Vulnerability Jobs

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security team protects Anthropic's AI systems and maintains the trust of our users and society. About the Role At Anthropic, we are pioneering new frontiers in AI that have the potential to greatly benefit society. However, developing advanced AI also comes with risks if not properly safeguarded. As a Research Engineer, you'll help to safely advance the capabilities of our models in incident response, security analysis, vulnerability remediation, and other areas of defensive cybersecurity. This role blends research and engineering, requiring you to both develop novel approaches and realize them in code. Your work will include designing and implementing RL environments, conducting experiments and evaluations, delivering your work into production training runs, and collaborating with other researchers, engineers, and cybersecurity specialists across and outside Anthropic. This role requires ML experience combined with domain expertise in cybersecurity. You might be an ML researcher with a history of cybersecurity work, or a security professional with a background in ML. Responsibilities Partner with researchers and safety teams across Anthropic to understand their analytical needs and build solutions Develop agentic integrations that allow AI systems to autonomously investigate and act on analytical findings Contribute to the strategic direction of the team, including decisions about what to build, what to partner on, and where to invest This role may require participation in an on-call rotation. You may be a good fit if you Have experience with machine learning. Have experience in cybersecurity research. Have strong

About the team The mission of the Applied AI Engineering team is to enable the secure and impactful implementation of GenAI solutions. We serve as technical thought partners and trusted advisors to our clients, ideating high-value use cases and providing the hands-on guidance necessary to drive projects into production. In this role within the Government team, you will empower agencies to evolve their operations through automated content synthesis, advanced search capabilities, and bespoke applications leveraging our latest foundational technologies and models. About the Role We are looking for a hands-on Applied AI Engineer with deep cybersecurity experience and a product mindset to help government and national security customers apply frontier AI to critical cyber missions. You will bring practical expertise in areas such as red teaming, vulnerability research, reverse engineering, threat hunting, and similar fields , ideally developed through work with the defense and intelligence sector. Working directly with cyber operators, security researchers, and engineering teams, you’ll identify high-value applications, write code, build and evaluate AI-powered tools and agentic workflows, and move solutions from prototype into secure operational use. You’ll design architectures using OpenAI models, APIs, and existing security tooling, grounded in customers’ mission requirements and operational constraints. You will collaborate closely with Sales, Solutions Engineering, Applied Research, Product, and Security teams to deliver measurable improvements in cyber capabilities and translate customer experience into better models and products. This role requires frequent on-site engagement at customer and partner facilities across the DMV area, including classified environments. In this role, you will: Work on-site with our clients in the DMV area Own hands-on implementation for government cyber use cases, working alongside account-aligned technical owners, customer engineers, c

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As an Offensive Security Engineer on the Application Security team within Security, you'll pioneer how Coinbase uses frontier AI models to scale vulnerability discovery, red team AI systems, and automate security workflows. This role bridges traditional penetration testing with next-generation AI-augmented offensive security, directly accelerating our ability to protect products and customers. You'll own the development of AI-driven security tooling and collaborate across Vulnerability Management, Offensive Security, and Incident Response to fundamentally shift how we operate. What you'll do: Build, deploy, and maintain custom security scanners that leverage frontier models to detect vulnerabilities at scale across Coinbase's product surface. Lead red teaming efforts against internal AI systems, including jailbreak testing, prompt injection analysis, and tool abuse simulation. Develop AI-driven automation for vulnerability triage, validation, and remediation workflows to accelerate the bug bounty and vulnerability response pipelines. Partner with engineering teams to prioritize, remediate, and verify fixes for critical vulnerabilities discovered through AI-augmented and manual testing. Mentor junior security engineers on integrating AI into offensive security workflows to scale team capabilities. Required Skills and Experience: 3+ years of experience in application s

