Vulnerability Jobs

A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity while delivering real business impact for our multi-billion-dollar global business. WHAT YOU'LL DO Serve as a technical subject matter expert within our firm’s third-party information security risk management program Perform in-depth security assessments of new and existing third parties that access, process, store, or transmit firm information Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models Analyze business use cases, data flows, system integrations, and technical architectures to establish appropriate risk context Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and architecture documentation Assess controls across identity, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response, and application security Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediat

Join Delphi - Where Innovation meets transformation At Delphi, we believe in creating an environment where our people thrive. Our hybrid work model empowers you to choose where you work—whether it's from the office, your home, or a mix of both—so you can prioritize what matters most. We are committed to supporting your personal goals, family, and overall well-being while driving transformative results for our clients. We welcome exceptional talent from anywhere across the globe. Interviews and onboarding are conducted virtually, reflecting our digital-first mindset. Rooted in the region, we specialize in delivering tailored, impactful solutions in Data, Advanced Analytics and AI, Infrastructure, Cloud Security, and Application Modernization. Whether it’s enabling predictive analytics , transforming operations with automation, or driving customer engagement with intelligent platforms, we are the trusted partner for organizations ready to embrace a smarter, more efficient future. Solution Implementation & Configuration Deploy and configure Microsoft Intune for device management, compliance policies, security baselines, and application protection. Implement Defender for Endpoint and Defender for Server for advanced threat protection, vulnerability management, and automated remediation. Integrate Windows 365 Cloud PC with Intune and Defender for Endpoint for secure hybrid work scenarios. Support Microsoft Sentinel integration for centralized monitoring and incident correlation where required. Configure Microsoft Purview solutions including Information Protection, Data Loss Prevention (DLP), Insider Risk Management, and eDiscovery. Implement Microsoft Entra capabilities such as Conditional Access, Privileged Identity Management (PIM), Identity Protection, and RBAC. Technical Delivery & Support Work collaboratively with architects, project managers, and other consultants to deliver projects efficiently. Troubleshoot and res

Axsome Therapeutics is a biopharmaceutical company leading a new era in the treatment of central nervous system (CNS) conditions. We deliver scientific breakthroughs by identifying critical gaps in care and develop differentiated products with a focus on novel mechanisms of action that enable meaningful advancements in patient outcomes. Our industry-leading neuroscience portfolio includes FDA-approved treatments for major depressive disorder, excessive daytime sleepiness associated with narcolepsy and obstructive sleep apnea, and migraine, and multiple late-stage development programs addressing a broad range of serious neurological and psychiatric conditions that impact over 150 million people in the United States. Together, we are on a mission to solve some of the brain’s biggest problems so patients and their loved ones can flourish. For more information, please visit us at www.axsome.com and follow us on LinkedIn and X . About This Role Axsome Therapeutics is seeking an Associate Director/Director Information Security to take a leadership role in threat management, incident response, and vulnerability management functions. Operating as a hands-on leader, this role directs the cybersecurity team and service providers while remaining actively engaged in technical work. The role executes and advances the corporate Information Security Program and Management System owned by the Head of Information Security, and responsible for maintaining our security posture during non-standard hours, including active weekend and evening monitoring and rapid response to high-priority security incidents, and perform additional responsibilities as assigned by IT leadership. The Associate Director/Director Information Security will report to the Sr. Director, Information Security. This role is based at Axsome’s HQ in New York City with an on-site requirement of at least three days per week. We are unable to consider candidates who are

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role We are seeking a Principal Software Developer to join the Elasticsearch Security team. In this role, you will lead the architecture and design of Elasticsearch's main features. These features include authentication, authorization, and tenant isolation. You will work with engineering and product leaders at Elastic. Your goal is to provide high-performance security at all levels. This includes ensuring that our distributed data store has top-quality security at scale. What You Will Be Doing Owning core security initiatives from architecture to production, focusing on the delivery of new critical features. Leading the technical design, plan, and execution for major security components inside the Elasticsearch core engine. Developing the foundational security models for intricate features. Optimizing security performance at scale in distributed systems environments. Applying cryptographic solutions to address genuine customer use cases. Ensuring robust data isolation within shared infrastructure supporting disparate customers. Monitoring and applying the latest advancements and best practices in security. This includes authentication, identity management, cryptography, and data access management. Collaborating with peers across the company to embed security into new customer features from the outset. Drive vulnerability management ef

