Vulnerability Jobs

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About Horizons The Horizons team leads Anthropic's reinforcement learning (RL) research and development, playing a critical role in advancing our AI systems. We've contributed to every Claude release, with significant impact on the autonomy, coding, and reasoning capabilities of Anthropic's models. About the role We're hiring for the Cybersecurity RL team within Horizons. As a Research Engineer, you'll help to safely advance the capabilities of our models in secure coding, vulnerability remediation, and other areas of defensive cybersecurity. This role blends research and engineering, requiring you to both develop novel approaches and realize them in code. Your work will include designing and implementing RL environments, conducting experiments and evaluations, delivering your work into production training runs, and collaborating with other researchers, engineers, and cybersecurity specialists across and outside Anthropic. The role requires domain expertise in cybersecurity paired with interest or experience in training safe AI models. For example, you might be a white hat hacker who's curious about how LLMs could augment or transform your work, a security engineer interested in how AI could help harden systems at scale, or a detection and response professional wondering how models could enhance defensive workflows. You may be a good fit if you: Have experience in cybersecurity research. Have experience with machine learning. Have strong software engineering skills. Can balance research exploration with engineering implementation. Are passionate about AI's potential and committed to developing safe and beneficial systems

About the Role Perplexity is seeking a hands-on Software Engineer to build and evolve the software, automations, and systems that power our security operations. This role focuses on engineering security tools and internal AI-driven agents that improve detection and response, vulnerability management, and the overall security posture of our products and infrastructure. Responsibilities Design, build, and maintain software and automation that improves our detection and response program, including alert enrichment, triage workflows, and investigation tooling. Implement and enhance internal AI agents and security bots that assist with monitoring, investigations, reporting, and other security operation tasks. Develop and operate systems and workflows that support the bug bounty and vulnerability disclosure program, including intake, triage, prioritization, and remediation tracking. Partner with product and engineering teams to threat model new features and systems, propose mitigations, and add guardrails into designs and implementations. Contribute to secure-by-default libraries, services, and patterns that make it easy for teams to build secure features. Integrate security signals from cloud, endpoints, SaaS, and applications into cohesive pipelines and data models that support detection and analysis. Build automation to reduce manual work in incident response, containment, and remediation. Collaborate with security engineers and other software engineers to review designs and code, and to continuously improve our security tooling and platforms. Qualifications 4+ years of experience as a software engineer with significant time spent building security-related tools, platforms, or automations, or in a security engineering role with strong software development responsibilities. Proficiency in at least one major programming language (such as Python, Go, or TypeScript) and experience building production services, CLIs, or internal tools. Experience integrating with security-r

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. Position: CNE Developer Job Type: Full Time On-site WFH Friday Location: Columbia, MD Clearance Requirements: TS SCI Eligible with ability to pass CI polygraph Travel: 0% We are seeking a Computer Network Exploitation (CNE) Developer to research vulnerabilities, develop specialized software capabilities, and support authorized operations. This role combines low-level software development, reverse engineering, and vulnerability research to address complex technical challenges across operating systems, applications, and network protocols. The ideal candidate is comfortable working with unfamiliar codebases, investigating undocumented system behavior, and turning research findings into reliable, maintainable software. The developer will collaborate with researchers, systems engineers, and testing personnel throughout the development lifecycle. Responsibilities Design, develop, test, and maintain software supporting authorized CNE research, capability development, and mission requirements. Conduct vulnerability research and root-cause analysis of operating systems, applications, services, and network protocols. Reverse engineer compiled software, firmware, and proprietary protocols to understand functionality, identify weaknesses, and assess technical feasibility. Develop proof-of-concept implementations and mature validated research into documented, testable capabilities. Write and debug software Analyze platform internals, including memory management, process execution, system calls, access controls, and interprocess communication. Build development and testing environments tha

RDQ226R605 This role can be based remotely anywhere in the United States. About Databricks Databricks is the data and AI company. More than 12,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. About the Team The Agentic Security Engineering team is a horizontal, shared services engineering team that makes every Databricks security function AI-native — building the AI agents, "personas," and shared platform that security teams across the org (Detection & Response, Threat Intelligence, Vulnerability & Product Security, Red Team, GRC, and Continuous Monitoring) build on to operate at machine speed, safely and reliably. We leverage AI to transform how security is done. The Role As Staff Security Software Engineer , you own a major technical workstream designing and shipping production-grade AI agents and the platform capabilities that power them, with reliability, observability, and safe-by-default security as first-class requirements. You set the standards for how agents are built and operated and co-build with partner security teams. Example use cases you'll enable, led by AI threat detection at scale (alert triage and false-positive reduction, fleet-scale anomaly detection), extend to threat hunting, vulnerability management, product security, red team/offensive testing, and GRC/assurance use cases. The Impact You Will Have Agentic Security Engineering Architecture Design, ship, and operate production AI agents/personas that security teams depend on, starting with AI threat detection at scale. Build and harden the shared platform so any security team can ship agents safely and reliably — i.e., sandboxing, scoped least-privilege identity, obs

