging threats, international security concerns, and vulnerabilities, ensuring our AI-Powered Process Automation platform remains resilient and secure. The Opportunity At Appian, we believe our greatest innovations spring from in-person collaboration. Joining our team at our McLean headquarters means you will work alongside elite security architects in a high-velocity environment that prioritizes your professional growth. This role offers an unparalleled launchpad to transition academic knowledge into real-world impact, giving you direct ownership over intrusion detection capabilities and cloud-based defense strategies for our Enterprise-Grade Orchestration ecosystem. What You’ll Do Build and scale internal security systems to enable Appian InfoSec to quickly adapt, monitor, and defend against modern attacker techniques. Analyze and investigate complex security-related data pulled from a wide range of security products, logging devices, and endpoint monitors. Design and implement enhanced detection technologies across various Appian systems to proactively surface potential anomalies and vulnerabilities. Conduct comprehensive risk analysis on infrastructure assets and provide

About Datadog We're on a mission to build the best platform in the world for engineers to understand and scale their systems, applications, and teams. We operate at high scale with trillions of data points per day, enabling seamless collaboration and problem-solving among Dev, Ops, and Security teams for tens of thousands of companies globally. Our engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way. The Team The Datadog Security Libraries team owns the customer-side integrations behind our run-time security products App & API Protection , Workload Protection , and Code Security . Our libraries let customers automatically manage application security risk with continuous, real-time monitoring of vulnerabilities and threats against their web applications, serverless applications, and APIs, in production. Automatically integrated with Application Performance Monitoring (APM) distributed tracing and code-level context, our software empowers development, operations, and security teams to build and run secure applications. As a polyglot team we ship and maintain the security capabilities of Datadog's tracing libraries across .NET , Java , Go , Node.js , Python , Ruby , and PHP , on top of a shared C++ core and a set of HTTP proxy integrations (primarily Envoy, NGINX, and HAProxy). Our code runs inside thousands of production applications around the world. Recent work spans exploit prevention (RASP) and WAF detections, API Security, code security (IAST and SCA), and AI-assisted ("agentic") onboarding, always measured by real product outcomes and operational telemetry. The Opportunity We're looking for a senior, polyglot engineer to contribute across several of our security libraries, with .NET or Java expertise. You'll design and build security integrations and detection features, take them from prototype to production-hardened, and own them operationally as they instrument thousands of applications. As a se

We are seeking a highly technical Infrastructure Security Engineer to join our Public Sector Infrastructure & Security team. Our Infrastructure Security Engineers ensure the security and integrity of our platform. You will be responsible for securing large cloud environments, orchestrating and securing various compute clusters, and reviewing infrastructure as code. Your expertise in cloud security, infrastructure automation, and advanced security practices will be essential in maintaining and enhancing our security posture. You will: Secure infrastructure across large cloud hosting providers (e.g., AWS, Azure, GCP). Implement and maintain robust security configurations and policies for cloud environments. Conduct regular security assessments and audits of infrastructure to identify vulnerabilities and areas for improvement. Develop and enforce security best practices for infrastructure automation and orchestration. Collaborate with DeveloperExperience, IT, and product teams to integrate security into all stages of the infrastructure lifecycle. Review and secure infrastructure as code (e.g., Terraform, CloudFormation). Educate and mentor team members on infrastructure security best practices and emerging threats. Must have: At least an active Top Secret clearance. This is a requirement and candidates will not be considered who do not hold at least a Top Secret clearance. Ideally, you’d have: Proven experience as a Security Engineer with a focus on infrastructure security. Proficiency in NodeJS, TypeScript, Python, and/or Kubernetes. Strong understanding of modern Javascript application design. Production experience with Kubernetes backed services Hands-on experience with SAST and DAST tools and methodologies. Familiarity with terraform orchestration for infrastructure management. You can structure complex problems and diagnose root causes independently, providing actionable insights without requiring manager input. Excellent communication skills, with the

About Datadog We're on a mission to build the best platform in the world for engineers to understand and scale their systems, applications, and teams. We operate at high scale with trillions of data points per day, enabling seamless collaboration and problem-solving among Dev, Ops, and Security teams for tens of thousands of companies globally. Our engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way. The Team The Datadog Security Libraries team owns the customer-side integrations behind our run-time security products App & API Protection , Workload Protection , and Code Security . Our libraries let customers automatically manage application security risk with continuous, real-time monitoring of vulnerabilities and threats against their web applications, serverless applications, and APIs, in production. Automatically integrated with Application Performance Monitoring (APM) distributed tracing and code-level context, our software empowers development, operations, and security teams to build and run secure applications. As a polyglot team we ship and maintain the security capabilities of Datadog's tracing libraries across .NET , Java , Go , Node.js , Python , Ruby , and PHP , on top of a shared C++ core and a set of HTTP proxy integrations (primarily Envoy, NGINX, and HAProxy). Our code runs inside thousands of production applications around the world. Recent work spans exploit prevention (RASP) and WAF detections, API Security, code security (IAST and SCA), and AI-assisted ("agentic") onboarding, always measured by real product outcomes and operational telemetry. The Opportunity We're looking for a senior, polyglot engineer to contribute across several of our security libraries, with .NET or Java expertise. You'll design and build security integrations and detection features, take them from prototype to production-hardened, and own them operationally as they instrument thousands of applications. As a se