Vulnerability Jobs

Senior DevOps Developer Company: The Boeing Company The Boeing Company is currently seeking two Senior DevOps Developers to support our Specialized Infrastructure Operations IT team located in Hazelwood, MO . This position supports the P-8A program, part of Boeing’s integrated defense portfolio to meet customers’ rapidly evolving needs across the spectrum of global conflict. The P -8A’s performance and reliability delivers confidence in an uncertain world. As a DevOps Developer and member of the team, you will help build, optimize, and secure the technology that delivers strategic and tactical mobility solutions to support the warfighter mission. Position Responsibilities: Participate in or lead the design, deployment, and maintenance of a consistent, secure software development toolchain across multiple sites and networks. Design, develop, and support scalable, redundant infrastructure to include physical and virtualized environments. Develop robust scripting and automation solutions for toolchain orchestration, artifact packaging, and deployment. Maintain consistent and reproducible environments using containers ( Docker ) or virtualization technologies. Automate provisioning, scaling, monitoring, recovery, security scanning, and vulnerability management using infrastructure-as-code and DevOps best practices. Perform the troubleshooting and restoration of routine to complex computing service operations (backups/restores, networking, and domain-related functions) Participate in Agile ceremonies, including sprint planning, daily standups, reviews, and retrospectives. Partner with software engineers, architects, QA teams, and transition teams

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. Intermediate Backend Engineer, Security Factory: Code Security An overview of this role As an Intermediate Backend Engineer on GitLab's Security Factory: Code Security team, you'll help developers find and fix security issues in the code they write and the open source components they depend on. Your work connects dependency analysis, vulnerability detection, and automated remediation. You'll build parsing that tells the security analysis engine which libraries and frameworks a project uses, extend a service that turns security advisories into dependency update merge requests, and develop hybrid analyzers that combine rule-based d

Modeling and Simulation Systems Engineer (Mid-Level or Senior) Company: The Boeing Company Boeing Defense, Space & Security (BDS) is seeking a Modeling and Simulation Systems Engineer to join our team in Albuquerque, New Mexico. The Boeing Laser and Electro-Optical Systems (LEOS) organization is dynamic and growing with a leadership team focused on attracting and developing top talent in support of critical missions for national defense involving Directed Energy. This position will plan, develop and maintain complex analysis and simulation models/tools to evaluate and improve total system architecture and performance and address complex defense problems ensuring mission success. Our teams are currently hiring for a broad range of experience levels including mid-level and senior level modeling and simulation systems engineers. Position Responsibilities: Evaluates systems under various scenarios and architectures to determine and/or optimize overall system mission performance Develops and maintains analysis tools of varied fidelity including modeling and simulation tools to predict performance against evolving threats of current and future defense systems Develops, refines and documents key algorithm capabilities to support various DoD customers Conducts analysis of multiple targets discrimination for survivability, vulnerability, and susceptibility into a preferred configuration to ensure mission success Performs systems analyses of the existing system architecture in conjunction with new technologies and concepts for improvements to be considered for future architectures Develops and maintains accurate and reliable models to support directed energy and space-b

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in an inclusive, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. NVIDIA is searching for a creative, highly motivated and independent engineer with expertise in system software with security background to join the SOC System Software organization. This position offers the opportunity to have real impact in a dynamic, technology-focused company impacting SOC based product lines ranging from autonomous vehicles, robotics, consumer graphics, and edge AI. What You’ll Be Doing: Lead all HDCP (High-bandwidth Digital Content Protection) activities across SoC-based projects, leading the feature roadmap, protocol implementation, compliance certification, and delivery across chips, platforms, and products. Develop and maintain secure-engine firmware on a RISC-V based secure processor. Deliver end to end HDCP solution across multiple software stacks spanning Linux, Android for automotive, and consumer platforms. Drive firmware production signing readiness, rollback-prevention strategies, and key-provisioning workflows. Serve as the security primary contact for the team, leading all aspects of threat modeling, static analysis, vulnerability tracking and remediation, and security compliance across all projects. Collaborate with multi-functional teams spanning HW design, boo

At Linear, we're building the product development system for teams and agents. AI is fundamentally changing how software gets built, and we’re shaping the tools this new era requires. Founded in 2019, Linear has become the platform of choice for more than 30,000 companies (including OpenAI, Coinbase, and Ramp) to plan, build, and ship their products. Today, our team is distributed across North America, Europe, and Australia, and we’re continuing to grow internationally. What unites us is relentless focus, fast execution, and a deep care for software craftsmanship. At Linear, we are committed to quality. Security is an essential part of that quality — not a layer that we add later, but something we build in from the start. We have a foundational security program we're proud of but, as Linear evolves our product and scales into enterprise, there's meaningful work ahead: staying ahead of vulnerabilities as our attack surface grows, responding fast and cleanly when incidents happen, and hardening our product and infrastructure. As Security Engineer at Linear, you'll be operating in a high-autonomy role with real scope, doing hands-on security work across the product and infrastructure we build. Location & work mode Linear is a remote-first company. This role is open to candidates based in North America. You can work from anywhere within this region. We value deep focus and async collaboration, with intentional moments to connect in person through team off-sites, optional co-working, and occasional travel. What you’ll do Depending on your experience / skillset and our broader priorities, you could: Operate, automate, and extend vulnerability management end-to-end: triage, prioritize, and drive remediation across product, infrastructure, and dependencies, and keep the program’s SLAs meaningful rather than theoretical Run our bug bounty program: triage incoming reports, validate severity, work with engineering on fixes, and keep researcher relationships professional an