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role: Anthropic's Application Security team secures the systems that build, serve, and increasingly are Claude. The attack surface is unlike most AppSec work: multi-agent orchestration, sandboxed code execution, agents holding delegated credentials, untrusted tool output crossing trust boundaries — problems with little prior art and no off-the-shelf playbook. The way the team works is also different. We use Claude as our primary tool across every part of the job: it drives our static analysis, drafts and fixes vulnerabilities as pull requests, performs first-line bug bounty triage, and assists threat modeling for design reviews. The human work is the judgment layer — system-level reasoning, deciding what matters, and building the next thing the model can't do yet. This is a builder's role on a senior team. We hire engineers who ship production systems and clear a hands-on threat-modeling bar — people who can find the vulnerability but would rather build the system that finds them all. Every engineer owns a system end-to-end, and the team's work has shaped customer-facing product security — including Claude Code's security review tooling, its security guidance plugin, sandboxing, and auto mode. Key responsibilities: Design, build, and operate Claude-powered security systems — LLM-driven code analysis, automated vulnerability remediation, AI-assisted threat modeling — and own one or more of them end-to-end, including the cross-functional relationships that come with it Lead secure design reviews and threat modeling for novel AI systems, identifying risks that don't map to existing frameworks Evolve a public bug bounty program

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Senior Web Application Penetration Tester Job Type: Full-time Location: Remote Clearance Requirements: Must be able to obtain a Secret Clearance Travel Requirements: Up to 10% Experience: 5+ years Salary :$125-$165K WHAT YOU'LL DO We are seeking a skilled and motivated Senior Web Application Penetration Tester to join our growing cyber operations team. The ideal candidate will possess deep expertise in web application security testing, vulnerability research, and exploitation techniques, with the ability to identify complex attack paths and develop creative solutions to challenging security problems. This role goes far beyond automated scanning. Successful candidates will conduct in-depth assessments of web applications, APIs, mobile applications, and supporting infrastructure while leveraging custom tooling, manual testing techniques, and advanced exploitation methodologies to uncover impactful security findings. KEY RESPONSIBILITIES Web Application Security Assessments Conduct penetration testing of web applications, APIs, mobile applications, databases, and client-side technologies. Perform application enumeration, endpoint discovery, vulnerability research, and exploitation activities. Identify, validate, and assess vulnerabilities across complex environments. Analyze attack paths and security weaknesses to determine business and operational impact. Technical Analysis & Research Develop and utilize custom tools, scripts, and payloads to support testing activities. Perform network mapping, vulnerability analysis, and security assessments across applicatio

APPLICATION AND WEB SECURITY SPECIALIST THE OPPORTUNITY The Application and Web Security Specialist will serve as a security consultant to Web and Application Developers. You will work with developers on identifying security risks within their applications and validating remediation. This role offers the opportunity to build solid relationships throughout the enterprise, with developers and vendors, while learning about the various technologies employed within our organization. There are other opportunities to serve included with this role that relate to other Security disciplines such as Threat Security, Vulnerability Management, and Event Correlation. THE TEAM The Information Security Team is responsible for the confidentiality of customer and employee information, ensuring the data stored and shared maintains integrity, all while making sure that all of this does not impact the availability of the entire Dillard’s enterprise. This team is expected to be high-performing. To meet this expectation, the team members are communicative and collaborative, always sharing knowledge and research. Members of this team should be able to understand what is expected of them and adjust on the fly, as priorities may change depending on the company's needs. If you are someone who sets a standard of excellence for yourself and you enjoy working alongside others who set the same standard and who genuinely want each of their peers to succeed, you may be the perfect addition to this team. WHAT YOU WILL DO Inspect and assess current solutions for Web and Application Security risks Architect and implement security controls within the Software Development Lifecycle (SDLC) Hold recurring cadences with development and security leadership to discuss findings and future paths for the company regarding application security posture Participate in vulnerability verification and assist development teams in remediation based on reports from scanners, along with manual application sec

