Vulnerability Jobs

Principal Consultant – Cyber & Operational Resilience Location: London (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent Strengthen cyber resilience and safeguard critical operations across financial services The Role Capco is seeking experienced Principal Consultants to join our Cyber & Operational Resilience capability within the Finance, Risk, Regulatory & Financial Crime (FRRF) practice. You'll work with senior stakeholders across financial services organisations to design and deliver cyber resilience strategies, implement robust resilience frameworks, and enhance operational resilience capabilities. This role combines strategic advisory with hands-on delivery, helping clients strengthen cyber risk management, meet evolving regulatory expectations, and build resilient operating models. You'll also leverage approved AI tools and AI-enabled ways of working to enhance analysis, improve delivery, and generate data-driven insights while applying responsible AI practices and appropriate human oversight. What You'll Do Deliver cyber and operational resilience transformation programmes aligned to regulatory frameworks such as PRA, DORA, and other global resilience standards, identifying opportunities to leverage AI-enabled workflows and automation. Assess and enhance cyber resilience capabilities, including resilience frameworks, operating models, controls, and governance, using AI-enabled analysis where appropriate to strengthen decision-making and operational effectiveness. Support third-party and vendor risk assessments, identifying vulnerabilities across supply chains and technology ecosystems while combining AI-enabled insights with expert judgement. Design and implement resilience governance, Important Business Services (IBS), Impact Tolerance (ITOL), scenario testing, and reporting frameworks, ensuring robust governance, validation, and oversight where AI-assisted tools are utilised. Collaborate with technolog

Job Description Vise is looking for a curious, driven, and tech-savvy Technology Operations Lead to join our growing team. This is a dynamic, cross-functional role that blends IT support, cybersecurity awareness, facilities coordination, and project planning — all with a forward-looking focus on artificial intelligence and emerging technology. If you're someone who gets excited about new tools, loves solving problems, and wants to grow alongside a team that's embracing the future of work, we want to hear from you. This role is onsite in NYC, in our SoHo office. What you bring on day one: 2-4 years of experience in a relevant role such as IT Support Specialist, cybersecurity, SOC Analyst, Systems Administrator, or similar Foundational knowledge of networking, hardware, and operating systems Basic understanding of cybersecurity principles and best practices Strong communication skills and a collaborative, team-first attitude Experience with or strong interest in AI tools (e.g., ChatGPT, Copilot, automation platforms) Exposure to project coordination or ticketing systems (e.g., Jira, ServiceNow, Asana) Familiarity with cloud platforms (AWS, Azure, or Google Cloud) What you will own: IT & Technical Support Provide day-to-day technical support for hardware, software, and network infrastructure Maintain and troubleshoot workstations, peripherals, and office technology systems Manage user accounts, access controls, and software licensing Cybersecurity Assist in monitoring systems for potential security threats or vulnerabilities Support compliance efforts and help enforce security policies and best practices Participate in security awareness initiatives across the organization Facilities & Technology Infrastructure Support office builds, moves, or expansions from a technology perspective Manage hardware inventory and asset lifecycle Maintain hardware infrastructure in meeting rooms and office AI & Emerging Technology Stay current on AI tools, automa

Joining Capco means joining an organisation that is committed to an inclusive working environment where you’re encouraged to #BeYourselfAtWork. We celebrate individuality and recognize that diversity and inclusion, in all forms, is critical to success. It’s important to us that we recruit and develop as diverse a range of talent as we can and we believe that everyone brings something different to the table – so we’d love to know what makes you different. Such differences may mean we need to make changes to our process to allow you the best possible platform to succeed, and we are happy to cater to any reasonable adjustments you may require. You will find the section to let us know of these at the bottom of your application form or you can mention it directly to your recruiter at any stage and they will be happy to help. About Capco Capco is a global technology and business consultancy, focused on the financial services sector. We are growing at fast pace in our Italian office, the opportunity for growth is large, accessible, and immediate. We are passionate about helping our clients succeed in an ever-changing industry. Capco is going through a significant growth journey, now is a very good time to join us as we expand our consulting team in Italy. Role Description: As part of the consulting team, the ICT Risk Analyst will: Support the development and maintenance of the ICT and Cyber Risk Management framework, ensuring alignment with regulatory requirements and industry standards Contribute to the identification, assessment, and monitoring of ICT and cyber risks across systems and processes Perform ICT risk assessments, including RCSA and scenario analysis Define, monitor, and report KRIs, KPIs, and other ICT risk metrics Support second line of defense activities within the ERM framework, focusing on ICT risk exposure monitoring Contribute to the ICT Risk Appetite Framework, including thresholds, limits, and escalation mechanisms Analyze ICT vulnerabilities and ensu

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. The Red Team team’s mission is to proactively identify and simulate real-world threats against Robinhood’s platforms, properties, and people. Through red teaming and adversarial simulations, the team evaluates security controls, uncovers vulnerabilities, and helps continuously strengthen Robinhood’s overall security posture in close partnership with Detection & Response, Physical Security, and Engineering. As a Staff Offensive Security Engineer, you will take a hands-on role in designing and executing stealthy adversarial simulations to validate assumptions and uncover gaps in detection and response. You’ll leverage threat modeling, penetration testing, and research-driven techniques to emulate sophisticated attackers, while collaborating cross-functionally to improve defenses and shape more secure systems. This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. What you’ll

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. Senior Staff Security Engineer The Senior Staff Security Engineer owns current and target-state data architectures and reporting while also designing, implementing, and monitoring cloud (AWS/GCP) infrastructure security controls; deploying, securing, configuring, and operating SIEM and other security resources; identifying, triaging, and remediating infrastructure and web vulnerabilities; leading incident triage and external-researcher engagement; mentoring junior staff; and helping shape secure, scalable approaches for AI-enabled tooling, automation, and emerging product capabilities. Role summary and core responsibilities 6+ years of relevant experience Candidates must demonstrate proficiency in cloud security, network security, URL filtering, common security frameworks, and CVE lifecycle management Prac

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role The Product Security team helps make Ramp the most secure place for our customers to collect, manage, and put to work their business’ financial information. Our work centers in three areas: Ramp builds products with an eye for security Ramp detects and responds to threats before they cause harm Security powers Ramp’s growth Check out our Engineering Blog for more on our tech stack, mission and values! What You’ll Do Build security-focused application primitives and integrate them into our existing products Design and deploy platform-level mitigations to common security issues Lead remediation of prioritized issues across our technology stack: collaborating with other engineers to triage and fix vulnerabilities discovered internally, through penetration testing, and through our bug bounty program Partner with engineering teams to design and deploy solutions which are inherently secure Champion the use of tooling (linters, static analysis, posture assessment scanners, query inspectors, etc.) which help Ramp engineers build secure system

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role We are looking for a Technical Cyber Threat Investigator to join our Threat Intelligence team. In this role, you will be responsible for detecting, investigating, and disrupting the misuse of Anthropic's AI systems for malicious cyber operations. You will work at the intersection of AI safety and cybersecurity, conducting thorough investigations into potential misuse cases, developing novel detection techniques, and building robust defenses against emerging cyber threats in the rapidly evolving landscape of AI-enabled risks. Your work will directly protect the broader ecosystem from sophisticated threat actors who seek to leverage AI technology for harm. Important context: In this position you may be exposed to explicit content spanning a range of topics, including those of a sexual, violent, or psychologically disturbing nature. This role may require responding to escalations during weekends and holidays. Responsibilities Detect and investigate attempts to misuse Anthropic's AI systems for cyber operations, including influence operations, malware development, social engineering, and other adversarial activities Develop abuse signals and tracking strategies to proactively detect sophisticated threat actors across our platform Create actionable intelligence reports on new attack vectors, vulnerabilities, and threat actor TTPs targeting LLM systems Conduct cross-platform threat analysis grounded in real threat actor behavior, using open-source research, dark web monitoring, and internal data Utilize investigation findings to implement systematic improvements to our safety approach and mitigate harm at scale Study tr

About Bazaarvoice At Bazaarvoice, we create smart shopping experiences. Through our expansive global network, product-passionate community & enterprise technology, we connect thousands of brands and retailers with billions of consumers. Our solutions enable brands to connect with consumers and collect valuable user-generated content, at an unprecedented scale. This content achieves global reach by leveraging our extensive and ever-expanding retail, social & search syndication network. And we make it easy for brands & retailers to gain valuable business insights from real-time consumer feedback with intuitive tools and dashboards. The result is smarter shopping: loyal customers, increased sales, and improved products. The problem we are trying to solve : Brands and retailers struggle to make real connections with consumers. It's a challenge to deliver trustworthy and inspiring content in the moments that matter most during the discovery and purchase cycle. The result? Time and money spent on content that doesn't attract new consumers, convert them, or earn their long-term loyalty. Our brand promise : closing the gap between brands and consumers. Founded in 2005, Bazaarvoice is headquartered in Austin, Texas with offices in North America, Europe, Asia and Australia. It’s official: Bazaarvoice is a Great Place to Work in the US , Australia, India, Lithuania, France, Germany and the UK! We are looking for a Senior Offensive Security Engineer who is a "Jack of all trades, Master of some." You don’t need to be a world-class Red Teamer AND a Cloud Architect; rather, you need a solid foundation in offensive security, operational experience in cloud platforms (AWS/GCP) and the maturity to manage our external penetration testing and bug bounty programs. As a leader within our proactive security strategy, you will drive the identification of complex vulnerabilities through expert management of third-party tests and by leading sophisticated, in-depth internal assess

About Bazaarvoice At Bazaarvoice, we create smart shopping experiences. Through our expansive global network, product-passionate community & enterprise technology, we connect thousands of brands and retailers with billions of consumers. Our solutions enable brands to connect with consumers and collect valuable user-generated content, at an unprecedented scale. This content achieves global reach by leveraging our extensive and ever-expanding retail, social & search syndication network. And we make it easy for brands & retailers to gain valuable business insights from real-time consumer feedback with intuitive tools and dashboards. The result is smarter shopping: loyal customers, increased sales, and improved products. The problem we are trying to solve : Brands and retailers struggle to make real connections with consumers. It's a challenge to deliver trustworthy and inspiring content in the moments that matter most during the discovery and purchase cycle. The result? Time and money spent on content that doesn't attract new consumers, convert them, or earn their long-term loyalty. Our brand promise : closing the gap between brands and consumers. Founded in 2005, Bazaarvoice is headquartered in Austin, Texas with offices in North America, Europe, Asia and Australia. It’s official: Bazaarvoice is a Great Place to Work in the US , Australia, India, Lithuania, France, Germany and the UK! We are looking for a Senior Offensive Security Engineer who is a "Jack of all trades, Master of some." You don’t need to be a world-class Red Teamer AND a Cloud Architect; rather, you need a solid foundation in offensive security, operational experience in cloud platforms (AWS/GCP) and the maturity to manage our external penetration testing and bug bounty programs. As a leader within our proactive security strategy, you will drive the identification of complex vulnerabilities through expert management of third-party tests and by leading sophisticated, in-depth internal assess

Who We Are Simpplr is the AI-powered intranet for unifying the digital workplace. It brings people, trusted knowledge, apps, and agents into a coherent digital experience. Powered by a proprietary EX Knowledge Graph, Simpplr synthesizes signals and context across connected systems to deliver personalized information and actions. The platform serves as a digital hub supporting communications, engagement, employee services, and work. With low-code extensibility and enterprise-grade security and governance, Simpplr enables confident operation at scale. More than 1,000 organizations — including AAA, the NHS, Penske, and Moderna — trust Simpplr to keep their workforce informed, aligned, and productive. Learn more at simpplr.com . Job Description: We are hiring an Information Security Manager to support our IT operations and protect our corporate digital assets by developing and implementing security policies, overseeing security systems and leading incident response. In this role, you’ll work at the intersection of IT infrastructure and cloud application including AI-driven product development. You’ll be responsible for security policy management, risk register maintenance and business continuity planning and operations. You will also partner with internal stakeholders and external parties for privacy and security audits and certifications.. This is a highly collaborative role that involves excellent collaboration skills with internal and external parties to manage and uplevel Simpplr’s security posture and continue Simpplr’s demonstrated security leadership position. Key Responsibilities: Develop, implement, and maintain security policies, procedures, and guidelines to protect information assets and to ensure compliance. Assess system vulnerabilities, identify security risks, and implement risk mitigation strategies. Ensure that the risk register is kept up to date. Ensure that all IT systems are up to date with required patches and configuration and require

Who We Are At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people. We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you. We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team. Our Values If this sounds like you, you’ll fit right in. Who You Are Justworks is looking for an experienced, hands-on Senior Security Engineer specializing in AI who will drive and execute the company’s AI strategy and Digital Security’s objectives. Our ideal candidate has extensive experience building and enhancing security solutions of AI systems that defends against unique AI threats. You have hands-on experience evaluating the security of software systems containing AI features and have designed guardrails to protect our data against AI specific threats. You also have a deep understanding of the fundamentals of computing and development/coding with Ruby on Rails, JavaScript and/or other languages. An ideal candidate should also have experience in *Nix environment and the use of common cybersecurity tools. Your Success Profile What You Will Work On Research AI treads, AI threat landscape, AI vulnerabilities and remediations and AI security control advancement. Evaluate and assess AI tools and play a critical role in AI system management and governance Evaluate existing AI security controls and identify opportunities to enhance the security posture and software designs Collaborate with ot

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role OpenAI is seeking a Security Engineer to join our Infrastructure Security (InfraSec) team. InfraSec protects the foundations of OpenAI’s research and production environments, spanning GPU supercomputing clusters, multi-cloud infrastructure, datacenters, networking, storage, and the critical services that power our frontier AI models. Our charter includes securing everything from bare-metal hardware and firmware, to Kubernetes clusters and service meshes, to data storage and access pathways for highly sensitive model weights and user data. In this role, you will: Design and build security controls across diverse layers (e.g., physical hardware, firmware/BMC, OS, Kubernetes, networks, and CI/CD) to defend against sophisticated adversaries and insider threats. Collaborate with engineering and security teams to drive deployment of security enhancements and control changes across broad-scale infrastructure. Tackle high-impact projects such as checkpoint encryption, network isolation, secret management, and machine identity, while continuously raising the security bar for emerging AI workloads. Take a generalist approach to building security controls, balancing a mix of security expertise and broad technical skillsets to adapt to evolving challenges. You will thrive in this role if you have: Deep understanding of security principles, best practices, and common vulnerabilities. A proactive mindset, with the ability to identify and address secu

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. About the Role Security Software Engineers help us ship secure products end-to-end—covering enterprise security, cloud/infrastructure, and protections embedded directly in our products. You’ll build the tools and features that safeguard our platform and editor and protect our customers. You may be a fit if You are a strong software engineer first, with security as your superpower. You think like both a builder and an attacker: you anticipate vulnerabilities before they become issues. You care about developer experience, building solutions that are secure and frictionless. You’re comfortable moving quickly, owning problems end to end, and iterating with limited guidance. You have experience building or scaling secure systems in fast-moving environments. You have strong opinions on secure defaults, but can balance pragmatism with rigor. You enjoy working on small, high-talent teams where impact is magnified. You’re motivated by protecting developers and users, and you see security as an enabler. Sample projects include Build AI augmented code review to get involved in important systems at the right time Build a least-privilege and JIT system for cloud access that enables engineers

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a talented and driven Software Engineer to join Platform Security team, where you will build cutting-edge security solutions to protect our Kubernetes-based infrastructure and advance secure AI-driven systems. In this role, you will design and implement AI-powered security tools, proactively address vulnerabilities, and champion secure engineering practices across the organization. Ideal candidates are passionate about impactful innovation, excel at writing clean, efficient code, and thrive in fast-paced environments to support SpaceXSI's mission of creating a trusted and secure global digital platform. RESPONSIBILITIES: Design and build AI-driven security tooling and agents using Grok to identify, analyze, and mitigate vulnerabilities in the platform infrastructure and customer facing application(s) Proactively identify security problems to solve and own the design and implementation end-to-end Collaborate and be a security champion while driving technical decisions across the organization BASIC QUALIFICATIONS: 3+ years of experience in fast-paced, high-impact environments, ideally at startups or tech-driven companies. Expertise in Python, Rust, o

Location Details: United States, Remote At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely. This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. This position is not eligible to be performed in Alaska, Mississippi, North Dakota, or the Virgin Islands. Join our team At GoDaddy, we are seeking an exceptional Principal Compliance Engineer - PKI with deep technical expertise to define requirements and guide the evolution of our Certificate Authority (CA) platform. Reporting to GoDaddy's Vice President Engineering Partners, you will translate industry standards into technical requirements, define specifications for compliance automation, and provide technical guidance for next-generation cryptographic systems. This role combines technical leadership with strategic requirements development, focusing on post-quantum cryptography readiness, certificate lifecycle automation, and CA infrastructure resilience. What you'll get to do... Technical Standards & Requirements Leadership Actively participate in standards bodies such as the IETF, representing GoDaddy in working groups for TLS and related SSL standards CA Infrastructure & Systems Requirements Conduct deep-dive technical assessments of CA infrastructure, identifying architectural gaps, security vulnerabilities, and performance bottlenecks Define technical requirements for the evolution of certificate issuance pipelines, HSM integrations, and cryptographic key management systems Specify requirements for automated testing frameworks for compliance validation, including CT