Switzerland's best tech talentjobs
Ready when you are.

Staff Software Engineer (Java) - Identity

Who is Sonar? Sonar enables organizations to ship agentic code with confidence. Code creation is abundant, but confidence is scarce. Our core platform, SonarQube, verifies over 750 billion lines of code every day, delivering agentic verification and governance for all code. Trusted by more than 7 million developers and 75% of the Fortune 100, including teams at Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company, Sonar enables organizations to reduce outages, improve security, and lower the cost and risk of agentic software development.Founded in Geneva and now headquartered in Austin, Texas, Sonar has a global team working across offices and hubs, including Silicon Valley, London, Bochum, Barcelona, Singapore, Tokyo, and the Washington, D.C. area. At Sonar, we’re enabling enterprises to build agentic software factories that can move quickly while maintaining the control, consistency and evidence required to ship with confidence.  Position descriptionWe are looking for a highly impactful Staff Engineer to join the Identity Squad within our StoreFront department.   The Identity squad is the cornerstone of trust and access across Sonar's product ecosystem. The squad is responsible for everything related to authentication (AuthN) and authorization (AuthZ) for all of Sonar’s products. We operate services at scale, handling 1000s of requests per second. As a Staff Engineer, you will be architecting robust, scalable, and highly secure identity solutions that seamlessly bridge our cloud and self-managed offerings. As a Staff engineer you will also play a crucial role in mentoring other engineers, helping them grow their skills and expand their impact.   You will partner closely with Product Managers, Engineering Managers, and other Staff/Principal Engineers across the organization to lead the end-to-end delivery of critical identity features. You will take ownership—from initial architecture and design through to implementation and deployment—of major initiatives ensuring a frictionless yet highly secure experience for millions of developers. What you will do Collaborate with UX designers, Product Management, and engineering teams to deliver robust security features alongside an optimal user experience. Take strong ownership of squad deliverables and effectively drive sprints toward successful completion. Architect and guide the design of our on-premises and AWS cloud applications. Oversee feature deployment, production monitoring, and troubleshoot team-specific live issues. Mentor engineering team members to help them grow in their technical responsibilities and remove blockers to their autonomy. Contribute to the definition of the team’s short and long-term goals. Experience and qualifications Over 8 years of software engineering experience, including working as a Tech Lead, Staff Engineer, or Software Architect. Proven ability to take initiative and bring a subject involving several stakeholders and engineers to completion with little to no supervision.  Experience supporting and mentoring other team members. Proficiency with Java coupled with a strong passion for Clean Code and rigorous software quality standards. Experience architecting cloud-native applications. Experience with relational RDBMS (such as Postgres) and SQL. Domain expertise in Identity and Access Management (IAM), including hands-on experience with AuthN/AuthZ protocols (OAuth2, OIDC, SAML, JWT) and user provisioning (SCIM). Proficiency in working with and steering AI coding tools (Codex, Claude, etc). In-office culture We're intentional about this. We believe the best teams are built in the room together. Three anchor days — Mondays, Tuesdays, and Thursdays — create the collaboration rhythm that makes a hub office worth having.  Candidates need to be genuinely based in the location the role is posted  — if that's not where you are today, we're happy to support relocation for the right person.   We value diversity, equity, and inclusion At Sonar, we believe that our diversity is our strength. We are a global company that values and respects different backgrounds, perspectives, and cultures. We are committed to fostering a diverse and inclusive work environment where everyone feels valued and empowered to contribute their best. We are proud to be an equal opportunity employer and welcome all qualified applicants, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you need any accommodation, please reach out to us at hiring@sonarsource.com.  All offers of employment at Sonar are contingent upon the results of a comprehensive background check and reference verification conducted before the start date.  Applications that are submitted through agencies or third party recruiters will not be considered.