The Security Operations (SecOps) Engineer is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organisation’s infrastructure, cloud services, endpoints, identities, and business applications. The role supports continuous improvement across security monitoring, vulnerability management, incident response, governance, and operational security controls. Working closely with IT, engineering, and business stakeholders, the SecOps Engineer helps protect organisational assets, data, and services while supporting compliance with internal policies, security standards, and regulatory requirements. Building innovative solutions; enabling safer workplaces for everyone. We’ll create a safer working world, building software to support a global network of responsible buyers, suppliers and partners. We take the pain out of compliance for over 50,000 organisations globally, helping them protect their people, their operations, and the planet. Keeping our network of hiring clients, suppliers, and contractors compliant with the standards that matter most, from health and safety and sustainability to ethical behaviour by building best in class solutions. The tech we build today, will create a better tomorrow. • Monitor and investigate security alerts and incidents. • Conduct threat hunting activities using SIEM, EDR, and cloud security platforms. • Manage vulnerability scanning, assessment, prioritisation, and remediation tracking. • Develop and maintain security monitoring rules and detection logic. • Support incident response investigations and forensic activities. • Administer security platforms such as Microsoft Defender XDR, Sentinel, Entra ID, and vulnerability management tools. • Review and improve security configurations across cloud and on-premises systems. • Support third-party risk assessments and supplier security reviews. • Assist with ISO 27001, SOC, Cyber Essentials, GDPR, and other compliance activities. • Develop se

The Security Operations (SecOps) Engineer is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organisation’s infrastructure, cloud services, endpoints, identities, and business applications. The role supports continuous improvement across security monitoring, vulnerability management, incident response, governance, and operational security controls. Working closely with IT, engineering, and business stakeholders, the SecOps Engineer helps protect organisational assets, data, and services while supporting compliance with internal policies, security standards, and regulatory requirements. Building innovative solutions; enabling safer workplaces for everyone. We’ll create a safer working world, building software to support a global network of responsible buyers, suppliers and partners. We take the pain out of compliance for over 50,000 organisations globally, helping them protect their people, their operations, and the planet. Keeping our network of hiring clients, suppliers, and contractors compliant with the standards that matter most, from health and safety and sustainability to ethical behaviour by building best in class solutions. The tech we build today, will create a better tomorrow. • Monitor and investigate security alerts and incidents. • Conduct threat hunting activities using SIEM, EDR, and cloud security platforms. • Manage vulnerability scanning, assessment, prioritisation, and remediation tracking. • Develop and maintain security monitoring rules and detection logic. • Support incident response investigations and forensic activities. • Administer security platforms such as Microsoft Defender XDR, Sentinel, Entra ID, and vulnerability management tools. • Review and improve security configurations across cloud and on-premises systems. • Support third-party risk assessments and supplier security reviews. • Assist with ISO 27001, SOC, Cyber Essentials, GDPR, and other compliance activities. • Develop se

Leidos is seeking a detail-oriented Cybersecurity Analyst with expertise in Security Accreditation to support the assessment, authorization, and continuous monitoring of information systems. The successful candidate will ensure systems comply with government and industry cybersecurity requirements while supporting the organization's Risk Management Framework (RMF) processes. Primary Responsibilities: Lead and support the security accreditation process for information systems. Develop, maintain, and review security authorization packages. Conduct security control assessments in accordance with RMF and applicable security standards. Collaborate with system owners, engineers, and stakeholders to implement security controls. Perform security risk assessments and recommend mitigation strategies. Monitor systems for compliance with cybersecurity policies and standards. Maintain Plans of Action and Milestones (POA&Ms) and track remediation activities. Support continuous monitoring activities, including vulnerability management and security reporting. Prepare documentation for Assessment & Authorization (A&A) activities. Participate in internal and external cybersecurity audits. Stay current on cybersecurity threats, regulatory requirements, and best practices. Basic Qualifications: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience). 3–7 years of experience in cybersecurity, information assurance, or security compliance. Experience implementing or supporting the NIST Risk Management Framework (RMF). Knowledge of: NIST SP 800-37 NIST SP 800-53 NIST SP 800-171 FISMA FedRAMP (preferred) Experience with vulnerability assessment tools such as Tenabl

