Vulnerability Jobs

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Executive Director - Business Information Security Officer (BISO) will serve as a senior leader and trusted security advisor supporting all CVS Health lines of business, with accountability for leading the BISO team and driving mission, vision, and governance model. This individual will provide senior‑level leadership, strategic and tactical guidance for a world‑class enterprise cybersecurity program. As a business enabler, the BISO is an effective communicator with the technical aptitude to embed security strategy and risk‑based decision‑making into all aspects of the business. The BISO understands security risks, threats, vulnerabilities, control frameworks, and security technologies and translates their impact in business terms. The BISO must be capable of working closely with senior IT business leaders, executive leadership, and business subject matter experts (SMEs). This role requires demonstrated leadership, exceptional organizational skills, strong business and financial acumen, and the ability to influence and drive change at scale across the organization. <

EMPLOYER IS A CONTRACTOR FOR THE U.S. GOVERNMENT. THIS POSITION REQUIRES U.S. CITIZENSHIP. Role Description: We are seeking a Senior Platform Engineer to join a team developing AI applications that help users understand and act on complex Naval engineering records. Using a Forward Deployed Engineering model, our team works closely with mission users to understand how they work, identify friction in their daily tasks, and deliver functional improvements based on rapid feedback. You will serve as the team’s primary platform engineering owner, responsible for the systems and processes that move our applications from source code into secure, production-ready environments. Your work will span release workflows, CI/CD pipelines, container images, Kubernetes configurations, cloud infrastructure, application deployments, and production troubleshooting. This is a hands-on senior individual contributor role. You will independently own significant platform work, make technical decisions across systems, anticipate risks and dependencies, and collaborate with application engineers and platform teams across the company. Responsibilities: In this position, you will: Own and improve end-to-end release workflows for the team’s AI applications, from building container images through creating production-ready release packages. Build and publish container images, address or document vulnerabilities, manage dependency updates, and maintain release artifacts. Develop and maintain CI/CD pipelines using GitHub Actions, GitHub runners, and GitLab workflows. Configure, deploy, scale, and maintain production applications running in Kubernetes. Maintain Zarf packages, Kubernetes configurations, and other declarative deployment artifacts. Support the deployment and troubleshooting of AI and GPU-enabled workloads. Investigate data-ingestion and production issues across application code, infrastructure, system access, and deployment configuration. Partner with application engineers an

Location: Doha | Practice Area : Technology & Engineering | Type: Permanent The Role Capco is looking for a Security Architect to help our clients design and deliver secure, resilient cloud environments. You’ll work across business, security, architecture, engineering, risk, and technology teams to embed security into cloud transformation programmes from the outset. This is an opportunity to tackle complex security challenges within financial services, helping clients adopt cloud technologies confidently while maintaining strong governance, regulatory compliance, and security controls. What You’ll Do Designing and implementing cloud security strategies and policies that meet an organisation's specific needs. Design secure architectures and security patterns across public, private, and hybrid cloud environments. Define and implement cloud security controls, standards, guardrails, and architecture principles aligned with business and regulatory requirements. Work with engineering and platform teams to embed security throughout cloud infrastructure, applications, and delivery pipelines. Conducting regular security assessments and audits to identify vulnerabilities and develop plans to address them. Assess cloud security risks, identify control gaps, and provide practical recommendations that balance security, resilience, and business requirements. Collaborate with security, risk, architecture, and technology stakeholders to support secure cloud adoption and transformation. What We’re Looking For Strong experience in cloud security architecture, cybersecurity architecture, or cloud infrastructure security. Practical knowledge of security architecture principles, identity and access management, encryption, network security, logging, monitoring, and cloud-native security controls. Experience designing security solutions across major cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform. Strong understanding of security frameworks, governance, risk man

About the Team & Role: We're building Rubrik Agent Cloud, the enterprise platform to monitor, govern, and remediate AI agents. Our team operates at the intersection of AI, distributed systems, and enterprise security, creating solutions that make it possible for organizations to operate production-grade AI agents at scale. As a member of the Rubrik Agent Cloud team, you'll work with cutting-edge AI technologies while solving complex challenges in scaling, security, and performance. We're a collaborative team passionate about pushing the boundaries of what's possible with enterprise AI infrastructure. Nature of the Specialized Duties ➢ Architecting and Governing Secure Multi-Cloud Foundations (30% of time) Leading the end-to-end architectural design and onboarding of complex business units into a multi-cloud ecosystem (AWS, Azure, GCP, OCI), ensuring structural parity across disparate environments. Engineering secure "Landing Zones" and multi-tenant structures using advanced Identity and Access Management (IAM) hierarchies and automated policy enforcement. Developing and implementing global Role-Based Access Control (RBAC) models and Attribute-Based Access Control (ABAC) frameworks to manage granular permissions for AI agent workloads. Designing and governing resource hierarchy models and tagging standards that utilize metadata for automated lifecycle management and complex cost-attribution algorithms. ➢ Engineering Security and Compliance at Scale for AI Workloads (25% of time) Designing and implementing cryptographic controls, including Key Management Service (KMS) integration, encryption-at-rest/transit protocols, and hardware security module (HSM) configurations. Architecting network security perimeters using VPC Service Controls , Privileged Identity Management (PIM), and deep packet inspection logging. Conducting technical root-cause analysis of security vulnerabilities and engineering automated remediation scripts to close compliance gaps (SOC 2, ISO

