Vulnerability Jobs

Systems Administrator Eglin AFB, FL Secret clearance or greater The Defense Sector at Leidos currently has an opening for a Microsoft Azure qualified System Administrator to work with our customer at Eglin AFB, FL. This is an exciting opportunity to use your experience helping the Joint Staff J6 Joint Assessment Division (JAD) conduct Joint All Domain Command and Control (JADC2) aligned assessments and assist us in maintaining a cloud-based network. The System Administrator will participate as a member of an integrated deployable team providing assistance during all phases of design, installation, and operation of Information System Servers and end user clients at JAD in-garrison and in deployable environments. Primary Responsibilities: Provide day-to-day administrative and operational support in a complex and growing DOD NIPR/SIPR Azure Cloud environment. Monitor system/network performance; troubleshoot/resolve issues with systems, applications, and software. Deploy cloud Infrastructures (IL2, IL4, IL6); migrate Windows Domains and Clients to and from the cloud. Assist with DOD Cybersecurity compliance operations and remediate/mitigate security vulnerabilities. Investigate and install DISA Cybersecurity alerts and notifications. Support several deployed (CONUS/OCONUS) assessments annually (estimated 25% of workdays TDY). Interact with customers and functional peer groups to gain understanding and cooperation regarding solution design, problem management processes, as well as approaches to planning and operations. Basic Qualifications: US Citizen with at least a current active Secret clearance. Additionally, the ability to obtain and maintain a Top Secret clearance within 365 days. Bachelor’s Degree with 2+ years of experience or a Master’s degree with 1+ year of experie

Who We Are HP IQ is HP’s new AI innovation lab. Combining startup agility with HP’s global scale, we’re building intelligent technologies that redefine how the world works, creates, and collaborates. We’re assembling a diverse, world-class team—engineers, designers, researchers, and product minds—focused on creating an intelligent ecosystem across HP’s portfolio. Together, we’re developing intuitive, adaptive solutions that spark creativity, boost productivity, and make collaboration seamless. We create breakthrough solutions that make complex tasks feel effortless, teamwork more natural, and ideas more impactful—always with a human-centric mindset. By embedding AI advancements into every HP product and service, we’re expanding what’s possible for individuals, organisations, and the future of work. Join us as we reinvent work, so people everywhere can do their best work. About The Role As an Offensive Security Engineer within HP IQ’s Product Security team, you will partner closely with engineering teams to identify, validate, and mitigate security risks across the product lifecycle. You’ll influence design decisions, embed security into development workflows, and continuously assess attack surfaces to guide and enhance secure development. What You Might Do Lead penetration tests and security assessments for product and feature releases. Conduct continuous security engagements, proactively identifying vulnerabilities and driving remediation to closure. Advise engineering and product teams on remediation strategy, validating fixes and tracking measurable improvements to security posture over time.​​​​​​​​​​​​​​​​ Assess attack surfaces across internet-facing services, APIs, and device interfaces (Wi-Fi, BLE, USB). Perform threat modeling and security architecture reviews that directly shape product decisions. Define and lead end-to-end risk reduction initiatives with internal and external stakeholders, aligning offensive findings to strategic security investments.​​​​

Who we are: About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team Stripe offers an interesting middle ground between joining a small startup and going to work for a multinational company. We have systems and processes optimized for early-career professionals. You will be in an environment that prizes rigor, discipline, and reliability—from our products, from our ways of working, and from our colleagues. You will learn how the best teams put together extremely reliable systems, and you will be responsible for operating these systems, with adequate backup when things get tough. The Security organization is dedicated to building and maintaining a secure financial infrastructure platform. By joining this team, you will be on the front lines, engineering solutions that protect the sensitive data and systems underpinning a huge portion of the world's economy. You will contribute to core security functions like threat detection and rapid incident response, building and scaling the platforms that manage vulnerabilities, and proactively performing offensive security assessments to identify weaknesses before they can be exploited. This is a chance to apply software engineering principles and new technologies such as AI to solve complex, high-stakes security challenges, ultimately ensuring that Stripe's mission to increase the GDP of the internet is achieved securely. What you’ll do As a Security Engineer New Grad you will have the opportunity to work across various security disciplines and own projects from sta