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. Join us at the forefront of AI and cloud-native security as we work to secure one of the most innovative developer platforms in the world. As the Cloud Security Lead , you will shape the cloud and infrastructure security program that protects millions of developers, enables safe AI-assisted development, and ensures organizations can confidently bring our platform into enterprise environments. In this role, you will own cloud security across GCP (primary) and supplemental environments in AWS and Azure , as well as containerized systems, SaaS platforms, and our multi-tenant AI infrastructure. You’ll improve our security posture through strong architecture, posture management, secure-by-default development practices, and close partnership with Engineering, Compliance, Security Architecture, and Platform teams. This is a highly impactful, hands-on leadership role—perfect for someone who wants to solve complex security challenges at scale while influencing product, engineering, and go-to-market teams. What You’ll Do: Cloud Security Engineering Lead configuration hardening across GCP , with additional oversight of workloads and integrations running in AWS and Azure . Own and optimize CSPM platforms across multi-cloud environments—establishing configuration baselines, guardrails, and remediation workflows. Secure critical SaaS platforms , ensuring proper configurations, access controls, and engineering integrations. Lead infrastructure vulnerability management across multi-cloud systems, containers, registries, and platform services. Enhance security across containerized and Kubernetes (GKE/EKS/AKS) workloads, including runtime protections, network policies, and workload identity. Assess secure logging configurations across c

At Anyscale , we're on a mission to democratize distributed computing and make it accessible to software developers of all skill levels. We’re commercializing Ray , a popular open-source project that's creating an ecosystem of libraries for scalable machine learning. Companies like OpenAI , Uber , Spotify , Instacart , Cruise , and many more, have Ray in their tech stacks to accelerate the progress of AI applications out into the real world. With Anyscale, we’re building the best place to run Ray, so that any developer or data scientist can scale an ML application from their laptop to the cluster without needing to be a distributed systems expert. Proud to be backed by Andreessen Horowitz, NEA, and Addition with $250+ million raised to date. About the Role Anyscale's product security needs are growing as we ship to larger and more demanding customers. We're looking for a Senior Product Security Engineer to own our secure software development lifecycle and to be engineering's partner on building security into the product. Reporting to the Head of Security, you will work in close partnership with engineering. This is a senior, high-ownership role. You will own and operate a scalable SSDL, partner with engineering on security features and secure design, review the security of existing systems and new initiatives, and own how we find, track, drive to resolution and report on vulnerabilities in what we ship. This role is based in India. In your first year, success looks like an SSDL that scales with engineering rather than gating it, security review embedded in how new initiatives ship, and accurate, on-demand vulnerability reporting backed by a working path to resolution. What You'll Do Own and operate a scalable secure software development lifecycle: threat modeling, security requirements, secure design practices, and scanning that engineering can readily adopt. Partner with engineering on security features and secure-by-design architecture, from early design through i

Ready to Get Shit Done? At bunq, we're building a bank that lives in the cloud, handles billions of transactions, and now integrates AI into our operations—all while keeping our user's data and trust intact. To operate at this scale and speed without compromising security, we need an Internal Auditor focused on Data Security & AI to audit our security controls, validate our AI governance, and ensure every system we build is resilient and trustworthy. As an Internal Auditor – Data Security & AI, your mission is to strengthen bunq's security and AI governance posture by auditing data protection controls, assessing AI model risks, identifying vulnerabilities before attackers do, and ensuring our security practices evolve as fast as our technology. Take Ownership As an Internal Auditor - Data Security & AI, you'll own: Audit security controls across infrastructure, applications, and operations, assessing access controls, encryption, monitoring, incident response, and third-party security effectiveness. Build an AI governance audit program that evaluates model development, bias testing, monitoring, transparency, and regulatory alignment (AI Act, NIS2). Identify and prioritize security and AI risks, conducting vulnerability assessments, pen test reviews, and model audits to surface gaps before they're exploitable. What You'll Work on Right Away Security Control Assessment: Audit bunq's critical security infrastructure (cloud environment, API security, data encryption, access management) and validate the effectiveness of controls; deliver a risk-prioritized remediation roadmap. AI Model Governance Program: Design and execute bunq's first AI audit program, evaluating model development practices, data quality controls, bias testing, monitoring, and transparency, identifying governance gaps and building a scalable AI audit framework. Data Protection & Privacy Audit: Conduct a comprehensive audit of bunq's data handling practices across all systems, assessing compliance with G