RDQ227R1175 While candidates in the listed location(s) are encouraged for this role, candidates in other locations will be considered. About Databricks Databricks is the data and AI company. More than 12,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. About the Team The Continuous Monitoring (ConMon) team at Databricks builds and operates the engineering infrastructure that keeps Databricks' security control posture visible, measurable, and defensible at all times. We build automation that continuously assesses whether security controls are actually working across cloud environments, SaaS platforms, identity systems, and enterprise applications — surfacing drift, coverage gaps, and control failures as they happen rather than at the next audit. Our work sits at the intersection of security engineering and GRC: we turn control requirements into code, evidence collection into automation, and security posture into intelligence that drives decisions. The ConMon team also maintains security tooling and scanning infrastructure to aid control evaluation. This includes scanning for secret leaks, asset vulnerabilities, and SAST. As Databricks' security program, cloud footprint, and regulatory obligations all scale, the Continuous Monitoring team is responsible for ensuring the company's control posture is always verifiable, always current, and never a surprise. The Role Databricks is looking for a Senior Manager to lead the Continuous Monitoring team. You will own the engineering function that measures whether Databricks' security controls are working — across cloud infrastructure, identity, SaaS, and enterprise systems — and turns that measurement into so

Our Global Structure Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team. About the Role Hybrid (3 days per week in the London office required) Individual contributor role Fraud is constantly evolving. As our business grows, so do the ways bad actors seek to exploit our products, promotions, and operations. As the Senior Strategy & Operations Manager for Emerging Fraud & Abuse, you'll lead the discovery, investigation, and mitigation of new and evolving abuse vectors across our platform. Your mission is to identify risks before they become systemic, working across Product, Engineering, Data Science, Operations, Legal, and Policy to design scalable solutions that protect our customers, partners, and business. This isn't a role focused on running existing fraud programmes. It's about identifying what's next. You'll combine deep analytical thinking with strategic problem solving to uncover emerging threats, quantify business impact, influence product strategy, and build new controls that keep us ahead of increasingly sophisticated fraudsters. If you enjoy solving ambiguous problems, following the data, and building solutions where no playbook exists, we'd love to hear from you. What You'll Do Identify Emerging Abuse Proactively identify new fraud patterns, abuse trends, and vulnerabilities across our products, customer journeys, and operational processes. Investigate anomalies, understand attacker behaviours, and translate observations into actionable mitigation strategies. Continuously scan for evolving risks, whether driven by organised fraud, policy loopholes, technological change, or new product launches. Build the Strategy Define the roadmap for emerging fraud prevention across the business. Prioritise risks based on

Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next emerging Fraud Researcher. About the job This position is needed to detect emerging fraud trends and behaviors on Twilio Network, across all channels - voice, messaging and email. You will work on researching new fraud behaviors by analyzing industry trends and analyzing billions of events using AI tools. Responsibilities In this role, you’ll: Perform independent research using AI tools to identify novel emerging fraud trends Work with data scientists to create ML models to detect fraud behaviors at scale Continuously stress test our network for vulnerabilities Analyze large-scale messaging and voice traffic to identify novel patterns of fraudulent activity, including AIT and ATO. Develop and execute proactive fraud mitigation strategies to protect customers and the network. Collaborate with data science and engineering teams to refine detection models and reduce false positives. Conduct in-depth investigations int