About the Team The security team at Meesho is like the Avengers to Meesho's S.H.I.E.L.D. After all, when 5% of Indian households shop with us, it’s important to build resilient systems to manage millions of orders every day. We’ve done this – with zero downtime! 😎 Sounds impossible? Well, that’s the kind of Engineering muscle that has helped Meesho become the e-commerce giant it is today. We value speed over perfection, and see failures as opportunities to become better. We’ve taken steps to inculcate a strong ‘Founder’s Mindset’ across our engineering teams, making us grow and move fast. We place special emphasis on the continuous growth of each team member - and we do this with regular 1-1s and open communication. As a Security Engineer, you will be part of self-starters who thrive on teamwork and constructive feedback. We know how to party as hard as we work! If we aren’t building unparalleled tech solutions, you can find us debating the plot points of our favorite books and games – or even gossiping over chai. So, if a day filled with building impactful solutions with a fun team sounds appealing to you, join us. About the Role As a Security Engineer 3, you are a senior individual contributor who owns security outcomes end to end across one or more product areas. You operate with limited supervision, set the technical approach for your workstreams, and are a trusted second voice in design and architecture discussions. Beyond finding and fixing vulnerabilities, you drive security initiatives to closure across engineering teams, raise the bar on how we build securely, and mentor earlier-career engineers on the team. You will combine deep hands-on offensive and defensive skills with the judgment to prioritise what matters most for a platform operating at Meesho's scale. What you will do Security Architecture & Threat Modeling: Lead threat modeling and secure design reviews for complex, multi-service features, and partner with enginee

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. We are building an elite team, applying frontier technologies to the world's biggest financial problems. We're looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn't a place for complacency, it's where ambitious people do the best work of their careers. We're a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. Robinhood's Security Operations team operates across two distinct disciplines: proactive security — finding threats and vulnerabilities before attackers do — and reactive security — detecting, investigating, and evicting threat actors in real time. Together, these functions form a complete picture of what it takes to protect one of the most active financial platforms in the world. The team operates in an environment of genuine complexity: high-volume security events, sophisticated threat actors, and a constant arms race against adversaries who are increasingly leveraging AI to move faster and go deeper. The threat landscape is changing. AI-powered attackers don't move like traditional adversaries — they are faster, more adaptive, and harder to track with static defenses. Robinhood's approach to this isn't passive. We are building dynamic, intelligent defensive systems designed to detect, deceive, and outmaneuver agentic attackers — and we need a

JOB TITLE Software Engineer – Cloud Infrastructure A CAREER WITH POINT72’S TECHNOLOGY TEAM As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. WHAT YOU'LL DO • Design, operate, and continuously improve our Kubernetes infrastructure on Amazon EKS, including Karpenter-based autoscaling, workload scheduling, and cluster lifecycle management • Administer and tune PostgreSQL databases (on RDS) that back platform applications such as Airflow — handling configuration, parameter tuning, maintenance, and reliability, not query optimization • Own our Infrastructure as Code using Terraform — provisioning, modifying, and auditing AWS resources including S3, EC2, RDS, EKS, and IAM • Manage IAM roles, policies, and access patterns across our AWS environment with a security-first mindset • Maintain our artifact registries (ECR, Artifactory) — enforcing retention policies, image versioning standards, and responding to infosec requests around package vulnerabilities and container image remediation • Own and

Who We Are At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people. We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you. We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team. Our Values If this sounds like you, you’ll fit right in. Department Engineering > Platform Who You Are You believe the secure path should be the easy path. You've spent your career where security and engineering meet, and you've learned that scanners nobody reads and gates nobody can pass don't make software safer, they make engineers route around you. So you build guardrails instead: pipelines that catch vulnerabilities before a human ever has to, golden paths with security baked in, and automation that turns "did we patch that?" from a meeting into a dashboard. You're comfortable in a CI/CD pipeline, an AWS account, and a Kubernetes cluster. You can read application code well enough to tell a real injection risk from scanner noise, and you'd rather fix the template that generated the bug than file 40 tickets about it. This is a foundational role. You'll be one of the first dedicated DevSecOps engineers on a platform organization supporting 300+ engineers, working alongside our Developer Experience and SRE teams and partnering closely with the Security organization. You'll shape how secure software gets built here, not just review it after the fact – including how we use AI to find and fix vul

About Hark Hark is an artificial intelligence company building advanced, personalized intelligence. One that is proactive, multimodal, and capable of interacting with the world through speech, text, vision, and persistent memory. We're pairing that intelligence with next-generation hardware to create a universal interface between humans and machines. While today's AI largely operates through chat boxes and decade-old devices, Hark is focused on what comes next: agentic systems that interact naturally with people and the real world. To get there, we're developing multimodal models and next-generation AI hardware together, designed from the ground up as a single, unified interface for a new era of intelligent systems. About the Role We're hiring a Member of Technical Staff (Application Security Engineer) to own the security of the software Hark ships. You'll review design and code, find and fix vulnerabilities in our backend services, mobile apps, and third-party integrations, and build the guardrails that let engineers move fast without shipping bugs. Our agents act on behalf of users across their apps and data, so you'll also be defining how to secure LLM and agent systems, a space with very few established playbooks. This role is hands-on; you'll be reading code, writing fixes, and building tooling, not managing or auditing. Responsibilities Threat-model new features and services, with a focus on agent/LLM attack surfaces (prompt injection, tool misuse, data exfiltration, cross-tenant access). Review code and designs for Hark's backend services (primarily Go), APIs, and mobile apps; fix vulnerabilities directly when it's faster than filing a ticket. Secure authentication, authorization, and session handling across our consumer product, including OAuth integrations with third-party platforms. Build and tune SAST, dependency, and secrets scanning in CI so findings are high-signal and developers actually act on them. Triage and remediate findings from pentests and our

