Vulnerability Jobs

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role We’re seeking an exceptional Staff - Principal level offensive security domain expert to build agents that continuously identify and coordinate remediation of vulnerabilities across OpenAI’s infrastructure and applications. You will be the technical owner of this effort, combining deep offensive security judgment with agent engineering to build a production system that can operate safely and reliably at scale. As OpenAI increasingly uses automation throughout the company, we believe our security testing must become increasingly automated as well. Advances in model capabilities create an opportunity to test more of our attack surface than would be possible through human effort alone and a need to ensure that we remain ahead of those same capabilities as they become available to attackers. In this role, you’ll build a portfolio of specialized agents that develop a deep understanding of OpenAI’s infrastructure, applications, processes, and security boundaries. These agents will combine internal context with feedback from running systems to explore our cloud environments, Kubernetes clusters, web applications, endpoints, external attack surface, and other high-value targets. The goal is for agents to not only discover vulnerabilities, but also to validate exploitability, document impact, drive remediation, and verify fixes. Success will be measured through outcomes like vulnerabilities fixed, attack surface covered, and performance on evals

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate a Senior Manager to lead and develop our Game Security team. In this dynamic role you’ll be committed to ensuring our games and services remain secure and enjoyable by protecting against cheaters, vulnerabilities, and exploits. You’ll be responsible for designing and implementing processes to continuously strengthen our game security programme, mitigating threats to the player experience while evolving the efficacy of our enforcement and operations teams. This is a full-time, permanent and in-office position based in Rockstar’s unique game development studio in the heart of London. WHAT WE DO The Game Security team is responsible for protecting our players, our games, and intellectual property from malicious actors. We work across multiple disciplines to detect, deter, and disrupt threats impacting the player experience. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Leverage extensive subject matter expertise to develop and support anti-cheat initiatives and protect the integrity of our live service titles. Lead, mentor, and manage a talented and cross functional team engaged in day-to-day anti-cheat operations for our online titles. Set team priorities, allocate resources effectively, and plan for future growth to meet organisational objectives. Establish and standardise operational processes, tools, and best practices. Contribute to the development and monitoring of key risk and performance indicators in partnership with our analytics and i

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate a Senior Manager to lead and develop our Game Security team. In this dynamic role you’ll be committed to ensuring our games and services remain secure and enjoyable by protecting against cheaters, vulnerabilities, and exploits. You’ll be responsible for designing and implementing processes to continuously strengthen our game security programme, mitigating threats to the player experience while evolving the efficacy of our enforcement and operations teams. This is a full-time, permanent and in-office position based in Rockstar’s unique game development studio in the heart of Dundee, Scotland. WHAT WE DO The Game Security team is responsible for protecting our players, our games, and intellectual property from malicious actors. We work across multiple disciplines to detect, deter, and disrupt threats impacting the player experience. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Leverage extensive subject matter expertise to develop and support anti-cheat initiatives and protect the integrity of our live service titles. Lead, mentor, and manage a talented and cross functional team engaged in day-to-day anti-cheat operations for our online titles. Set team priorities, allocate resources effectively, and plan for future growth to meet organisational objectives. Establish and standardise operational processes, tools, and best practices. Contribute to the development and monitoring of key risk and performance indicators in partnership with our

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate a Senior Manager to lead and develop our Game Security team. In this dynamic role you’ll be committed to ensuring our games and services remain secure and enjoyable by protecting against cheaters, vulnerabilities, and exploits. You’ll be responsible for designing and implementing processes to continuously strengthen our game security programme, mitigating threats to the player experience while evolving the efficacy of our enforcement and operations teams. This is a full-time, permanent and in-office position based in Rockstar’s unique game development studio in the heart of Leeds, England. WHAT WE DO The Game Security team is responsible for protecting our players, our games, and intellectual property from malicious actors. We work across multiple disciplines to detect, deter, and disrupt threats impacting the player experience. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Leverage extensive subject matter expertise to develop and support anti-cheat initiatives and protect the integrity of our live service titles. Lead, mentor, and manage a talented and cross functional team engaged in day-to-day anti-cheat operations for our online titles. Set team priorities, allocate resources effectively, and plan for future growth to meet organisational objectives. Establish and standardise operational processes, tools, and best practices. Contribute to the development and monitoring of key risk and performance indicators in partnership with our a