Your wellbeing, our mission. Join a company shaping a healthier world. GET TO KNOW US At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep—all in one simple subscription. Headquartered in NYC with team members in Europe, North America and South America, we’re on a mission to make every company a wellness company. We believe work should be fulfilling, inspiring, and balanced. Here, you’ll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact. Your contributions will help shape a healthier, more balanced world for you and millions of people globally. Join us in redefining the future of wellbeing! THE OPPORTUNITY We are hiring a Cloud Security Engineer for the InfoSec team in Brazil ! We are looking for an experienced security engineer to lead our cloud security strategy across multi-cloud environments (AWS & GCP). You will drive our Zero Trust architecture, embed a Shift-Left security culture within engineering teams, secure containerized and serverless workloads, and pioneer security controls for emerging Artificial Intelligence deployments—including Agentic AI systems, Model Context Protocol (MCP), Retrieval-Augmented Generation (RAG) architectures, AI guardrails, and mitigations against OWASP Top 10 for LLMs and MITRE ATLAS framework threats. This position is for the Cloud Security team. The Cloud Security Engineer is responsible for designing, implementing, and managing security measures in cloud computing environments to protect data, applications, infrastructure, and services against potential threats and vulnerabilities. YOUR IMPACT Architect and govern cloud security controls across AWS and GCP environments following Zero Trust principles; Embed automated security testing and threat modeling directly into CI/CD pipelines to champi

Help strengthen network and data security across complex financial services environments, protecting critical infrastructure and sensitive information from evolving threats. The Role As a Senior Network Security Consultant, you will work with clients and delivery teams to strengthen the security, resilience, and protection of enterprise network and data environments across complex financial services organizations. You will bring together expertise across network security, infrastructure, and Data Loss Prevention (DLP), helping clients protect sensitive information while maintaining secure, reliable, and high-performing connectivity. You will support the design, implementation, configuration, monitoring, and ongoing enhancement of security controls across networks, endpoints, email, cloud, web, and other relevant technology environments. Working across cybersecurity, infrastructure, cloud, architecture, identity and access management, risk, compliance, privacy, and business teams, you will investigate security events and incidents, identify vulnerabilities and data protection risks, and translate security requirements into practical controls. As a senior consultant, you will provide technical insight, support complex security initiatives, and help clients improve network resilience and data protection while balancing security requirements with operational and business needs. What You’ll Do Assess, monitor, and analyze network and data security environments, investigating security events, DLP alerts, connectivity issues, potential data leakage, policy violations, and emerging risks. Design, configure, implement, and enhance network security and DLP controls across firewalls, VPNs, network segmentation, endpoints, email, cloud, web, and other relevant channels. Lead and support security implementations, upgrades, migrations, and control enhancements, including technical analysis, testing, documentation, deployment, and post-implementation validation. Investigate comple

About the Team Our Safety Systems team is at the forefront of OpenAI's mission to build and deploy safe AGI, driving our commitment to AI safety and fostering a culture of trust and transparency. Within Safety Systems, the Model Policy team works to ensure that increasingly capable models behave safely and reliably in real-world environments. We investigate emerging model failures, define the behavior models should exhibit instead, and develop the data, evaluations, monitoring, and safeguards needed to improve and validate that behavior. Our work connects alignment research with the practical challenges of training and deploying frontier models. About the Role In this role, you will shape how OpenAI understands and addresses real-world risks that emerge from model misalignment as models become more autonomous and operate over longer horizons. You will investigate how misaligned behavior emerges across extended trajectories - including when models persist toward the wrong objective, take unsafe shortcuts, lose track of instructions, exploit weaknesses in their environment, or circumvent constraints - and translate these insights into behavioral policies, evaluations, monitoring, and safeguards. This role is ideal for someone who wants to turn alignment and safety concerns into concrete, empirically grounded improvements to frontier AI systems. This role is based in our San Francisco office. We offer relocation support to new employees, and we use a hybrid model: three days in the office per week with optional work from home on Thursdays and Fridays. Your Responsibilities: Identify vulnerabilities that emerge as models interact with tools, data, and external systems, and translate them into model- and system-level safeguards. Develop threat models and empirical frameworks for understanding harmful outcomes from misaligned behavior. Build frameworks for understanding harmful outcomes arising from model misalignment. Identify the underlying behaviors and system conditio