Senior Offensive Cybersecurity Test Analyst Company: The Boeing Company The Boeing Company is seeking a Senior Offensive Cybersecurity Test Analyst to support the Boeing Test & Evaluation (BT&E) cyber test capability. The selected applicant will join a highly technical Test & Evaluation team building an offensive cyber test capability in Berkeley, MO . This position will be providing testing services to Boeing Defense Space & Security (BDS) portfolio. The primary responsibilities will include Product Security (Cyber) test planning, integration, and execution, mission-based risk assessments, vulnerability assessments, and penetration tests. The selected applicant will become a Berkeley team member trained across the broader BT&E Product Security Capability team. Position Responsibilities: Lead execution of penetration tests to identify, exploit, and assess a target system’s vulnerabilities in a threat-representative manner on embedded systems and IP-based networks Subject Matter Expert for emulating advanced cyber adversary (advanced persistent threats) tactics, techniques and procedures (TTPs) Lead controlled attack simulations that test the effectiveness of a blue team and its capabilities to detect, block, and mitigate attacks and breaches</span

Our Purpose Mastercard powers economies and empowers people in 200&#43; countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Lead Threat Intelligence Analyst Overview This is an exciting position for a Lead Threat Intelligence Analyst to join Vocalink’s dedicated Threat Intelligence function. You will be play an integral leading role in the Vocalink Threat Intelligence Team, working closely with the SOC and internal security teams to deliver actionable intelligence. You will support a diverse range of customers and contribute to key initiatives such as threat hunting, vulnerability management, and insider threat detection. Collaboration is at the heart of this position. You will work alongside Mastercard’s global threat intelligence capabilities and engage proactively with a wide network of stakeholders, including vendors, industry groups, our customers, and government organisations. This is a unique chance to help shape and grow a fast-evolving threat intelligence capability that serves Vocalink and its customers. If you are passionate about cyber security and eager to make an impact, this role offers an exciting platform to develop your leadership expertise and to help to grow and mature a threat intelligence function in a critical national infrastructure provider. Role Lead the day-to-day operations of the threat intelligence function within the Vocalink Security Operations Cent

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. Intermediate Backend Engineer, Security Factory: Code Security An overview of this role As an Intermediate Backend Engineer on GitLab's Security Factory: Code Security team, you'll help developers find and fix security issues in the code they write and the open source components they depend on. Your work connects dependency analysis, vulnerability detection, and automated remediation. You'll build parsing that tells the security analysis engine which libraries and frameworks a project uses, extend a service that turns security advisories into dependency update merge requests, and develop hybrid analyzers that combine rule-based d

Modeling and Simulation Systems Engineer (Mid-Level or Senior) Company: The Boeing Company Boeing Defense, Space & Security (BDS) is seeking a Modeling and Simulation Systems Engineer to join our team in Albuquerque, New Mexico. The Boeing Laser and Electro-Optical Systems (LEOS) organization is dynamic and growing with a leadership team focused on attracting and developing top talent in support of critical missions for national defense involving Directed Energy. This position will plan, develop and maintain complex analysis and simulation models/tools to evaluate and improve total system architecture and performance and address complex defense problems ensuring mission success. Our teams are currently hiring for a broad range of experience levels including mid-level and senior level modeling and simulation systems engineers. Position Responsibilities: Evaluates systems under various scenarios and architectures to determine and/or optimize overall system mission performance Develops and maintains analysis tools of varied fidelity including modeling and simulation tools to predict performance against evolving threats of current and future defense systems Develops, refines and documents key algorithm capabilities to support various DoD customers Conducts analysis of multiple targets discrimination for survivability, vulnerability, and susceptibility into a preferred configuration to ensure mission success Performs systems analyses of the existing system architecture in conjunction with new technologies and concepts for improvements to be considered for future architectures Develops and maintains accurate and reliable models to support directed energy and space-b

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in an inclusive, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. NVIDIA is searching for a creative, highly motivated and independent engineer with expertise in system software with security background to join the SOC System Software organization. This position offers the opportunity to have real impact in a dynamic, technology-focused company impacting SOC based product lines ranging from autonomous vehicles, robotics, consumer graphics, and edge AI. What You’ll Be Doing: Lead all HDCP (High-bandwidth Digital Content Protection) activities across SoC-based projects, leading the feature roadmap, protocol implementation, compliance certification, and delivery across chips, platforms, and products. Develop and maintain secure-engine firmware on a RISC-V based secure processor. Deliver end to end HDCP solution across multiple software stacks spanning Linux, Android for automotive, and consumer platforms. Drive firmware production signing readiness, rollback-prevention strategies, and key-provisioning workflows. Serve as the security primary contact for the team, leading all aspects of threat modeling, static analysis, vulnerability tracking and remediation, and security compliance across all projects. Collaborate with multi-functional teams spanning HW design, boo