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As an Threat Research Engineer at GitLab, you'll research emerging security threats and turn your findings into protection for GitLab customers. You'll investigate new attack surfaces, including AI coding agents, agent plugins, and package ecosystems, and build systems that help detect threats and improve vulnerability advisories. This is a full-stack role: you'll take an idea from the first research question to a working proof of concept, deploy it, and analyze the results yourself. Artificial intelligence (AI) is central to how we work. You'll use AI tools daily and build agentic workflows for research,

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. The mission of Plaid's Product Security Team is “Improve our customer’s trust by assuring secure development and delivery of products and services, minimizing risk to the ecosystem, and preventing security incidents." Plaid's Product Security team helps engineering teams build secure products and continuously identify and reduce security risks. Our work spans security architecture and design, application security, vulnerability management, supply chain security, and security automation. We work directly with product and engineering teams to identify risks early, influence secure architecture, and define security requirements. We build and leverage automated security capabilities to expand testing coverage, validate fixes, and reduce recurring vulnerabilities. As AI accelerates software development, our goal is to help Plaid maintain strong security without relying on manual reviews for every change. This role is perfect for you if: You enjoy understanding complex products and systems and finding security risks that are not immediately obvious. You have strong application security fundamentals and are comfortable working directly with code and architecture. You enjoy working closel

About the role Sana Biotechnology is growing, and we are hiring new team members who believe in the potential of engineered cells as medicines, who are passionate about delivering the possible to patients, and who lead with the desire to work on novel ideas. As a Sr. Systems Administrator, you will report to the Director, IT Infrastructure and help design, implement, operate, secure, and continuously improve the infrastructure services that support Sana’s corporate, research, laboratory, and regulated environments. You will serve as a senior hands-on technical resource, lead complex infrastructure initiatives, and partner with IT, Quality, Security, business stakeholders, vendors, and service providers to deliver reliable, scalable, and compliant solutions across a multi-site environment. What you’ll do Administer, maintain, and improve on-premises and cloud infrastructure, including Windows Server, virtualization, storage, backup and recovery, identity, directory, and core network services Lead the technical design and implementation of infrastructure projects, upgrades, migrations, lifecycle replacements, and new site or system deployments Operate infrastructure supporting GxP and other regulated business processes in accordance with approved procedures, change control, security, data integrity, and validation requirements Monitor system health, capacity, performance, availability, and security; plan and execute patching, preventative maintenance, vulnerability remediation, and lifecycle activities before risks affect business operations Troubleshoot and resolve complex incidents and recurring problems across servers, cloud services, identity platforms, storage, backup, and integrated infrastructure technologies; participate in incident response and scheduled maintenance as needed Develop and maintain automation for routine administration, monitoring, reporting, configuration, and remediation activities Manage backup and recovery operations, perform restore testin

About the role: This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust. As a lean team, we span across multiple areas such as AppSec, CloudSec, SecOps, ITSec, and Compliance and apply it towards reading and interpreting architecture, or planning and building out net new security solutions. You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats. This role is crucial for establishing and maintaining a world-class security posture, particularly within the sensitive and highly regulated healthcare technology space. What you will do: Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC). Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure Build and improve automated security testing within CI/CI pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction Develop secure coding standards with developer-focused documentation Contribute application security expertise to vulnerability management, during security incidents/investigations and post-incident reviews Evaluate third party applications, libraries and APIs and integrations for security risk Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems. What we're looking for: 4+ yea

Software Systems Engineer (Associate or Experienced) Company: The Boeing Company The Boeing Company has an exciting opportunity for a Software Systems Engineer to join the Satellite Communication (SATCOM) Mission Planning Software Engineering team in Colorado Springs, CO. This position will support the Boeing Defense, Space & Security (BDS) Satellite Systems Software Engineering organization. Our teams are currently hiring for a broad range of experience levels including; Associate and Experienced Software Engineers. The Satellite Communication (SATCOM) program is a critical part of the U.S. military’s nuclear command, control, and communications (NC3) network, providing nuclear-survivable connectivity. Our team develops software tools and services for advanced satellite and ground systems. This role offers the opportunity to work in a fast-paced development environment using modern, scalable technology and tools. Our team works in an Agile and CI/CD environment with automated testing, vulnerability scanning, and quality scanning capabilities. Position Responsibilities: Develops and maintains requirements, architecture, algorithms, interfaces, and designs for high-performance APIs between front-end and back-end software services Supports software development activities in an Agile environment using DevSecOps methodologies, including integration of completed software components into a fully functional software system Supports the development of critical features and support the full development lifecycle from design through deployment Builds, architects, and consumes APIs and backend services as part of the platform ecosystem, with an emphasis on