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As the Federal Compliance Manager, you will collaborate with internal stakeholders and product engineering teams to document and implement control requirements, ensuring adherence to Figma's FedRAMP cloud security standards. Responsibilities include supporting the analysis and remediation of security control implementation review, penetration testing, and vulnerability scan results as well as contributing to Plans of Action and Milestones (POAM) reporting for authorizing agencies. Additionally, you will actively engage with security professionals on cross-department initiatives, participating in projects aimed at fortifying the company's overall security posture. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Engage with cross-functional collaborators across legal, sales, product/enterprise teams, 3PAO, sponsoring agency, and FedRAMP PMO Analyze information from disparate teams to tackle complex issues, manage risks, and resolve problems Assist in analyzing and preparing for both internal and external audits Identify and escalate technical and program risks to relevant stakeholders, tracking resolution through to closure Collaborate on developing automated capabilities for evidence collection, control validation, and process execution Maintain technical documentation (e.g., System Security Plan or SSP) with expertise in security controls, audits, technical architecture, operational processes, and security protocols Gui

About the role We are seeking an experienced and detail-oriented Information Security and Cloud Security Auditor to join our team. The ideal candidate will have 3-7 years of expertise in data security and privacy control implementation, internal auditing, third-party risk management, cybersecurity governance, and cloud security (banking sector preferred). This role will be responsible for conducting comprehensive IT and cloud security audits, ensuring compliance with regulatory requirements, and enhancing our information security policies and procedures. Key Responsibilities -Conduct IT and cloud security audits across various domains, including IT General Controls (ITGC), Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments. -Assess compliance with relevant laws, regulations, industry standards, and organizational policies across both on-premises and cloud environments. -Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices. -Maintain thorough documentation of audit findings, risk assessments, security measures, working papers, audit program checklists, and evidence for internal and external reporting. -Validate ITGC, cloud security, and application-specific controls and manage audit documentation, risk assessments, evidence gathering, and control testing. -Follow up on audit findings and ensure timely closure of non-compliance and security issues identified during audits. -Manage and oversee third-party risk assessments and audits, ensuring robust security controls are implemented across traditional and cloud-based service providers. -Lead and participate in the development, migration, and implementation of security controls and policies for network and cloud security solutions. -Conduct risk-based security assessments of internal, vendor, and third-party hosted environments, covering both traditional IT infrastructure and cloud

About the Team The AI Deployment Engineering team is responsible for helping developers and enterprises safely and effectively deploy OpenAI technologies in production. We act as trusted technical advisors and thought partners for customers, working side by side with their teams to identify high-value use cases, design practical architectures, and move from prototype to durable deployment. Cybersecurity is one of the most urgent domains where AI can help. Security teams are under pressure to reason across code, logs, infrastructure, tickets, alerts, and vulnerability data faster than ever. As frontier models become more capable, organizations need deep technical guidance on how to evaluate, validate, and safely deploy AI systems in security-critical workflows. About the Role We are looking for a Cyber AI Deployment Engineer to partner with customers and help them apply OpenAI models, APIs, Codex, and agentic workflows to real cybersecurity use cases. You will work with CISOs, security executives, application security leaders, SOC teams, security engineering teams, and hands-on practitioners to identify where AI can create measurable security outcomes. This is a customer-facing technical role for someone who can move fluidly between executive strategy, practitioner-level cyber depth, and hands-on solution design. You will help customers evaluate and deploy workflows such as secure code review, vulnerability triage, threat modeling, remediation, SOC and incident response workflows, detection engineering, cloud security, GRC automation, and security validation. You will collaborate closely with Sales, Solutions Engineering, Product, Engineering, Research, and Security to turn customer needs into safe deployment patterns, reusable field assets, and product feedback. This role is based in our Dublin Office. We offer relocation support to new employees. In this role, you will: Deeply embed with strategic customers as the technical lead for AI-enabled cybersecurity workflo