Application Security Engineer

Who is Sonar? Sonar is driving the future of agent-centric software development. As the leader in AI code review and verification, we solve a critical problem: ensuring that software generated by AI-assisted developers or autonomous agents is reliable, secure, and maintainable. Integrating seamlessly with Claude Code, Codex, Cursor, GitHub Copilot, Gemini, and Devin, we help over 75% of the Fortune 100 build trusted, reliable, compliant software. Customers who use Sonar are 44% less likely to report an outage due to AI-generated code. We believe code verification is the critical missing link in the Agent-Centric Development Cycle (AC/DC). Industry giants like Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company.count on us to provide independent, explainable, consistent review and governance of their AI-generated code via products like: SonarQube: The world’s leading AI code review and verification platform. SonarQube Foundation Agent: Currently topping the leaderboards for agentic software repair. SonarSweep & Sonar Context Augmentation: Providing the enterprise-grade context and constraints agents need to be truly effective. Our team operates across global hubs in Austin, Bochum, Dubai, Geneva, London, Singapore, Tokyo, and Washington D.C. We move with a mindset we call CODE: Committed to our customers and community. Obsessed with quality. Deliberate in our decisions. Effective as one team. With over $400M in revenue and profitable, fast-paced growth, we are building the backbone of the AI software revolution. If you’re hungry to have an impact, want to build at a fast pace, and ready to work at the forefront of AI, we want to hear from you. Position description   The primary goal of the Information Security team is to earn deep trust with our rapidly growing customer base by relentlessly safeguarding Sonar products and the supporting cloud platforms, while consistently demonstrating that Sonar meets demanding, industry‑leading security standards. You will champion security by design, partnering with product, platform, and infrastructure engineering teams so that our products and cloud platforms are imagined, built, and operated to Sonar’s high security bar. What you will do Shape secure products and cloud architecture Partner with product and engineering teams from the earliest design stages to build secure, resilient solutions by design. Review product architectures and AWS environments, ensuring security requirements meaningfully inform technical decisions and final designs. Lead security assurance and improvement Deliver high-impact initiatives from the strategic security plan, from evaluating new approaches to deploying modern security tools and capabilities across the organization. Plan and manage independent security assessments, penetration tests, and red-team exercises; translate findings into practical improvements and customer-facing trust artifacts. Investigate complex product and internal security findings, identify root causes, and help teams implement durable remediation. Strengthen customer trust and incident readiness Lead the investigation and resolution of customer security concerns with rigor and empathy, using each engagement to reinforce confidence in our security program. Serve as a security subject-matter expert during incidents, helping teams understand, contain, and learn from emerging threats. Occasional on-call participation may be required. Anticipate threats and scale the security program Monitor and interpret threat intelligence, turning changes in the threat landscape into prioritized risks and actionable recommendations. Continuously improve and automate security processes, increasing the quality, speed, and visibility of information that informs the security strategy. Experience and qualifications Secure product and cloud architecture Extensive experience with application and cloud architectures, predominantly AWS, and a strong interest in how modern cloud patterns can strengthen or weaken security. Extensive experience conducting application security assessments, including code review and evaluation of authentication and authorization designs. Experience assessing and securing AI and agentic AI capabilities, with the curiosity to experiment, learn, and help define emerging best practices. Experience applying threat-modeling approaches, such as STRIDE, to improve design discussions and identify risks early. Security assurance and remediation Experience with penetration testing, red-team engagements, and bug-bounty programs, with an attacker mindset focused on protecting what matters most. Experience investigating and managing vulnerabilities, from triage and prioritization through to remediation and organizational learning. Threat awareness and security automation Practical experience using AI to automate repeatable security work, along with enthusiasm for building small tools and experiments that make security teams faster and more effective. Familiarity with Azure, GCP, and Google Workspace is a plus, as is the appetite to learn new platforms and ecosystems as Sonar evolves. Additional commentsThis role is based in Geneva, Switzerland. We are unable to consider candidates unwilling to be in Geneva, but we are willing to relocate the right candidate. We value diversity, equity, and inclusionAt Sonar, we believe that our diversity is our strength. We are a global company that values and respects different backgrounds, perspectives, and cultures. We are committed to fostering a diverse and inclusive work environment where everyone feels valued and empowered to contribute their best. We are proud to be an equal opportunity employer and welcome all qualified applicants, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you need any accommodation, please reach out to us at hiring@sonarsource.com.  All offers of employment at Sonar are contingent upon the results of a comprehensive background check and reference verification conducted before the start date.  Applications that are submitted through agencies or third party recruiters will not be considered.

