Vulnerability Jobs

We are seeking a highly technical Product Security Engineer to join our Public Sector Infrastructure & Security team. Our Product Security Engineers ensure the security and integrity of our products and services. You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy. Your expertise in TypeScript, Python, Kubernetes, CI/CD, SAST, DAST, and terraform orchestration will be crucial in identifying and mitigating potential security vulnerabilities. You will also structure complex problems, diagnose root causes independently, and clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact. You will: Conduct in-depth code reviews to identify and remediate security vulnerabilities. Evaluate and enhance the security of our product offerings, through RFC and service review. Implement and maintain CI/CD pipelines with a strong focus on security. Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify vulnerabilities in production code. Utilize terraform orchestration to ensure secure and efficient infrastructure management. Guide engineering teams to build robust long-term solutions that consider security and privacy. Clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact. Influence the security strategy and direction of the team, advocating for best practices and continuous improvement. Ideally, you’d have: at least a Secret level government security clearance Proven experience as a Security Engineer with a focus on product security. Proficiency in NodeJS, TypeScript, Python, and/or Kubernetes. Strong understanding of modern Javascript application design. Production experience with Kubernetes backed services Hands-on experience with SAST and DAST tools and methodologies. Familiarity with terraform orchestration for i

We are seeking a highly skilled Infrastructure Security Engineer to join our team. This role is integral to ensuring the security and integrity of our platform. You will be responsible for securing large cloud environments, orchestrating and securing various compute clusters, and reviewing infrastructure as code. Your expertise in cloud security, infrastructure automation, and advanced security practices will be essential in maintaining and enhancing our security posture. You will: Secure infrastructure across large cloud hosting providers (e.g., AWS, Azure, GCP). Implement and maintain robust security configurations and policies for cloud environments. Conduct regular security assessments and audits of infrastructure to identify vulnerabilities and areas for improvement. Develop and enforce security best practices for infrastructure automation and orchestration. Collaborate with DeveloperExperience, IT, and product teams to integrate security into all stages of the infrastructure lifecycle. Review and secure infrastructure as code (e.g., Terraform, CloudFormation). Educate and mentor team members on infrastructure security best practices and emerging threats. Ideally, you’d have: Proven experience as a Security Engineer with a focus on product security. Proficiency in NodeJS, TypeScript, and Kubernetes. Experience with orchestrating and securing GPU clusters. Proficiency in infrastructure as code tools such as Terraform and CloudFormation. Excellent communication skills, with the ability to clearly explain technical concepts and their implications to both technical and non-technical stakeholders. Demonstrated ability to influence security strategies and drive improvements within an organization. Relevant security certifications (e.g., AWS Certified Security Specialty, Certified Cloud Security Professional) are a plus. Experience in a senior or lead security role is preferred. Compensation packages at Scale for eligible roles include base salary, equit

We are seeking a highly technical Security Engineer to join our Product Security team. This role is integral to ensuring the security and integrity of our products and services. You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy. Your expertise in TypeScript, Python, AWS, CI/CD, SAST, DAST, and terraform orchestration will be crucial in identifying and mitigating potential security vulnerabilities. You will also structure complex problems, diagnose root causes independently, and clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact. You will: Leverage broad product security expertise to build and maintain software tooling that secures every layer of the modern AI/ML software ecosystem. Conduct in-depth code reviews to identify and remediate security vulnerabilities. Evaluate and enhance the security of our product offerings, through RFC and service review. Implement and maintain CI/CD pipelines with a strong focus on security. Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify vulnerabilities in production code. Utilize terraform orchestration to ensure secure and efficient infrastructure management. Guide engineering teams to build robust long-term solutions that consider security and privacy. Clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact. Influence the security strategy and direction of the team, advocating for best practices and continuous improvement. Ideally, you’d have: Demonstrated ability to drive multi-month security initiatives independently, from problem definition through execution, without requiring significant direction. Proven experience as a Security Engineer with a focus on product security. Proficiency in NodeJS, TypeScript, Python, and/or Kubernetes

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role We’re seeking an exceptional Principal-level Offensive Security Engineer focused on deep, hands-on penetration testing of OpenAI’s agent-powered products, infrastructure, and model-integrated application surfaces. You’ll assess complex systems end to end, identify realistic vulnerabilities, validate exploitability and impact, and partner closely with engineering teams to drive durable fixes. This role will be primarily focused on continuously testing our agent-powered products like Codex and Operator. These systems are uniquely valuable targets because they’re rapidly evolving, can perform sensitive actions on behalf of users, and have large, diverse attack surfaces. You will play a crucial role in securing our agents by finding vulnerabilities that emerge from the interactions between the applications, infrastructure, tools, and models that power them. You’ll have the chance to not only find vulnerabilities, but actively drive their resolution, build reusable testing approaches, automate offensive security workflows with cutting-edge technologies, and use your attacker perspective to improve the security of OpenAI’s products. In this role you will: Conduct deep penetration tests of OpenAI’s agent-powered products, including web applications, APIs, cloud services, identity and authorization flows, CI/CD systems, and model-integrated product surfaces. Continuously hunt for exploitable vulnerabilities in the interactions between the appli

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer, Application Security you will be responsible for identifying and mitigating security vulnerabilities within software applications through building security tools, code reviews, penetration testing, and security assessments. We’re looking for people who will work closely with development teams to ensure secure coding practices are integrated throughout the software development lifecycle, preventing security risks before they emerge. You will also provide security guidance to developers and other stakeholders, fostering a culture of security awareness within the organization. The role is preferred to be based in San Francisco, Seattle or New York City but may consider remote work. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Perform Security Assessments : Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software. Develop and Implement Security Tools : Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats. Collaborate with Development Teams : Work closely with development teams to ensure security best practices are integrated throughout the software development lifecycle (SDLC), including secure coding guidelines. Threat Modeling and Risk Assessment : Conduct threat modeling and risk

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer, Application Security you will be responsible for identifying and mitigating security vulnerabilities within software applications through building security tools, code reviews, penetration testing, and security assessments. We’re looking for people who will work closely with development teams to ensure secure coding practices are integrated throughout the software development lifecycle, preventing security risks before they emerge. You will also provide security guidance to developers and other stakeholders, fostering a culture of security awareness within the organization. The role is preferred to be based in San Francisco, Seattle or New York City but may consider remote work. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Perform Security Assessments : Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software. Develop and Implement Security Tools : Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats. Collaborate with Development Teams : Work closely with development teams to ensure security best practices are integrated throughout the software development lifecycle (SDLC), including secure coding guidelines. Threat Modeling and Risk Assessment : Conduct threat modeling and risk

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer, Application Security you will be responsible for identifying and mitigating security vulnerabilities within software applications through building security tools, code reviews, penetration testing, and security assessments. We’re looking for people who will work closely with development teams to ensure secure coding practices are integrated throughout the software development lifecycle, preventing security risks before they emerge. You will also provide security guidance to developers and other stakeholders, fostering a culture of security awareness within the organization. The role is preferred to be based in San Francisco, Seattle or New York City but may consider remote work. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Perform Security Assessments : Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software. Develop and Implement Security Tools : Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats. Collaborate with Development Teams : Work closely with development teams to ensure security best practices are integrated throughout the software development lifecycle (SDLC), including secure coding guidelines. Threat Modeling and Risk Assessment : Conduct threat modeling and risk

The AML Risk Management Senior Lead Analyst is a senior level position responsible for establishing internal procedures to prevent money laundering and assist in all matters concerning financial crimes in coordination with the broader AML team. The overall objective is to utilize established disciplinary knowledge to identify inconsistencies in data or result and formulate strategic recommendations on policies, procedures, and practices. Responsibilities: Execute and implement firm-wide AML risk management policy and strategic direction for the Markets Institutional line of business. Maintain AML compliance program for the business including assessment of risks and the development of policies, procedures, and governance, including those pertaining to an institutional broker dealer. Identify and assess risk, vulnerabilities, and opportunities for efficient and effective risk coverage. Work within team and across business/functional line management to assess complex issues, structure potential solutions, and drive effective resolution within permissible statutory and regulatory frameworks. Analyze data, prepare and present regional/global reports related to AML risk assessments. Monitor AML related issues and escalations with senior management and global partners. Evaluate and respond to escalated matters, further escalate as required, and advise senior management on next steps as needed. Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency. Qualifications