About the role We are looking for a Sr. Full Stack Application Security Engineer with deep expertise in mobile application security to join our Product Security team. This role is hands-on and impact driven. You will work directly with mobile, backend, and platform engineering teams to identify, prevent, and remediate security issues across our iOS, Android, API, and backend systems. You will operate close to the code and close to the product. That means reviewing architectures across the stack, influencing secure design decisions early, and helping teams ship features safely without slowing delivery. This role is for someone who understands how modern distributed systems and mobile apps are built, deployed, and attacked in real-world environments. While mobile application security is a core focus, you will be part of a team that owns security posture across the full application stack including APIs, backend services, identity and authentication flows, and CI/CD pipelines. In this role, you can expect to Build and improve security capabilities, automation, and guardrails for mobile applications and backend/API services Perform application or API/backend penetration testing Identify, triage, and help remediate vulnerabilities across Chime products Partner closely with engineering and product teams to embed security into the development lifecycle across mobile apps, APIs, and backend services Perform architecture and code reviews across the stack (iOS/Android, APIs, backend) with a focus on secure data storage, authentication, authorization, secure communication, and session/token handling Leverage AI to accelerate security workflows (e.g., code review support, triage, threat modeling), and partner with teams building AI-enabled features to define and implement production-grade AI security controls To thrive in this role, you have 5+ years of experience in application security, with strong hands-on experience across both mobile and backend systems Ha

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE As a Security Engineer for Application Security within the Global Information Security Office (GISO), your mission is to embed seamless, scalable security practices directly into the software development lifecycle at Everpure. In this highly collaborative role, you will partner closely with global development, platform, and security teams to design standardized controls that empower our engineers. By building intelligent automation and tooling integrations, you will ensure our engineering pipelines consistently operate with both uncompromising security and exceptional speed. WHAT YOU'LL DO Implement and integrate critical application security controls (such as SAST, DAST, SCA, and secrets scanning) within CI/CD pipelines and Git-based workflows to proactively secure Everpure's software supply chain. Develop and maintain scalable automation scripts to streamline complex security checks, significantly improving tooling efficiency and driving consistent security adoption across engineering platforms. Exercise independent judgment in analyzing moderately difficult security issues, guiding development teams to effectively identify, troubleshoot, and remediate vulnerabilities in modern application environments. Drive the standardization of secure coding best practices and track key AppSec metrics to actively elevate the overall maturity of our global secure development operations. WHAT YOU BRING A strong foundation in a

About Pinterest: Millions of people around the world come to our platform to find creative ideas, dream about new possibilities and plan for memories that will last a lifetime. At Pinterest, we’re on a mission to bring everyone the inspiration to create a life they love, and that starts with the people behind the product. Discover a career where you ignite innovation for millions, transform passion into growth opportunities, celebrate each other’s unique experiences and embrace the flexibility to do your best work. Creating a career you love? It’s Possible. At Pinterest, AI isn't just a feature, it's a powerful partner that augments our creativity and amplifies our impact, and we’re looking for candidates who are excited to be a part of that. To get a complete picture of your experience and abilities, we’ll explore your foundational skills and how you collaborate with AI. Through our interview process, what matters most is that you can always explain your approach, showing us not just what you know, but how you think. You can read more about our AI interview philosophy and how we use AI in our recruiting process here . We’re looking for a Senior Security Software Engineer to provide technical leadership within Security Operations. You’ll own and evolve foundational platforms that help Pinterest govern cloud infrastructure, identify and remediate vulnerabilities, automate security compliance and integrate security reviews into engineering workflows. You’ll translate complex and sometimes ambiguous security requirements into scalable controls, services and paved paths across AWS, CI/CD and the software-development lifecycle. This role combines hands-on software and infrastructure engineering with architectural ownership, cross-functional influence and responsibility for the reliability and adoption of security-critical capabilities. What you’ll do: Own the architecture and technical direction of critical Security Operations systems, automation and developer-faci