Senior IAM (Platform) Engineer (m/w/d)

Salary: CHF 125'000 - 155'000 per year Requirements: Mehrjährige praktische Erfahrung in einer vergleichbaren Funktion im IAM-Umfeld.Fundierte Kenntnisse in Berechtigungsmanagement, Rollenmodellen, Identity Governance und IAM-Security-Prinzipien.Erfahrung im Betrieb und in der Weiterentwicklung geschäftskritischer Plattformen.Praxis in der strukturierten Bearbeitung von Incidents und Supportfällen.Fähigkeit, komplexe technische und fachliche Zusammenhänge zu analysieren und verständlich zu vermitteln.Selbstständige, lösungsorientierte und strukturierte Arbeitsweise.Sehr gute Deutschkenntnisse sowie gute Englischkenntnisse für die berufliche Kommunikation. Responsibilities: Sicherstellung des stabilen Betriebs und der kontinuierlichen Weiterentwicklung der IAM-/IAG-Plattform.Bearbeitung und Analyse von Incidents, Supportanfragen und technischen Störungen.Optimierung von Provisioning-, Account- und Berechtigungsmanagement-Prozessen.Konzeption und Implementierung technischer Integrationen, Schnittstellen, Connectoren und APIs.Analyse von Betriebs- und Supportdaten sowie Umsetzung nachhaltiger Fehlerbehebungen und Automatisierungen.Evaluierung und Integration neuer IAM-/IAG-Komponenten und Sicherheitslösungen.Umsetzung und Weiterentwicklung von Security-Standards wie Zero Trust und Least Privilege.Aufnahme, Bewertung und Priorisierung fachlicher Anforderungen sowie Begleitung der Umsetzung bis zum produktiven Einsatz.Zusammenarbeit mit Product Ownern, Architektur, Fachbereichen und externen Dienstleistern.Fachliche Unterstützung und Coaching von Teammitgliedern.Analyse bestehender Prozesse, Identifizierung von Verbesserungspotenzialen und Entwicklung technischer Lösungen gemeinsam mit internen Fachbereichen, Architektur und externen Partnern. Technologies: Active DirectoryCloudIAMPowerShellRESTSAPSQLSecurityCursorDevOpsXML More: Ekkiden ist eine in 2019 gegründete internationale Beratungsgruppe: sie vereint ein Ökosystem leidenschaftlicher und engagierter Beraterinnen und Berater, die Transformationsprojekte in den Bereichen Organisation, Operations und Technologie durchführen, insbesondere in IT/Digital, Industrie/F&E sowie Nachhaltigkeit, für Großunternehmen und KMU in Frankreich, der Schweiz, Spanien und Deutschland. last updated 44 week of 2026