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. The Identity & Integrity organization is looking for software engineers. We are growing our team with people who want to build, improve and incorporate technologies that make the lives of our community more enriched and safe. As an engineer at Lyft, you'll collaborate with teams like product, data science, analytics, and operations on code that empower us to iterate quickly, while focusing on delighting our passengers and drivers. As a Software Engineer in the Identity team, your primary responsibilities will encompass: Lyft’s Login & Signup Experiences: Design and enhancement of our Multi-factor authentication (MFA) experiences. Optimization of verification funnels, including: Phone-based two-factor authentication (2FA) Email verification Identity provider single sign-ons (SSO) Overseeing session management and device validation. Developing OAuth client provisioning and related tooling. Account Security: Act as the frontline defense against fraudsters and phishers aiming to exploit rider and driver accounts through product vulnerabilities. Implement strategies to counteract risks posed by social engineering tactics. Scaling Core Services: Lead the maintenance and optimization of core microservices under the Identity team's purview, essential to Lyft’s diverse service offerings. Manage organizational structures and multi-user management systems. (RBAC, family accounts, AuthZ) Design solutions for high-stakes challenges such as: Preventing unauthorized driving. Thwarting abuse related to recycled phones and their numbers. Striking a balance between stringent customer verification and ensuring minimal user friction. Responsibilities Write well-crafted, well-tested, readable, maintainable code Promote appropriate tech and engineering best practices Implement identity and security protocols to se

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! Why this role Enterprises hand Cohere their most sensitive data and put our models inside workflows they can't afford to get wrong. Securing that means working on problems the industry hasn't settled yet, what authorization means when an agent acts on a user's behalf, how to contain tools that consume untrusted input, and whether tenant boundaries hold when a model can be steered by the data it reads. The established playbooks only take you so far. We're hiring a Senior Product Security Engineer to work these problems alongside the engineers building the products, reviewing architecture and code, threat modeling before implementation, testing what ships, and turning what you learn into defaults other teams inherit. This is a hands-on engineering role, not an advisory one. What you’ll do Lead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them. Secure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and san

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange™️ platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 160+ public exchanges globally and thousands of private exchanges at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Senior SOC Analyst to join our team . This is a remote role, reporting to the Global SOC Manager in the Enterprise Security department . As a key guardian of our infrastructure, you will monitor, detect, and analyze security incidents to protect our digital assets . You will be the first line of defense, ensuring that potential threats are mitigated promptly and effectively to maintain a secure environment . What you’ll do (Role Expectations) Monitor security alerts and events to identify potential threats and vulnerabilities Detect and analyze security incidents using multiple security tools Respond to security incidents promptly, following established procedures and protocols Conduct in-depth analysis of security events to determine the scope and impact of potential threats Perform phishing incident analysis Who You Are (Success Profile) You thrive in ambiguity. You're comfortable building the

About the Team The Developer Experience team at OpenAI has a singular focus: empowering developers globally. Our mission is to provide every developer and startup on the planet with the most delightful and seamless experience to integrate AI into their applications and products. We ensure developers have the tools, resources, and support they need to unlock AI’s full potential. We create inspiring demos, developer tools, sample applications, and technical content that show developers how to build with Codex and frontier models like GPT-6 Astra, GPT-Live, and GPT-Image-2.5 to create powerful agents and AI-native applications. We collaborate closely with product, engineering, research, and GTM teams to ensure the developer journey, from onboarding with Codex to first API call to production deployment, is seamless, effective, and delightful. About the Role As a Developer Experience Engineer, Cyber, you will create technical content, developer tools, and sample applications that help developers and security teams secure the software they build and depend on. You will turn OpenAI’s cybersecurity capabilities, including Codex Security, into clear, runnable examples and useful learning experiences. You will work directly with developers, security practitioners, and technical founders to understand their needs and show how AI can improve secure development and defensive security workflows. We’re looking for a hands-on engineer who combines strong software skills, creativity, developer empathy, and curiosity about cybersecurity, and who can own projects from the first prototype through release and ongoing improvement. In this role, you will: Build demos, sample applications, and developer tools that demonstrate practical ways to use Codex, OpenAI’s APIs, and Cyber products for secure software development and defensive workflows. Create tutorials, blog posts, videos, and code samples that help developers understand security findings, validate and prioritize vulnerabilities, r

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do. What You’ll Do: Conduct red and purple team engagements simulating advanced threat actors across our cloud infrastructure, endpoints and bare metal deployments. Penetration test specific, high value deployments. Contribute to AI-assisted security testing tooling and workflows. Work cross functionally with other security and engineering teams, particularly on AI-specific attack scenarios. Document and present findings to technical and executive audiences, translating attack narratives into actionable risk insights that inform security roadmaps. Who You Are: 5+ years of hands-on experience in red teaming and offensive security operations Deep expertise in at least two of: macOS security, Linux Security, Cloud security (GCP/AWS/Azure), Kubernetes, CI/CD pipelines Track record of discovering novel attack vectors and chaining vulnerabilities creatively Experience conducting adversarial simulations against well-defended environments Strong engineering skills (Python, Go, or similar) Ability to write clear findings that drive action, helping teams understand risk and prioritize fixes Collaborative approach, working in close collaboration with the blue team Strong candidates may also have experience with: