Vulnerability Jobs

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. Role Overview We are looking for a Security Analyst to join the Bloomreach GIST (Global Information Security & Technology) team to help protect our environment from threats, vulnerabilities, and sophisticated attackers. Your work will have a significant impact on numerous customers across various e-commerce verticals and hundreds of millions of online users. As a core member of our globally distributed 24/7 Security Operations Team, you are expected to work from one of our India offices ( Bengaluru) or from home. This role is ideal for someone who has built a solid foundation in security operations and is ready to take the next step — owning more complex work, developing specialised skills, and contributing more meaningfully to the team's detection and response mission Your job will include, but

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world's biggest financial problems. We're looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn't a place for complacency, it's where ambitious people do the best work of their careers. We're a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. Robinhood's Security Engineering org is a builder-first security engineering team — engineers organized across Cloud Security, Infrastructure Security, Security Platform, and Detection & Response. Unlike traditional security teams that identify risk and hand it off, this org builds the systems that solve it. We own the critical authentication and identity infrastructure that protects every Robinhood user, the cryptographic libraries and access provisioning systems that keep internal operations secure, and the telemetry and detection platforms that give our security operations team the signal they need to move fast. If it secures how Robinhood runs — we built it. AI is reshaping what this team does and how it operates across two dimensions. First, we are embedding security directly into Robinhood's growing AI and agentic infrastructure — building the runtime authentication, credential management, and validation systems that make it possible to run AI safely in production at scale. Second, we are using AI to fundamentally multiply the capability of the security program itself — building intelligent internal platforms that surface vulnerabilities, accelerate detection

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are looking for an AI Agent Security Architect to function as the primary technical authority for Replit’s autonomous and AI agent security blueprint. In this critical role, you will design, implement, and maintain the runtime defense systems, guardrail frameworks, and sandboxing architectures that govern AI agents executing code, invoking tools, and reasoning across our platform. You will be a key technical contributor—leading high-impact AI security initiatives and bridging the gap between non-deterministic AI behavior and rigorous cybersecurity controls for both engineering and executive leadership. What You'll Do AI Agent Security Strategy & Technical Execution AI Agent Security Blueprint: Define the long-term vision and architectural patterns for securing autonomous agent workflows, Model Context Protocol (MCP) integrations, multi-turn reasoning loops, and multi-agent coordination. Runtime Guardrails & Policy Enforcement: Architect and deploy dynamic input/output guardrail systems, semantic firewalls, and real-time intent verification filters to prevent goal hijacking, system prompt leaks, and indirect prompt injections. Agent Execution & Tool Sandboxing: Partner with Infrastructure and AppSec teams to design secure, short-lived, micro-isolated environments (e.g., microVMs, WebAssembly, container sandboxes) where agents can dynamically execute code, run shell commands, and interact with host operating systems safely. Agentic Threat Modeling & Red Teaming: Conduct specialized threat modeling against non-deterministic systems. Lead automated and manual AI red-teaming initiatives to uncover vulnerabilities in RAG context pipelines, vector stores, and tool-calling interfaces. Identity

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Coinbase stores a large amount of digital currency making us a top tier target on the internet. Security is core to our mission and has been a key competitive differentiator for us as we scale. Security Platform Engineering ( SPE ) team is building platform capabilities for a variety of security use cases critical for security, compliance and privacy at Coinbase. Some of the key functional areas we are developing capabilities for are secrets and key management, identity access and management, onchain security, policy and risk management, vulnerabilities management enabling our product, compliance, security and services teams to protect Coinbase and our customers. What you’ll do: Architect and develop platform for security platform engineering org Provide technical structure to teams and work closely with management and stakeholders to define strategic roadmaps Build new services to meet critical product and business needs using Golang / Java Design scalable systems to solve novel problems with modern cloud technology and industry best practices. Manage individual projects priorities, deadlines and deliverables with your technical expertise Mentor and train other team members on design techniques and coding standards Articulate a long term vision for maintaining and scaling our backend systems and the teams running them. Work with engineers, designers, product m

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About the Role The Verkada Security Team is a software engineering team at its core- we build the right way to do software security. In this role, you will scale Verkada’s security in the SDLC through automation, libraries, tools and frameworks. The role’s broad scope means you will be writing code in a variety of technology stacks and collaborating with engineering teams across Verkada’s Command platform. What You'll Do As a Verkada Builder, you will have a broad scope of ownership and will lead initiatives to eliminate classes of vulnerabilities from Verkada. This includes wearing a PM hat when needed, building experiments and prototypes, driving adoption of your tools, and demonstrating your impact on the organization Build tools to make it easy for Verkada’s software engineers to do the right thing for security as they build products and infra

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Coinbase stores a large amount of digital currency making us a top tier target on the internet. Security is core to our mission and has been a key competitive differentiator for us as we scale. Security Platform Engineering ( SPE ) team is building platform capabilities for a variety of security use cases critical for security, compliance and privacy at Coinbase. Some of the key functional areas we are developing capabilities for are secrets and key management, identity access and management, onchain security, policy and risk management, vulnerabilities management enabling our product, compliance, security and services teams to protect Coinbase and our customers. What you’ll do: Architect and develop platform for security platform engineering org Provide technical structure to teams and work closely with management and stakeholders to define strategic roadmaps Build new services to meet critical product and business needs using Golang / Java Design scalable systems to solve novel problems with modern cloud technology and industry best practices. Manage individual projects priorities, deadlines and deliverables with your technical expertise Mentor and train other team members on design techniques and coding standards Articulate a long term vision for maintaining and scaling our backend systems and the teams running them. Work with engineers, designers, product m

OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity We are looking for a Staff Mobile Security Engineer to join our Mobile Security team, where you will play a key role in identifying and mitigating security vulnerabilities across OKX's mobile applications and platforms. This is a high-ownership role at the intersection of offensive security, mobile engineering, and platform protection — you will work closely with development, operations, and compliance teams to ensure security is embedded at every layer of our mobile stack. You bring deep expertise in mobile application security, offensive techniques, and secure coding practices. You are also fluent in AI-assisted development and bring the discipline to build, maintain, and continuously improve your own AI engineering workflows. What You'll Be Doing Identify and address security vulnerabilities in mobile code, systems, and networks through manual review, automated tooling, and threat modelling. Manage and optimise application security tools, processes

TextNow is on a mission to make communications affordable and accessible for everyone. As a full MVNO operating our own mobile core network over LTE and 5G NSA, we have the unique advantage of controlling our network infrastructure end-to-end. We operate the HSS, PGW, and other critical network functions, giving us the flexibility to innovate and deliver exceptional service to millions of users. About the Role Join us in our mission to break down barriers to communication and free the flow of conversation for people everywhere. T extNow is looking for a new SecOps team member to secure, monitor , and enable automated response within our infrastructure. What You’ll Do Ensure Secure & Reliable Systems: Design, implement, and maintain security-focused infrastructure to protect TextNow’s services while ensuring reliability and scalability. Security Automation & Infrastructure as Code: Develop and enforce best practices using Terraform, Ansible, Crowdstrike , and AWS security tools , ensuring secure configurations, automated compliance checks, and infrastructure as code. Threat Detection & Incident Response: Participate in an on-call rotation to respond to security incidents, investigate vulnerabilities, and implement proactive measures to prevent future threats. Work closely with engineering teams to remediate security risks. Monitoring & Logging for Security: Improve observability by implementing security monitoring solutions, logging best practices, and alerting mechanisms to detect anomalies and suspicious activity. Access Control & Identity Management: Manage IAM roles, permissions, and policies to ensure least privilege access and enforce security controls across cloud and internal systems. Collaboration & Security Advocacy: Wo

TextNow is on a mission to make communications affordable and accessible for everyone. As a full MVNO operating our own mobile core network over LTE and 5G NSA, we have the unique advantage of controlling our network infrastructure end-to-end. We operate the HSS, PGW, and other critical network functions, giving us the flexibility to innovate and deliver exceptional service to millions of users. About the Role Join us in our mission to break down barriers to communication and free the flow of conversation for people everywhere. T extNow is looking for a new SecOps team member to secure, monitor , and enable automated response within our infrastructure. What You’ll Do Ensure Secure & Reliable Systems: Design, implement, and maintain security-focused infrastructure to protect TextNow’s services while ensuring reliability and scalability. Security Automation & Infrastructure as Code: Develop and enforce best practices using Terraform, Ansible, Crowdstrike , and AWS security tools , ensuring secure configurations, automated compliance checks, and infrastructure as code. Threat Detection & Incident Response: Participate in an on-call rotation to respond to security incidents, investigate vulnerabilities, and implement proactive measures to prevent future threats. Work closely with engineering teams to remediate security risks. Monitoring & Logging for Security: Improve observability by implementing security monitoring solutions, logging best practices, and alerting mechanisms to detect anomalies and suspicious activity. Access Control & Identity Management: Manage IAM roles, permissions, and policies to ensure least privilege access and enforce security controls across cloud and internal systems. Collaboration & Securi

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Product Manager II within Coinbase’s Identity organization and Platform group, you'll own the strategy and execution for enterprise identity and multi-user experiences across Coinbase's business products. This team is responsible for some of the highest-traffic, most security-critical surfaces at Coinbase, including sign-in, authentication, account management, and organization administration. You'll define how business customers manage users, roles, permissions, and security controls across Coinbase's growing product portfolio, directly shaping how enterprises adopt and scale on our platform. What you’ll do: Own the product roadmap for enterprise identity and multi-user capabilities, including role-based access control, organization management, SSO/SAML, domain claiming, and provisioning (SCIM, JIT). Drive the strategy for authentication, authorization, and account-security experiences that serve both consumer and business customers at scale. Lead cross-functional launches by coordinating engineering, design, security, legal, privacy, CX, and international stakeholders through complex delivery milestones. Partner with Security and Engineering to identify vulnerabilities, define mitigations, and establish operational guardrails for privileged-access workflows. Shape the long-term platform vision for identity primitives that unlock new business verticals and integ

Datadog is seeking a motivated and experienced Security Sales Engineer to join our dynamic enterprise sales engineering team. In this role, you will play a critical part in driving our security sales efforts by providing technical expertise and delivering compelling solutions to our customers. You will work closely with our enterprise sales engineers and sales team to identify customer needs, craft go to market strategy, demonstrate the value of Datadog's security solutions, and ensure customer satisfaction. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What you will do: Support the Enterprise Security Sales team in driving adoption of Datadog’s security offering within target strategic accounts. Collaborate with the broader sales team to identify and understand security requirements across Datadog’s Enterprise customer base. Conduct detailed product demonstrations and presentations, showcasing the capabilities and benefits of Datadog's security solutions. Provide technical expertise and support throughout the sales cycle, including during customer evaluations and proof-of-value initiatives. Develop and maintain a deep understanding of Datadog's security products, industry trends and current vulnerabilities, staying updated with the latest features and enhancements. Assist in the creation of technical proposals, documentation, and other sales materials. Work closely with the product management and engineering teams to relay customer feedback and influence product development. Participate in industry events, conferences, and webinars to promote Datadog's security solutions.. Who You Are : Bachelor’s degree in Computer Science, Information Technology, or a related field. Deep experience with SIEM platforms and detection pipelines, SOC workflows (alert triage

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: Threat Disruption provides expert threat intelligence and conducts scaled operations against the adversaries attacking X. We investigate and disrupt threats across the following areas: Platform manipulation, including coordinated networks of bots attempting to pollute the information space Compromises of accounts owned by high-visibility individuals and organizations Sensitive allegations carrying reputational, legal, or geopolitical weight, including suspected foreign-linked influence campaigns Financial fraud, monetization abuse, and scam networks operating on and off X Other X Rules violations, including illegal activity and child safety We identify how adversaries circumvent our defenses, abuse product features and core services, and benefit from the abuse. Based on these investigations, we conduct sweeps to disrupt immediate threats and provide recommendations to product, engineering, and policy teams to squash systemic vulnerabilities. Where appropriate, Threat Disruption also coordinates with law enforcement and other external parties to enhance detections and support prosecution of bad actors. Come help us defend the global town square. RESPONSIBILITIES:

Datadog is seeking a motivated and experienced Security Sales Engineer to join our dynamic enterprise sales engineering team. In this role, you will play a critical part in driving our security sales efforts by providing technical expertise and delivering compelling solutions to our customers. You will work closely with our enterprise sales engineers and sales team to identify customer needs, craft go to market strategy, demonstrate the value of Datadog's security solutions, and ensure customer satisfaction. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What you will do: Support the Enterprise Security Sales team in driving adoption of Datadog’s security offering within target strategic accounts. Collaborate with the broader sales team to identify and understand security requirements across Datadog’s Enterprise customer base. Conduct detailed product demonstrations and presentations, showcasing the capabilities and benefits of Datadog's security solutions. Provide technical expertise and support throughout the sales cycle, including during customer evaluations and proof-of-value initiatives. Develop and maintain a deep understanding of Datadog's security products, industry trends and current vulnerabilities, staying updated with the latest features and enhancements. Assist in the creation of technical proposals, documentation, and other sales materials. Work closely with the product management and engineering teams to relay customer feedback and influence product development. Participate in industry events, conferences, and webinars to promote Datadog's security solutions.. Who You Are : Bachelor’s degree in Computer Science, Information Technology, or a related field. Deep experience with SIEM platforms and detection pipelines, SOC workflows (alert triage

Datadog is seeking a motivated and experienced Security Sales Engineer to join our dynamic enterprise sales engineering team. In this role, you will play a critical part in driving our security sales efforts by providing technical expertise and delivering compelling solutions to our customers. You will work closely with our enterprise sales engineers and sales team to identify customer needs, craft go to market strategy, demonstrate the value of Datadog's security solutions, and ensure customer satisfaction. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What you will do: Support the Enterprise Security Sales team in driving adoption of Datadog’s security offering within target strategic accounts. Collaborate with the broader sales team to identify and understand security requirements across Datadog’s Enterprise customer base. Conduct detailed product demonstrations and presentations, showcasing the capabilities and benefits of Datadog's security solutions. Provide technical expertise and support throughout the sales cycle, including during customer evaluations and proof-of-value initiatives. Develop and maintain a deep understanding of Datadog's security products, industry trends and current vulnerabilities, staying updated with the latest features and enhancements. Assist in the creation of technical proposals, documentation, and other sales materials. Work closely with the product management and engineering teams to relay customer feedback and influence product development. Participate in industry events, conferences, and webinars to promote Datadog's security solutions.. Who You Are : Bachelor’s degree in Computer Science, Information Technology, or a related field. Deep experience with SIEM platforms and detection pipelines, SOC workflows (alert triage

Overview: We are seeking a Junior IT Support Technician to join our IT Support Team. This role is ideal for someone passionate about technology and eager to provide IT system support. The role supports the Desktop Systems and General IT matters at the Guidepoint office in Shanghai. This includes triaging hardware and software issues, network problems and other IT tasks as assigned. What You'll Do: Provide helpdesk support to a technical and non-technical staff in a Windows/MAC environment Management of desktop systems, and applications (MS Office / Firefox, etc) Setting up and configuring new desktops and users Troubleshoot network issues, desktop application issues, security issues (Anti-virus, malware, etc) Available off hours to monitor and respond to support calls and alerts; Printer management; Audio/Video devices Provide remote support to global users Manage and support mobile devices Inventory management Maintain a knowledge base, documentation and administration procedures Research on new technology Knowledge of Ticketing systems/Helpdesk ( ManageEngine , ServiceNow , Jira etc) Basic troubleshooting /understanding : Azure environment , Endpoint , Intune , O365 Admin Portal / Exchange Online What You Have: Bachelor's Degree 3-4 years of experience with IT Support in a corporate office environment Previous internship/volunteering/extracurricular experience OS: Working knowledge of Windows OS. (Mac/Linux a plus) Networking: LAN, WAN, TCP/IP, DHCP, DNS, Active Directory Security: Data & Network security Network/traffic security (file/folder, content filtering, etc) Knowledgeable in Spy/Malware/Virus vulnerabilities Spam filtering; Knowledge of messaging protocols Hardware: Dell Laptops, Printers, Docking Stations, Monitors Applications: Basic Desktop applications, Application deployment and updates as needed Microsoft Suite, including Teams, O365 Office Suite Data recovery tools, Microsoft Office, QuickBooks, etc Telecommu