Architecte IAM

Salary: CHF 85'000 - 105'000 per year Requirements: Nous recherchons une personne titulaire dun diplôme universitaire en informatique (Bachelor), dun diplôme dingénieur EPF ou dune formation équivalente, avec une expérience confirmée en architecture de systèmes dinformation, notamment en conception, urbanisation et modélisation darchitectures techniques.Excellente maîtrise des enjeux de sécurité informatique, des référentiels danalyse des risques, des normes et bonnes pratiques (ISO, NIST, CIS, OWASP), ainsi que des concepts IAM : authentification, gestion des accès RBAC, annuaires, identités numériques et notions ABAC/ReBAC.Bonne maîtrise des patterns darchitecture IAM, des architectures techniques et des technologies web, ainsi que des protocoles SAML, OAuth2, OpenID Connect, LDAP, Kerberos, RADIUS, SCIM et FIDO2/WebAuthn.Connaissance des annuaires Microsoft AD et Entra ID et des principes Zero Trust.Bonne maîtrise du développement Java côté serveur et bonne connaissance des environnements Unix/Linux et Windows.Expérience des architectures à haute disponibilité, de la gestion des secrets (HSM, KMS, Vault, PKI) et de la modélisation darchitectures (ArchiMate, iServer).Excellentes capacités danalyse, de rédaction et de communication, associées à une forte autonomie, de la rigueur et du pragmatisme.Sens aigu de la confidentialité, intégrité professionnelle et aptitude à collaborer avec des équipes techniques et métiers. Responsibilities: Concevoir et faire évoluer les architectures IAM en tenant compte des exigences fonctionnelles, de sécurité, de performance et de haute disponibilité.Modéliser les systèmes, les flux déchanges et les solutions IAM, en garantissant leur cohérence avec les standards darchitecture et les besoins métiers.Contribuer à la définition de la stratégie technique IAM et à lévolution des architectures technologiques du système dinformation.Accompagner et conseiller les équipes projets dans lintégration des services dauthentification, de fédération didentité et de gestion des accès.Garantir la conformité des architectures aux normes et référentiels de sécurité, et accompagner les équipes techniques au travers dateliers de conception, de guides et de recommandations. Technologies: ArchiMateHSMIAMJavaLDAPLinuxOWASPOpenIDRBACSAMLUnixWebWindowsArchitectUX UI Design More: Avec plus de 16 000 employés, nous sommes lune des entreprises informatiques les plus prospères et les leaders du marché dans notre secteur. Lassociation de la vente directe de produits informatiques et dune gamme complète de prestations de services proposée par nos différentes sociétés de services informatiques fait de nous un partenaire informatique fort et porteur davenir pour les entreprises moyennes, les grands groupes et le secteur public. Présents dans toute lEurope, nous sommes toujours proches de nos clients. Pour lun de nos clients du domaine public à Genève, nous recherchons un Architecte IAM (f/m/d). Nous proposons six semaines de vacances par an, un plan de prévoyance attractif, une vaste gamme de formations professionnelles et personnelles par lAcadémie Bechtle, ainsi que des tâches intéressantes et changeantes dans un secteur tourné vers lavenir. Bechtle Suisse SA dispose de compétences certifiées dans les domaines stratégiques de linfrastructure IT, de la virtualisation, de lInformation Management, des Managed Services, du Skills Management et de la data. last updated 44 week of 2026

Senior Security Engineer (Remote, EU/CET)