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Safeguards team is seeking a Red Team Engineer to help ensure the safety of our deployed AI systems and products. In this role, you'll take an adversarial approach to uncover vulnerabilities across our product ecosystem before they can be exploited by malicious actors. Your work will span from technical infrastructure vulnerabilities on our products to emergent risks from advanced AI capabilities. While you'll bring best practices from traditional security approaches, the focus is on broader safety implications and novel abuse unique to advanced AI systems and associated products. You'll investigate the full spectrum of potential abuse — from coordinated account manipulation and payment fraud to novel exploitation of product features — and simulate sophisticated threat actors who chain multiple attack vectors to achieve their objectives. Key responsibilities Conduct comprehensive adversarial testing across Anthropic's product surfaces, developing creative attack scenarios that combine multiple exploitation techniques Research and implement novel testing approaches for emerging capabilities, including agent systems, tool use, and new interaction paradigms Design and execute "full kill chain" attacks that emulate real-world threat actors attempting to achieve specific malicious objectives Build and maintain systematic testing methodologies that evaluate every aspect of our systems Develop automated testing frameworks to enable continuous assessment at scale Collaborate with Product, Engineering, and Policy teams to translate findings into concrete improvements Help establish metrics for measuring detection eff

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. The Red Team in the Security Foundations org is responsible for conducting security assessments against Snowflake’s diverse cloud environment and finding vulnerabilities in software, systems, and networks. In this role, you will execute security assessments across Snowflake’s corporate and product environments. You will partner with cross-functional teams to communicate gaps discovered during engagements and help drive remediation. You will develop tools, perform security research, and build infrastructure to augment the Red Team’s capabilities. Our ideal candidate wakes up each morning thinking about different parts of the business that can benefit from security assessments. Their goal is to identify relevant security risks and help the business understand them so they can build effective defenses and protect Snowflake customers and their data. RESPONSIBILITIES Develop tools, methodologies, and infrastructure to support Red Team engagements in a variety of cloud environments and novel platforms Participate in security assessments against a diverse cloud environment and find vulnerabilities in software, systems, and networks Set scope, objectives, and timelines for security assessments and leverage data to create meaningful metrics Work with security and engineering teams t

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Security Platform Engineer who is skilled at diving into complex software designs to identify security flaws and vulnerabilities. This is a full-time, in-office position based out of Rockstar’s NYC headquarters in Downtown Manhattan. WHAT WE DO The Rockstar Games Application Security team partners with numerous development teams across the company to incorporate security practices throughout the software development lifecycle. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define secure development standards and guidelines to safeguard our business and protect our players. We independently assess our application code and builds through various techniques (static analysis, dynamic analysis, software composition analysis, etc.) to identify potential vulnerabilities and design flaws and work with development teams to remediate. RESPONSIBILITIES Architect and support secure software development lifecycle operations embedded in software development pipelines. Provide technical security guidance to developers, team leads, and producers. Drive remediation efforts behind internally and publicly identified vulnerabilities. REQUIREMENTS 5+ years of experience working in a professional, academic or research environment identifying and remediating security bugs/flaws, assisted by automated pipelines. Knowledge of common web security vulnerabilities (e.g., OWASP Top 10), client-side security landscape, attack techniques and remediation tactics/strategies. Experience implementing and tuning SAST, SCA