About the Team The AI Deployment Engineering team is responsible for helping developers and enterprises safely and effectively deploy OpenAI technologies in production. We act as trusted technical advisors and thought partners for customers, working side by side with their teams to identify high-value use cases, design practical architectures, and move from prototype to durable deployment. Cybersecurity is one of the most urgent domains where AI can help. Security teams are under pressure to reason across code, logs, infrastructure, tickets, alerts, and vulnerability data faster than ever. As frontier models become more capable, organizations need deep technical guidance on how to evaluate, validate, and safely deploy AI systems in security-critical workflows. About the Role We are looking for a Cyber AI Deployment Engineer to partner with customers and help them apply OpenAI models, APIs, Codex, and agentic workflows to real cybersecurity use cases. You will work with CISOs, security executives, application security leaders, SOC teams, security engineering teams, and hands-on practitioners to identify where AI can create measurable security outcomes. This is a customer-facing technical role for someone who can move fluidly between executive strategy, practitioner-level cyber depth, and hands-on solution design. You will help customers evaluate and deploy workflows such as secure code review, vulnerability triage, threat modeling, remediation, SOC and incident response workflows, detection engineering, cloud security, GRC automation, and security validation. You will collaborate closely with Sales, Solutions Engineering, Product, Engineering, Research, and Security to turn customer needs into safe deployment patterns, reusable field assets, and product feedback. This role is based in our Singapore office. We offer relocation support to new employees. In this role, you will: Deeply embed with strategic customers as the technical lead for AI-enabled cybersecurity work

About the Team The AI Deployment Engineering team is responsible for helping developers and enterprises safely and effectively deploy OpenAI technologies in production. We act as trusted technical advisors and thought partners for customers, working side by side with their teams to identify high-value use cases, design practical architectures, and move from prototype to durable deployment. Cybersecurity is one of the most urgent domains where AI can help. Security teams are under pressure to reason across code, logs, infrastructure, tickets, alerts, and vulnerability data faster than ever. As frontier models become more capable, organizations need deep technical guidance on how to evaluate, validate, and safely deploy AI systems in security-critical workflows. About the Role We are looking for a Cyber AI Deployment Engineer to partner with customers and help them apply OpenAI models, APIs, Codex, and agentic workflows to real cybersecurity use cases. You will work with CISOs, security executives, application security leaders, SOC teams, security engineering teams, and hands-on practitioners to identify where AI can create measurable security outcomes. This is a customer-facing technical role for someone who can move fluidly between executive strategy, practitioner-level cyber depth, and hands-on solution design. You will help customers evaluate and deploy workflows such as secure code review, vulnerability triage, threat modeling, remediation, SOC and incident response workflows, detection engineering, cloud security, GRC automation, and security validation. You will collaborate closely with Sales, Solutions Engineering, Product, Engineering, Research, and Security to turn customer needs into safe deployment patterns, reusable field assets, and product feedback. This role is based in our Tokyo office. We offer relocation support to new employees. In this role, you will: Deeply embed with strategic customers as the technical lead for AI-enabled cybersecurity workflow

About the team The AI Deployment Engineering team is responsible for helping developers and enterprises safely and effectively deploy OpenAI technologies in production. We act as trusted technical advisors and thought partners for customers, working side by side with their teams to identify high-value use cases, design practical architectures, and move from prototype to durable deployment. Cybersecurity is one of the most urgent domains where AI can help. Security teams are under pressure to reason across code, logs, infrastructure, tickets, alerts, and vulnerability data faster than ever. As frontier models become more capable, organizations need deep technical guidance on how to evaluate, validate, and safely deploy AI systems in security-critical workflows. About the role We are looking for a Cyber AI Deployment Engineer to partner with customers and help them apply OpenAI models, APIs, Codex, and agentic workflows to real cybersecurity use cases. You will work with CISOs, security executives, application security leaders, SOC teams, security engineering teams, and hands-on practitioners to identify where AI can create measurable security outcomes. This is a customer-facing technical role for someone who can move fluidly between executive strategy, practitioner-level cyber depth, and hands-on solution design. You will help customers evaluate and deploy workflows such as secure code review, vulnerability triage, threat modeling, remediation, SOC and incident response workflows, detection engineering, cloud security, GRC automation, and security validation. You will collaborate closely with Sales, Solutions Engineering, Product, Engineering, Research, and Security to turn customer needs into safe deployment patterns, reusable field assets, and product feedback. This role is based in our San Francisco HQ. We offer relocation support to new employees. In this role, you will: Deeply embed with strategic customers as the technical lead for AI-enabled cybersecurity work