About Maze Maze is the user research platform that helps companies build the right products faster by making user insights available at the speed of product development. In most companies, research demand far exceeds supply. Time, cost, and lack of access to expertise hold teams back. In today’s AI-powered world, anyone can build a product fast. The real challenge? Deeply understanding user needs and building the right product. That’s where Maze comes in. We believe companies shouldn’t have to choose between building fast and building right. Maze makes research accessible, intuitive, and fast so product teams can put user insights at the center of every decision. Our platform enables researchers, designers, and product managers to quickly recruit participants, run studies autonomously, and surface insights that actually drive product decisions. Our AI capabilities automate the busywork and add depth and direction to the insights themselves. That’s why Maze was recently named the #1 user research platform in UX Tools’ Design Tools Survey—and why we’re scaling fast across industries like B2B SaaS, e-Commerce, Financial Services, Retail, and Automotive, supporting world class customers such as Uber, Amazon, Atlassian, Anthropic & more. Maze is a Series B company backed by top-tier investors (Felicis, Emergence & Amplify). We operate a global remote workforce driven by our core values. Senior Security Engineer Location: Remote, preference for Netherlands, United Kingdom, Ireland, Spain or Portugal. Key engineering and product teams are based in these locales. About the Role We’re hiring a Senior Security Engineer to take the lead on security at Maze. You’ll own two closely connected areas: The corporate IT foundation every Maze employee relies on The security controls that keep our cloud, code and SaaS environment secure and auditable Identity, devices and access sit right at the intersection of IT and security. This is an opportunity to own that space end to end. Your job is to automate the IT side so well that most of your time goes to corporate security engineering. You own the budget and tooling to automate the IT layer, and the helpdesk scope stays deliberately small, so the role stays an engineering role. You’ll report to our Senior Manager, Platform Engineering and work closely with teams across Maze. As a Senior Security Engineer at Maze, you will: Own identity and SSO in Google Workspace, including groups, SCIM provisioning, MFA and access policies Run our macOS fleet through Iru, including enrolment, configuration, patching and compliance Automate joiner, mover and leaver flows from Rippling so new hires are fully provisioned on day one and leavers lose access within hours Own SaaS licensing and app provisioning, while keeping internal support lightweight through automation and self-service Own security controls across AWS, GitHub, Kubernetes and our SaaS environment, including role based access, IAM hygiene, cloud guardrails, network boundaries and secrets management Run vulnerability management end to end, taking findings from Intruder, Socket and pentests through remediation and verification with clear owners and SLAs Run regular access reviews and generate audit evidence through Vanta, making compliance thorough, timely and low effort Bring a security perspective to incidents and post-incident reviews, turning what we learn into stronger controls Use AI-assisted and agentic workflows to reduce manual work and investigate issues faster What you won’t own Application code review and threat modelling, sales questionnaires, customer security calls or other customer-facing security work. These sit with our Senior Manager, Platform Engineering today and will move into the Infosec function as business needs grow. What we’re looking for You have a strong software, infrastructure or security engineering background and are comfortable using code and infrastructure as code to automate repetitive work You’ve owned identity, MDM and joiner and leaver automation at a remote company and can speak to the impact your automation had You’ve secured a modern AWS or GCP environment and can explain the trade-offs behind your IAM decisions You’ve run vulnerability management or access reviews in an environment with external audits You have experience with SOC 2 or ISO 27001 controls and know how to turn a control into an automated check You care about the employee experience and are comfortable saying no when needed while providing context and a better path forward You’re excited about AI-assisted development and actively use modern AI tools in your work Our stack Identity and people systems: Google Workspace, Rippling Devices: Iru (formerly Kandji), macOS Cloud and infrastructure: AWS, GCP, Kubernetes, Terraform, Docker Security and compliance: Vanta, Intruder, Socket, Datadog Security, Riot Network: Cloudflare Zero Trust CI/CD: GitHub Actions, Depot CI, Argo CD Observability: Datadog Collaboration: Slack, Notion, Linear, GitHub, Zoom Application: TypeScript, Node.js, React You don’t need experience with every technology in our stack. We care more about strong fundamentals, an engineering approach to both IT and security and excitement about making Maze secure by default as we scale. Inclusivity and Pay At Maze, we are dedicated to building an equitable, inclusive, and authentic workspace. Unique and diverse perspectives are welcomed, and continuous growth is encouraged. We believe that people are more than their resumes, so if your past experience looks different than the criteria listed, we'd still love to hear from you. We appreciate and celebrate non-traditional life routes and encourage you to apply should you connect with a job description or the Maze culture. Maze values transparency and it enables us to approach compensation equitably across the world. We are informed by data and regularly check our salary ranges (either United States or Rest of World) against other venture backed companies. Additionally, we are proud of our holistic and generous benefits offerings, included in every compensation package. Your salary is dependent upon many factors, including years of experience, expertise, etc. During your first interview, you can expect to have an open conversation with your recruiter regarding your compensation expectations. Why Maze is unique Early-stage startup: You will join an early-stage startup with less than 150 team members. This means you'll have the unique opportunity to directly impact success and help shape the future of Maze. Market disruption: We believe that the way companies build products is fundamentally broken and the user research market is ripe for disruption. For too long, companies have been forced to choose between rapid development without user insights or investing months into research before bringing products to market. But there's finally a groundswell building around a path forward that eliminates this compromise - and Maze is leading the charge. Product-market Fit: Maze is used by 100,000+ brands across 4,000 companies, from SMB to enterprises, and in the last fiscal year, we saw 6.5M questions answered, supporting 25K decisions Benefits Health insurance with international coverage, vision, and dental: 100% of the team member premium paid For some locations, coverage options vary, please see our benefits pages for more information Free access to proper mental health care, unlimited virtual therapy sessions (with a human) and 24/7 access to resources Life and Disability Insurance, 100% of the team member premium paid Flexible time off Meaningful equity Company retreats, fully paid for by Maze New MacBook (laptop), paid for by Maze Paid Family leave: 16 weeks for birth or adoptive parents $500/month to be used for dependent health insurance coverage If you don't have dependents to add to your plan, you will still get access to this money to be used at your discretion to get the benefits that matter to you with our flexible a-maze-ing benefits - gym memberships, co-working spaces, food, travel, whatever! $1,500 remote work setup fund to ensure you can set up a productive work space Flexible work schedule where you manage your own working hours Monthly Bonus.ly points that are awarded to others to recognize teamwork, dedication and helpfulness - points can be cashed out for gift cards and more Virtual social engagements randomly throughout the year SWAG, we have some really cool swag Open, transparent culture that includes virtual: coffee chats, bi-weekly all-hands meetings, and more Check out all of our a-maze-ing benefits here. Outreach Notice We understand you might be excited about the job you’re applying for, we are excited you are interested! However, please refrain from reaching out to our current team members on LinkedIn for referrals. Our policy is that referrals can only be provided by team members who personally know the candidate. With the high volume of interest in our roles, contacting our team members who are not involved in recruitment can be overwhelming. Additionally, please avoid submitting support tickets regarding your application, as our support team is not involved in the hiring process. Rest assured, our recruitment team is diligently reviewing all applications and will reach out directly if there is a match.