Our Global Structure Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team. The head of EMEA Refund Fraud will lead Doordash’s EMEA strategy for preventing and managing refund abuse across our marketplace. You will be accountable for the performance of the Credit and Refund (C&R) Fraud domain: setting the long-term vision, determining where we focus our resources, and building the team, controls and capabilities required to reduce fraud sustainably while protecting the experience of genuine customers. This is a senior leadership role at the intersection of Integrity, Customer Care, Product, Engineering, Analytics and Finance. You will lead a team of experienced fraud and strategy professionals and work with senior leaders across Deliveroo to make complex decisions about fraud risk, customer experience, operational cost and product investment. You will need to be comfortable operating in ambiguity, identifying problems before they become material, and turning complex and sometimes incomplete signals into a clear strategy. Success will come not from personally solving every problem, but from creating the direction, operating mechanisms and team that enable Deliveroo to manage refund fraud effectively at scale. What You’ll Be Doing Setting the C&R Fraud Strategy Set and own the 1–2 year vision and strategy for C&R Fraud, translating wider Integrity and business priorities into a focused roadmap. Proactively identify emerging risks, systemic vulnerabilities and opportunities rather than waiting for problems to be assigned. Determine the highest-value problems for the team to solve and make clear choices about where we should (and should not) invest. Define how we balance fraud loss, customer experience, operational cost and growth when desig

Why Harvey At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched. Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you. At Harvey, the future of professional services is being written today — and we’re just getting started. Role Overview As a Staff Software Engineer on the Security Engineering team, you will join as a founding team member and build the security foundations that let Harvey put increasingly capable AI agents to work. You'll lead development of a platform for agents to perform security work, while shaping how agents are sandboxed across our product and internal platforms. One of the central challenges is enabling models with advanced cybersecurity capabilities to discover and validate vulnerabilities automatically, including through authorized penetration testing, while protecting sensitive data and systems. You'll build the execution environments, orchestration, and controls that make this possible, and help enable the internal use of open-source models with appropriate protections aroun

The Applications Development Technology Senior Lead Analyst is a senior level position responsible for establishing and implementing new or revised application systems and programs in coordination with the Technology Team. The overall objective of this role is to lead applications systems analysis and programming activities. Responsibilities: Lead the architecture, design, development, and delivery of enterprise UI applications. Strong hands-on experience with Angular and Ext JS for developing scalable and responsive user interfaces. Strong experience with Java and Spring Boot for designing and developing backend services and APIs. Experience deploying, supporting, and troubleshooting applications in ECS/containerized environments . Define application architecture, technical standards, reusable components, and development best practices. Provide technical leadership to development teams, including design reviews, code reviews, performance optimization, and troubleshooting . Strong understanding of CI/CD pipelines , including automated build, testing, deployment, and release processes. Hands-on experience with GitHub , including source-code management, branching strategies, pull requests, code reviews, and integration with CI/CD pipelines. Strong knowledge of open-source technologies and frameworks , with hands-on implementation experience. Ability to evaluate and select appropriate open-source libraries, frameworks, and tools , considering security, licensing, maintainability, vulnerabilities, and enterprise standards. Drive application modernization, technical improvements, and adoption of engineering best practices. Work closely with architects, developers, infrastructure teams, product owners, and business stakeholders to deliver solutions successfully. Prov

Location: Doha, Qatar | Practice Area : Technology & Engineering | Type: Permanent The Role Capco is looking for an AI Security Consultant to help our clients identify, assess, and manage security risks associated with AI technologies and AI-enabled solutions. You’ll work across data, security, technology, risk, and business teams to embed appropriate security controls throughout the lifecycle of AI systems. This is an opportunity to work at the intersection of AI, data, and cybersecurity within financial services, helping clients adopt AI securely while protecting sensitive information, strengthening governance, and managing emerging security risks. What You’ll Do Assess security risks associated with AI systems, models, data pipelines, and supporting technology environments. Conduct AI security assessments and secure AI architecture reviews. Define and implement security controls, standards, and guardrails across the AI lifecycle, from design and development through deployment and ongoing operation. Identify and assess AI-specific threats and vulnerabilities, including risks relating to data exposure, model access, prompt manipulation, and misuse. Deliver cybersecurity advisory services supporting enterprise AI adoption. Support clients in securing AI-enabled products, platforms and data ecosystems. Work with data, security, architecture, engineering, risk, and business teams to embed security-by-design into AI solutions and delivery processes. Support AI security governance, risk assessments, control testing, monitoring, incident response, and remediation activities. What We’re Looking For Strong experience in cybersecurity, information security, AI security, data security, or related technology risk disciplines. Practical understanding of AI and machine learning environments and the security risks associated with models, data, applications, and supporting infrastructure. Experience applying security controls, threat modelling, risk assessment, identity and a