About BlueConic: We are building products with AI at the core, and we build our products using AI. Agents and skills write a share of our code, run parts of our SDLC, and operate alongside our engineers every day. We need a Staff Security Engineer who can secure that reality, not the SDLC of five years ago. In conjunction with the CISO you represent security across the product development lifecycle, lead threat modeling and vulnerability management, and drive secure coding practices in an environment where code review means reviewing agent output as often as human output. You will use AI agents and skills as core tools of your own job: building automation, running threat models, triaging vulnerabilities, and scaling your impact across teams. Lead Security Engineer What you'll do Drive adoption of secure coding practices, including practices specific to AI-generated and AI-assisted code. Conduct security assessments, threat modeling, and risk analysis so threats are understood, documented, and mitigated. Automate security processes wherever it creates leverage, using scripts, AI agents, and AI skills as your default tools. Identify emerging classes of vulnerabilities and build solutions before they become incidents. Build and maintain security tooling, automation, and monitoring capabilities, including custom agents and skills for security workflows Threat model agentic systems: prompt injection, tool misuse, unauthorized agent privilege escalation, and data exfiltration through agent actions. Define guardrails and human-in-the-loop checkpoints for agent-driven changes to code and infrastructure. Set and enforce review standards for code produced by AI coding agents, including required checks before agent-authored changes reach production. Break large, cross-team security projects into individual tasks. Manage scope across teams and drive projects to closure. Monitor, investigate, and respond to security incidents, coordinating remediation across teams. S

About Us: Paytm is India’s largest digital payments and financial services platform, leading the mobile QR revolution. We power millions of businesses and individuals, and we’re building scalable, resilient systems to serve half a billion Indians and beyond. Here at Paytm, technology isn't just about keeping up, it's about building the future. We believe the next generation of engineers must not only scale systems to billions but also leverage AI and GPT tools to accelerate innovation. Role Overview: We are seeking an experienced Senior Information Security Manager to lead our security initiatives and ensure the integrity, confidentiality, and availability of our systems and data. This role is crucial in safeguarding our digital assets and maintaining compliance with industry standards. 1. Should take care of Infosec functions by coordinating with various stakeholders 2. Lead and manage Vulnerability Assessment (VA) and Penetration Testing (PT) programs end to end. 3. Should have technical hands-on knowledge on different VAPT tools, like Qualys, Tenable, BurpSuite, Checkmarx etc. 4. Ensure all cyber security compliance and audits directions issued from time to time by the regulator like SEBI, RBI etc. 5. Coordination with SOC, Technology team to follow up the incidents till closure 6. Follow escalation matrix for delayed issues 7. Assist in Internal and External Audits (Regulatory) and work towards closure of observations if any 8. Should have project management espouse, to run the security PMO for ensuring the multiple initiatives with internal / external teams, vendors, and regulators. 9. Prepare and review new/existing policies, procedures, and secure configure/ hardening documents. 10. Should possess technical skills and knowledge to handle/manage security solutions if required 11. Should have understanding of data protection technologies & laws, including DLP, DSPM, DPDPA, IT Act and international regulations like GDPR 12. Exposure to Cloud Environment & Appl

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future. While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you. The Role As a Senior Security Engineer, you'll harden the security posture of our AWS environment and our software development pipeline. Cloud Security and vulnerability management in Wiz are the primary focus. You'll partner with DevOps, Engineering, and our Application Security Engineer to build preventative controls across infrastructure, identity, and CI/CD. The work is hands-on: configuring tooling, reviewing architecture, hardening pipelines, and supporting application security work where your range is needed. Key Responsibilities Own cloud security posture across our AWS environment using Wiz and AWS-native services, reducing risk across IAM, network segmentation, container security, secrets, and data exposure. Establish secure defaults in our Infrastructure as Code through reusable modules, guardrails, and policy as code. Harden CI/CD pipelines in partnership with DevOps. Run vulnerability management across cloud and application findings: intake, prioritization, SLA tracking, and remediation with engineering. Build automation that scales the program: ingestion, deduplication, prioritization, and developer-facing workflows. Instrument telemetry, alerting, and runbooks for the systems you own. Operate and tune our WAF: managed and custom rules, rate limiting, and bot mitigation. Requirements 5+ years of hands-on

Scale has been the leading AI data foundry, helping fuel the most exciting advancements in AI, including frontier model training, enterprise adoption, defense applications, and autonomous vehicles. Our mission is to develop reliable AI systems for the world's most important decisions We're looking for a Senior AI Product Manager to build and own Scale's Cybersecurity portfolio — the data, environments, and evaluations frontier labs use to train and measure security capability in their models. This is a build role: you will define the strategy and standards for a product line that does not exist yet. Security is where the hardest problems in agentic AI now sit. An agent that can find a vulnerability, prove it reproduces, and patch it without breaking the system is doing work that takes a skilled human days. Measuring that honestly requires reproducible execution environments at scale and practitioners who have actually done the work. Scale has the first, proven across SWE-Bench Pro, SWE Atlas, and our contributions to the Terminal-Bench lineage. You will build the second. You Will Own the roadmap and strategy for Scale's Cybersecurity portfolio across training data, RL environments, agentic task suites, and evaluation products — and stand the product line up end to end, from task taxonomy and sourcing through pricing and first external release. Define the capability map we train and measure against: vulnerability discovery, proof-of-concept reproduction, patch generation and regression safety, secure code review, supply-chain analysis, malware and binary analysis, detection engineering, and incident triage. Make the strategic call on where Scale competes across the offense–defense spectrum — which capabilities we build training data for, which we only measure, and which we decline. Partner with ML researchers and security practitioners on task specifications, grader design, and verifiable rewards, holding to execution-grounded verification wherever possible: a task c

The Security team is responsible for protecting Asana’s employees, users, and customers . We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements . We collaborate closely with teams across the organization to foster a culture of security throughout our product and operations . We're looking for a Manager of Offensive Security to lead our Offensive Security function in Warsaw . In this role, you will own and grow a team spanning red team operations, application security, and vulnerability management, driving both the strategic direction and the hands-on execution of our offensive security program . You will work directly with engineering leadership, legal, and senior stakeholders to ensure our security posture is contin uously tested, measured, and improved . This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve Lead, grow, and mentor a team of offensive security engineers across red team, application security, and vulnerability management disciplines while staying actively engaged in day-to-day technical operations . Define team roadmap, OKRs, and priorities in alignment with broader security and engineering strategy . Foster a culture of technical excellence, continuous learning, and psychological safety within the team, partnering with recruiting to scale the team . Plan and execute red team operations and adversary simulation exercises across Asana's infrastructure, products, and corporate environment . Perform clo

Senior Solutions Engineer (Enterprise & Federal) Location: Remote – Eastern Time Zone preferred. Candidates located in the Washington, DC metropolitan area, Northern Virginia, Maryland, or surrounding regions are strongly preferred. Eligibility Requirement: U.S. Citizenship is required due to the nature of RapidFort's work supporting U.S. Department of Defense (DoD), federal agencies, and other regulated customer engagements. About RapidFort RapidFort is redefining software supply chain security. Modern enterprises spend significant time identifying software vulnerabilities. We believe the future isn't finding more vulnerabilities—it's eliminating them automatically. RapidFort's platform transforms vulnerable container images into production-ready, hardened artifacts that dramatically reduce software supply chain risk without requiring application code changes. By combining automated container hardening, vulnerability remediation, runtime intelligence, and compliance automation, we help organizations accelerate secure software delivery while reducing operational complexity. Our customers operate some of the world's most demanding cloud-native environments, where security, compliance, and operational resilience are mission critical. If you're passionate about Kubernetes, containers, cloud security, DevSecOps, and helping customers solve difficult security challenges, we'd love to meet you. The Opportunity RapidFort is seeking an experienced Senior Solutions Engineer to help drive our continued growth across Enterprise and Federal markets. This is a highly technical, customer-facing role where you'll serve as the trusted advisor between our engineering organization and prospective customers. You'll partner closely with Account Executives throughout complex enterprise sales cycles, working directly with CISOs, Security Architects, Platform Engineering teams, DevSecOps leaders, and executive stakeholders to demonstrate how RapidFort transforms software supply chain