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW • Position: Senior Cost Estimator/Analyst • Location : Annapolis Junction, MD • Clearance Requirement: TS/SCI with Polygraph WHAT YOU’LL DO SIXGEN is actively seeking candidates to provide expert cost estimating and analytical support for Department of Defense (DoD) and Intelligence Community (IC) acquisition programs. This role is responsible for developing defensible life cycle cost estimates, performing quantitative analysis, and delivering data-driven recommendations that support strategic decision-making across complex acquisition initiatives. Responsibilities include: • Analyze business, financial, technical, and programmatic data using quantitative, statistical, economic, and engineering methods to support informed decision-making. • Collect, organize, normalize, analyze, and document cost, technical, financial, and programmatic data for acquisition programs. • Develop life cycle cost estimates (LCCE), independent cost estimates (ICE), component cost analyses (CCA), and program office estimates (POE). • Perform analysis of alternatives, business case analyses, cost risk assessments, schedule realism assessments, and cost estimating relationship (CER) development. • Support project teams by providing cost estimating expertise and advising on methodologies, models, and estimating factors. • Prepare, present, and defend cost estimates, analyses, and technical briefings to Program Offices, Program Executive Offices, and other stakeholders. Technology proficiency includes: • Master's degree in Engineering, Operations Research, Cost Estimating, Mathematics, Finance

As a Firmware Connectivity Systems Integration and Test Lead on the Embedded Software team, you will own the performance, optimization, and debugging of our TCU (Telematics Control Unit). Managing a complex architecture that integrates third-party hardware with our autonomous vehicle platform, you will analyze diagnostics and log outputs across cellular networks, 4G/5G modem, internal software layer, WiFi, and more. You will not only reactively troubleshoot complex field issues but also proactively design, facilitate, and evaluate advanced testing campaigns—utilizing industry-standard network emulation tools like the Keysight UXM—to identify cellular edge cases and vulnerabilities before they impact operations. Your work will directly safeguard the safety, reliability, and scaling of the Zoox autonomous fleet. Robust, low-latency connectivity is fundamental to autonomous vehicle deployment, powering essential real-time cloud services, fleet management pipelines, and teleoperation capabilities. By ensuring our vehicles maintain seamless, high-performance connections under the most demanding real-world conditions, you will bridge the gap between cutting-edge hardware, cloud infrastructure, and test systems to enable Zoox to deliver the future of autonomous mobility In this role: Ensure all interfaces are well-architected, documented, and validated - notably, between RF-baseband, baseband-protocol stack (AP), AP to host etc. Define component integration plans (from bring-up to advanced functions), then design and execute comprehensive test plans spanning

The DevSecOps Engineer – AI Labs is responsible for implementing security practices within the DevOps pipeline, ensuring secure, efficient, and scalable cloud and on-premise infrastructure. Reporting to the Lead - DevSecOps, this role focuses on deploying and automating security controls, monitoring infrastructure for vulnerabilities, optimizing CI/CD security, and supporting FinOps cost optimization efforts. The position requires hands-on experience in security automation, cloud security tools, and DevOps best practices, ensuring AI-driven applications remain secure, compliant, and cost-efficient. Source: Adani Group | Job ID: 44279

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Security Team Okta is The World's Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transform how people move through the digital world, putting Identity at the heart of business security and growth. At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every box—we're looking for lifelong learners and people who can improve us with their unique experiences. Join our team! We're building a world where Identity belongs to you. The Staff Product Security Engineer Opportunity The Security team's mission is to strengthen Okta's position as the leading Identity-as-a-service solutions provider by identifying and resolving risks to employees, products, and, most importantly, our customers. The Staff AI Product Security Engineer joins a team with a clear mission: to shape the future of application security by researching and building systems that prove how AI can fundamentally augment, automate, and scale defense. This is a hybrid research, offensive and software engineering role centered on leveraging AI to uncover vulnerabilities, automate root cause analysis, automate exploitation, and generate secure code patches at cloud scale. This role is built for engineers who want to push the limits of what AI can do for security, from benchmarking SOT

This role is responsible to manage the continuous availability, reliability, and functionality of DCS and PLC systems. This includes scheduling and performing regular system backups, maintenance, and troubleshooting, as well as coordinating with OEMs for system upgrades. The role also involves managing hardware and software resources, network integrity, and cybersecurity measures to prevent data loss and system vulnerabilities. Source: Adani Group | Job ID: 44787