Summary: The Senior SecOps Engineer at Showpad will play a crucial role within the Security Operations team, collaborating with various departments, including Engineering, Product, and other business units. This position focuses on identifying, managing, and mitigating cybersecurity risks, particularly in cloud-native environments, to enhance security capabilities. The ideal candidate will possess solid experience in SecOps practices and a deep understanding of modern security methodologies. Responsibilities: Manage cybersecurity operations, including tasks related to application, hardware, and cloud infrastructure security. Act as the key cybersecurity contact for internal teams regarding daily practices, company-wide initiatives, and the Showpad product. Ensure development teams adopt and implement best practices in software security development. Enable development teams by providing CI/CD processes that integrate security and quality tooling. Manage and improve our CNAPP solution. Oversee and manage cybersecurity operations, ensuring continuous monitoring and protection of cloud infrastructure and applications. Manage and respond to events related to vulnerability programs, endpoint protection, user behavior analytics, firewalls, IDS/IPS, and external threat intelligence. Collaborate with internal teams to ensure security best practices and policies are adhered to across the organization. Develop and maintain security controls and automation strategies within CI/CD pipelines. Monitor and assess risks, manage vulnerabilities, and implement appropriate security measures. Required Skills: Proven experience in information security, with a background in security operations, application security, or related roles. Skilled in identifying, analyzing, and handling phishing attempts and other social engineering threats. Strong knowledge of modern web application security practices and frameworks. In-depth understanding of the Secure Software Development Life Cycle (

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. About the Role You will serve as a trusted security partner to Engineering, DevOps, and IT, designing and hardening secure AWS environments, securing our containerized and Linux-based workloads, and protecting our corporate infrastructure and identity/access tooling — while partnering closely with our dedicated SOC team on detection and response. You will act as a key member of the Cloud Security team, owning cloud and corporate infrastructure security architecture, vulnerability remediation, and Splunk administration and data integration, in close partnership with the SOC team, which owns detection content, alerting, playbooks, and incident triage/response. Your Job Will Be (but not limited to) Design, implement, and monitor security controls across our AWS cloud infrastructure, applying platform-native s

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. About the Role You will serve as a trusted security partner to Engineering, DevOps, and IT, designing and hardening secure AWS environments, securing our containerized and Linux-based workloads, and protecting our corporate infrastructure and identity/access tooling — while partnering closely with our dedicated SOC team on detection and response. You will act as a key member of the Cloud Security team, owning cloud and corporate infrastructure security architecture, vulnerability remediation, and Splunk administration and data integration, in close partnership with the SOC team, which owns detection content, alerting, playbooks, and incident triage/response. Your Job Will Be (but not limited to) Design, implement, and monitor security controls across our AWS cloud infrastructure, applying platform-native s

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. Automation is the key to creating highly reliable and secure large-scale software systems. Are you someone who engineers solutions to problems rather than simply fixing the same thing over and over again? Can you protect Smartsheet against attackers? We are looking for a Senior DevSecOps Engineer to join our global Security Operations team. In this critical role, you will be a leader in maturing our security and reliability posture by treating both as software engineering challenges. You will engineer and operate a highly reliable, scalable, and defensible production environment, directly impacting our ability to deliver a world-class service to our customers 24/7. This is a unique opportunity to blend deep expertise in Site Reliability Engineering (SRE) and modern Security Operations, working at the intersection of infrastructure, automation, and security to build a platform that is resilient and secure by design. You Will: Engineer Secure and Resilient Infrastructure: Design, build, maintain, and improve secure, scalable, and highly available infrastructure in our multi-cloud environment (primarily AWS) using Infrastructure as Code (IaC) principles with tools like Terraform, Kubernetes, and Helm. Automate Proactive Security: Engineer and automate threat detection, incident response, and vulnerability management processes. You will build the tools and workflows that allow us to respond to threats at machine speed. Secure the Software Development Lifecycle: Architect and secure our CI/CD pipelines, integrating automated

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . The Singapore Operations Manager reports to the Coinbase Singapore (CBSG) Country Director and plays a critical role in scaling our regulated business under MAS. This role owns the design and execution of operational frameworks across trading, staking, and custody — ensuring CBSG operates with the rigor, resilience, and regulatory alignment expected of a licensed capital markets dealer. What You'll Do Support the Country Director in overseeing operational functions within CBSG and across intragroup and third-party providers, ensuring delivery aligns with MAS regulations and contractual obligations Implement and maintain operational policies, procedures, SLA frameworks, and risk management processes across key business workstreams Establish and maintain supervision frameworks across CBSG's trading, staking, and custody operations in line with MAS regulatory and best-practice requirements Build and maintain robust operational resilience frameworks, including risk identification, contingency planning, and vulnerability mitigation to protect business continuity Coordinate operational incident responses, facilitating timely communication with internal stakeholders, regulators, and third-party service providers Partner with cross-functional teams — including Legal, Compliance, Finance, Product, and Security — to project manage critical operations and risk-related initiativ

About Druva Druva is the resilience foundation for the AI enterprise, helping organizations secure and recover from connected risk across data, cyber, identity, and AI. The Resilience Cloud is a fully managed, cloud-native SaaS platform that delivers air-gapped and immutable protection across cloud, SaaS, on-premises, endpoint, and edge environments. Powered by Dru MetaGraph, Druva’s graph-powered intelligence layer, the platform connects critical business context so customers can understand risk, respond faster, recover cleanly, and govern data with greater confidence. Trusted by nearly 7,500 customers, including 75 of the Fortune 500, Druva helps safeguard the critical information and systems businesses depend on in an increasingly connected world. Visit druva.com and follow us on LinkedIn , X and Facebook . Experience Level: 6–10 Years Domain: Product Security / AppSec / DevSecOps / AI Security / AI-First SDLC Role Summary We are looking for a hands-on Senior Staff Product Security Engineer to join and lead initiatives across our product security landscape. In this role, you will redefine modern Product Security by architecting an AI-first SDLC seamlessly integrating traditional AppSec with advanced AI security practices, automating shift-left pipelines, conducting rigorous threat models for core services and complex AI architectures, and leveraging cutting-edge AI tools to accelerate vulnerability remediation. You will partner directly with engineering leadership, Information Security, GRC, BuildOps, and DevOps teams to secure our SaaS products and safely enable cutting-edge agentic features. Role & Responsibilities AI-First SDLC & Shift-Left Automation: Architect and embed AI-driven security controls (SAST, DAST, SCA, Container, Secrets Detection) directly into CI/CD build pipelines and developer workflows, establishing an intelligent, highly automated AI-first SDLC. Operational & Strategic AI Security: Lev

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join 𝕏 Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . The Operations Manager will play a critical role in scaling Coinbase's regulated presence in Abu Dhabi, partnering directly with the Senior Executive Officer to drive operational excellence across it's core businesses trading. This is a high-impact role at the intersection of operational strategy, regulatory compliance, and cross-functional execution in one of the world's fastest-growing crypto markets. What You'll Do Support the Senior Executive Officer in overseeing and managing operational functions within ADGM, including intragroup and third-party service providers, ensuring delivery aligns with local regulations and contractual obligations Own the implementation of operational policies, procedures, SLA frameworks, and risk management processes across key business workstreams Establish and maintain supervision frameworks across critical business areas — including trading, staking, and custody operations — in line with regulatory and best-practice requirements Build and maintain robust operational resilience frameworks, including risk identification, contingency planning, and vulnerability mitigation to ensure continuity of critical business functions Coordinate responses to operational incidents, facilitating timely communication with internal stakeholders, regulators, and third-party service providers Develop and manage strong relationships with banks, regulator