Become a part of our caring community The Senior IT Professional – Medical Devices is responsible for coordinating the technology lifecycle and operational support of medical devices across Primary Care clinics. This role serves as a central technology point of coordination across clinic teams, enterprise IT, security, infrastructure teams, and external vendors to ensure medical devices are implemented, maintained, supported, upgraded, and remediated effectively.The Senior IT Professional – Medical Devices is responsible for coordinating the technology lifecycle and operational support of medical devices across Primary Care clinics. This role serves as a central technology point of coordination across clinic teams, enterprise IT, security, infrastructure teams, and external vendors to ensure medical devices are implemented, maintained, supported, upgraded, and remediated effectively. The position provides end-to-end coordination for medical device installations, upgrades, troubleshooting, and technology-related issues, with a strong focus on minimizing disruption to providers and clinical staff. The role also drives medical-device technology compliance and risk remediation activities, including timely resolution of VITs, IOPs, vulnerabilities, lifecycle risks, and other identified compliance gaps. Key Responsibilities Medical Device Operations & Support Serve as a senior technology point of coordination for medical devices deployed across Primary Care clinics. Coordinate new device installations, replacements, upgrades, configuration changes, and technology refresh activities across cli

📍 Location: Athens, Greece 🏢 Weekly office requirement: Hybrid, 1 day/week, or fully remote 💼 Employment type: Permanent 🪜 Seniority level: Mid-Senior 🌐 Language: All stages of the recruitment process will be conducted in English At GWI we’re always looking for extraordinary people who thrive on making an extraordinary impact. Right now we’re looking for a Senior Security Engineer to play a key role in our Security team in Athens . If that’s you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. As our Senior Security Engineer you’ll help keep our platform and our customers’ data safe by watching our security tooling closely and acting on what it tells us, as we work towards ISO certification. You’ll join a small security team where you can take initiative and potentially own projects from start to finish. Sounds great, what will I be doing? 🤔 👉 Monitor and triage alerts and logs across our security tools, and take operational action on findings rather than waiting for direction. 👉 Track vulnerabilities end to end, keeping clear records of actions, owners and deadlines across teams. 👉 Help produce the operational evidence for our ISO certification by documenting what we monitor and what we do about it. 👉 Drive decisions on alerts, including web application firewall alerts, working with IT, DevOps, Engineering and Legal. 👉 Contribute to team initiatives, including automating repetitive security work. What do I need to bring with me? 🧳 You’ll need to be able to demonstrate the core skills this role requires. You don’t have to tick all the boxes right away; the important thing is that you’re willing to learn. Here’s what the team will be looking for in you: 👉 Computer Science background: A degree in Computer Science or equivalent practical experience. 👉 Security experience: 4+ years of hands-on experience in security. 👉 Code literacy: You can read code and write scripts to i

MongoDB's Global Security Organization (GSO) is looking for a Principal Security Engineer. The GSO secures MongoDB's products, infrastructure, and the trust our customers place in us — spanning product security, corporate security, and risk, and working across engineering, go-to-market, and corporate development to keep security moving at the same speed as the business. The Principal Security Engineer will serve as a senior technical anchor for the team. This is a deep individual-contributor role that will stay hands-on with hard security and architecture problems, form sharp independent opinions, and know how to debate, align, and commit once GSO has made a call. Key topic areas will include collaborating with our product teams to ensure identity and permission models meet customer needs for our new autonomous agent platform and working with integration security teams to push the envelope on automated detection, reproduction, and remediation of security vulnerabilities via AI. What we need here is depth, judgment, and the ability to build up the bench of senior technical talent around you. This role can be based out of our NYC or Seattle office or remotely in the North America region. Responsibilities Maintain real technical depth in security and in MongoDB's product architecture — compute, network, and storage — deep enough to evaluate actual risk rather than apply generic best practice Form independent, well-reasoned opinions on security and architecture decisions, and voice them even when they cut against consensus or a leader's default plan Push teams to move faster when process or over-engineering is introducing complexity without reducing risk — and push teams to slow down when GTM pressure is outrunning a clear-eyed view of the risk Debate hard, then align, then commit: help the org land on the right call, then execute on it Seed and grow a working community of senior ICs embedded in security operations, product security, and enterprise sec