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Proactive Threat team is responsible for identifying vulnerabilities and security weaknesses across Stripe's systems, applications, networks, and cloud infrastructure — before adversaries do. We operate as a hybrid offensive function: conducting penetration testing, emulating real-world threat actors through red team operations, and partnering closely with our defensive security teams to validate detection capabilities and improve Stripe's overall security posture. We are builders first. Our team develops custom tooling, automation frameworks, and internal platforms that scale our offensive capabilities and enable repeatable, high-fidelity assessments. We believe the best offensive security engineers are equal parts hacker and engineer. The team is distributed across the United States, primarily operating in Eastern and Pacific time zones, and collaborates regularly with security, engineering, and product stakeholders across Stripe — including teams in Europe and Asia. What you'll do As an Offensive Security Engineer on the Proactive Threat team, you will simulate the tactics, techniques, and procedures (TTPs) of real-world adversaries to uncover security risks across Stripe's products and infrastructure. You'll conduct hands-on penetration testing, lead red team engagements, and collaborate with blue team counterparts to validate and improve detection and response capabilities. Your work will directly influence how Stripe builds, ships,

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Team We safeguard Okta from threats and vulnerabilities that could disrupt our business or erode our customers’ trust. The Defensive Cyber Engineering organization is responsible for the Security Data Platform, infrastructure, and tooling that enable Okta’s Detection and Response capabilities. The team also manages enterprise security tools and infrastructure that support XDR, DLP, and SSPM capabilities. The Role We are expanding this team to support Okta’s Public Sector roadmap by hiring a Staff Software Engineer in the DC area. You’ll work closely with Security, Business Technology Engineering, and Product teams to implement and manage security solutions, ensuring our core infrastructure applications protect our workforce, endpoints, and corporate data. To deliver on this vision, you will build data and infrastructure platforms by leveraging your software, data, and security engineering skills. You’ll use automation, policy-as-code, and cloud-native technologies to deliver scalable, resilient, and secure solutions. What you bring: 8+ years of strong coding and scripting experience, with a focus on building automation and custom tooling for security engineering teams. Experience with Python is required; proficiency in other languages (e.g., Bash, PowerShell, Go) is a plus. Experience developing and maintaining ETL/ELT pipelines for onboarding security data into Okta’s security data lake. Experience working with security teams to integrate log sou

Modern software runs on open source, and managing the compliance, security, and regulatory complexity that comes with it is one of the biggest problems facing engineering and legal teams today. FOSSA is the platform they use to address these challenges. We help thousands of organizations automate license compliance, prioritize vulnerabilities, generate and operationalize SBOMs, and meet regulatory requirements. Whether it's scanning AI-generated code for IP risks or helping a company through M&A due diligence, FOSSA gives teams the confidence to ship software they trust. FOSSA is a rapidly growing series-B company with a truly distributed team. While our roots are in San Francisco, our growing team has members in several countries across many time zones. We’re always working to find the perfect balance of effective approaches to distributed work, while maintaining the direct personal connections that help us work better together and love our jobs. Your Mission You’re a Sr. Customer Success Engineer that thrives on technical challenges and going deep with customers to help them accomplish their goals. Exceptional work ethic is second nature to you, and you welcome a certain level of ambiguity. You understand that customers are what make a company and are willing and able to bridge the gap, narrow or wide, between customer expectations and what FOSSA delivers today. Simultaneously, you do not hesitate to speak up internally, you constantly seek to identify and improve technical processes and eliminate obstacles. You can be polished and well spoken in front of customers, articulating complex technical situations in a simple and concise manner to non-technical audiences. You can also be “gloves off” and tell the unvarnished truth in the right circumstances. Your technical acumen in helping customers is strong, and you are able to adapt to the different personas that interact with FOSSA (Lawyers / IP Councils, Project Managers and other Intermediaries, Engineer