Who We Are Nuro is a self-driving technology company on a mission to make autonomy accessible to all. Founded in 2016, Nuro is building the world’s most scalable driver, combining cutting-edge AI with automotive-grade hardware. Nuro licenses its core technology, the Nuro Driver™, to support a wide range of applications, from robotaxis and commercial fleets to personally owned vehicles. With technology proven over years of self-driving deployments, Nuro gives the automakers and mobility platforms a clear path to AVs at commercial scale, empowering a safer, richer, and more connected future. About the Role As an Infrastructure Security Engineer, you will increase the security of Nuro’s core infrastructure used to develop and operate our autonomous delivery service. You will need to leverage your technical skills to create cross-functional strategic outcomes for Nuro. You will need to use good engineering judgment when evaluating and fixing both real and theoretical vulnerabilities. You work closely with development teams and can build systems. Your work contributes directly to the safety and security of the people in the communities we operate in. You’re a collaborative thinker with an ownership mindset, and thrive in fast-paced and collaborative environments. As a member of Nuro’s Security team, you will work on projects that impact all areas of security, from offensive testing to detection and response. About the Work Assess and secure Nuro and protect user data. Evaluate and verify engineering teams' vulnerability remediations (PR review or other evaluations) Design and build security tooling and infrastructure for use Nuro’s engineers Design and implement core security infrastructure like authentication and authorization systems, pipelines and automation for security incident detection and response, PKI, and others About You Expert in one or more core domains: Securely using a public cloud, securing corporate networks and endpoints, or application secu

Who We Are At MongoDB, we are building the future of data platforms with MongoDB Atlas; our fully managed, multi-cloud database service. The Infrastructure Security (InfraSec) team sits within Site Reliability Engineering (SRE) in the CTO organization. We are an engineering team dedicated to building the security infrastructure, primitives, and reusable controls that protect MongoDB Atlas across AWS, Azure, and Google Cloud (GCP). InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction. This role can be based out of our New York City office or remotely in the eastern or central timezone. What You’ll Do Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon) Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection. Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability What We’re Looking For Minimum Qualifications: 5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering Strong coding skills in Go (Golang), Python, C, C++, or R

Who We Are At MongoDB, we are building the future of data platforms with MongoDB Atlas; our fully managed, multi-cloud database service. The Infrastructure Security (InfraSec) team sits within Site Reliability Engineering (SRE) in the CTO organization. We are an engineering team dedicated to building the security infrastructure, primitives, and reusable controls that protect MongoDB Atlas across AWS, Azure, and Google Cloud (GCP). InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction. This role can be based out of our New York City office or remotely in the eastern or central timezone. What You’ll Do Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon) Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection. Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability What We’re Looking For Minimum Qualifications: 5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering Strong coding skills in Go (Golang), Python, C, C++, or R

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Product Research Location: Remote US Compensation Range: $215,000.00 to $225,000.00 base plus bonus and equity What You’ll Do: Lead product research initiatives that develop and evaluate macOS security product strategies and technologies Identify and prototype new telemetry from Apple's Endpoint Security API and other macOS subsystems to expand prevention, hardening, and detection capabilities Reproduce and analyze macOS attacks through hands-on execution of attacker techniques, malware detonation, and vulnerability exploitation Reverse engineer macOS malware and Apple's own security frameworks (XProtect, XProtect Remediator, Gatekeeper, TCC) to identify coverage gaps and inform product direction Prototype and test new tools and methodologies for offensive operations against macOS endpoints, including EDR evasion and bypass research Build p

WHO WE ARE Edmentum is a dynamic educator and student-focused company dedicated to tech-enabled learning solutions. Our goal is to ensure that all students have access to flexible learning environments and educators have the tools they need to support their students. We are on a mission to create innovative, proven learning technology, partnering with educators to ignite student potential. We are a Remote First organization with a strong commitment to excellence, innovation, and customer satisfaction. What You'll Do At Edmentum, security is the foundation that keeps student data, educator tools, and the platforms behind learning for millions of students safe. As an Information Security Engineer, you'll get hands-on with the systems and practices that protect them. You'll work alongside talented Technology teams to strengthen our security posture, sharpen your skills across security operations and compliance, and help bring new tools, including AI, into how we defend Edmentum. In this role you will: Monitor production systems for security events, take part in incident response, and help keep Edmentum's data and infrastructure secure and available. Run vulnerability assessments, drive remediation, and apply proven risk frameworks to close security gaps. Support compliance with FERPA, COPPA, GDPR, NIST, and SOC 2, helping keep Edmentum audit-ready. Evaluate and administer security tools, and explore emerging technologies, including AI, to strengthen our defenses. Partner with development, systems, and network teams to build security into how we build and operate. Improve change management, configuration management, and security metrics, and help find root causes after incidents. Who You Are You have 3 to 5 years of experience supporting and securing enterprise IT infrastructure, ideally in a SaaS environment. You have a bachelor's degree in a technology-related field or equivalent hands-on experience. You have a solid grasp of core security principles and experience se