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. Position Overview: Are you looking to be part of a technology team beyond the ordinary? A place full of exciting challenges and the engineers up to solving them? Then welcome to Financial Engineering! This is the place where the models become software, where many of the numbers that drive our business decisions are produced. Our systems are used for interest rate and credit risk management, investment analysis and trading, security issuance, automated loan underwriting, distressed loan decisions, economic and regulatory capital, property valuation, financial reporting, economic and GAAP forecasting, and more! Our Impact: Model Application Development team is responsible for converting models to application software. We evaluate millions of loans per day using the latest ML algorithms. We turn ML algorithms to APIs using web services. We are responsible for implementing underwriting, servicing and loss mitigation models Your Impact : Automating and deploying Financial Models developed using ML algorithms. Maintaining underwriting models, credit data processing. Deploying model configuration with market and economic data for loss mitigation models. Providing APIs to Financial Models to integrate with IT applications. Performance tuning and stress testing Models. Participating in model tie outs. Identifying and resolving any issues in reconciling with model results. Fixing software security vulnerabilities identified in SAST and FOSS scanning. Code review and guiding junior level developers. <u

Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: Tenable has an immediate need for a Customer Success Manager who will be responsible for establishing and driving sales activities for our software products within a designated geography. Companies today are grappling with an ever expanding IT landscape encompassing traditional IT devices and modern assets such as IoT, DevOps and operational technology. In this era, it is more important than ever before for companies to have visibility of their attack surface and the vulnerabilities therein. Tenable’s vision is to help our customers develop this visibility and manage their Cyber Exposure; significantly improving their IT security. Your role with involve working with designated existing customers as well as partners in your specified market place. Your Opportunity: Responsible for consultatively working with customers to define improvements in their IT security roadmap. Responsible for growing revenue via prospecting, qualifying, selling and closing from existing enterprise client accounts Responsible for Quarterly & Annual Revenue Targets Manage client relations

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role Help us build the next generation of authentication services at GitLab. As a Senior Backend Engineer on the Authentication team, you'll build authentication features across the Rails monolith and GATE. GATE is our new service for issuing and validating tokens and managing identities, designed to support every GitLab deployment model. You'll expand authentication mechanisms, including support for identities used by artificial intelligence (AI) agents. You'll also help keep GitLab and its customers secure by building access management tooling and addressing vulnerabilities reported through our HackerOne pro

CAPCO POLAND *We are looking for candidates willing to relocate to the Middle East - Qatar for the duration of the project. At Capco Poland, we’re not just another consultancy - we’re the spark behind digital transformation in the financial world. As a global leader in technology and management consulting, we thrive on helping clients tackle the toughest challenges across banking, payments, capital markets, wealth, and asset management. Our secret? A culture that’s fast, flexible, and fiercely entrepreneurial. We move quickly, think creatively, and always put our people first. We’re passionate about growth - both for our clients and ourselves - and that means attracting the very best talent to join us on this exciting journey. We’re proud to be: • Trailblazers in banking, payments, capital markets, wealth, and asset management • Champions of an agile, nimble, and innovative work environment • Dedicated to building a team of top-notch professionals who share our drive and vision The Role Capco is looking for a Security Consultant to help our clients identify, assess, and manage cybersecurity threats and technology risks across complex environments. You’ll work with security, technology, risk, architecture, and business teams to deliver structured threat and risk assessments that support informed decision-making and effective security controls. This is an opportunity to work on complex cybersecurity challenges within financial services, helping clients understand their threat landscape, identify vulnerabilities and control gaps, and strengthen their overall security and technology risk posture. The engagement is expected to run for one year and requires relocation to the Middle East for its duration . You will collaborate with client and project teams to deliver the agreed data engineering scope and project outcomes. What You’ll Do Assess existing security controls and evaluate their effectiveness against identified cyber and technology risks