Senior/Staff Application Security Engineer

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Application Security The team is responsible for the security of Nebius's main public offerings : Compute, VPC, Managed K8s, Marketplace, Managed Soperator, and others. This includes building out the Secure SDLC, threat modeling, and vulnerability management platforms. The Role We are looking for an Senior/Staff Application Security Engineer who will ensure the security of our software by identifying and mitigating vulnerabilities, implementing best security practices, and collaborating with development teams. The ideal candidate will have a strong background in secure coding, threat modeling and building Secure SDLC. What you will do Build and maintain Application Security Posture Management (ASPM) at the Company scale. Automate and support SAST, SCA tools, etc as part of CI/CD pipelines. Improving SAST, secrets detection rules. Keeping false positive rate low. Identify, analyze, and remediate application security vulnerabilities. Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC). Develop and maintain secure coding guidelines for development teams. Conduct, run threat modeling and risk assessments for new and existing applications. Provide development teams with instruments that facilitate security-related work like threat modelling, vulnerability detection, etc. Stay updated on the latest security threats, vulnerabilities, and mitigation techniques. Serve as an application security subject matter expert to other teams. What we look for 6+ years of experience in application security. Strong knowledge of common application security risks (e.g. OWASP Top 10) and how to mitigate them. Experience with secure coding practices in languages such as Python, Go, Java, or JavaScript. Proficiency in a common programming language (such as Go or Python) with a willingness to learn Go, if necessary. Hands-on experience with security testing tools (Burp Suite, ZAP, Semgrep, etc.). Understanding of authentication protocols like SAML or OIDC. Experience in conducting threat-modeling sessions. Bonus points Confidence in presenting your ideas and opinions in a manner that can be challenged, while responding well to feedback. Experience in designing, building, and maintaining security automation. Experience in translating compliance and regulation requirements into technical specifications. Experience in exploiting vulnerabilities in web applications, Linux kernels, containers, and networks. Security certifications such as OSCP or OSWE. Hiring process Recruiter's chat (30mins) Live-coding interview (60mins) to asses basic coding skills Security interview (60mins) to asses domain expertise Security System Design interview (90mins) to assess practical experience (Optional) Technical deep dive (90mins) to present a complex and impact project. Final interview to close the hiring process (45mins) #LI-CP1 Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Staff Platform Security Engineer (Security)

Phantom is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets that never close, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. Phantom users are able to discover the markets that matter and the cultural moments that shape them, building conviction through real-time data and the verified performance of top traders. With self-custody and access to open networks at its core, Phantom lets them control their financial moves in the same app they use to safely store or spend money worldwide. Phantom has reached #1 in Google Play's finance category and consistently ranks in the top 50 apps across all categories. Phantom partners with many of the most trusted and influential names in finance like Hyperliquid, Stripe, Kalshi and Visa, to make the most popular and innovative financial products accessible to everyone. We are around 180 people, fully remote, backed by a $150M Series C investment from a16z, Sequoia Capital and Paradigm. Platform security is foundational to protecting Phantom and the systems our users rely on. We’re hiring a Senior Platform Security Engineer to own and improve security across our AWS and Kubernetes environments. You’ll work directly with infrastructure and engineering teams to secure the control planes, identities, workloads, and deployment systems behind our most critical products. We’re building an AI-native security team that aggressively uses AI to expand the speed, depth, and reach of our work. We’re looking for a strong security engineer with high agency who can identify the risks that matter, build practical controls, and own problems through verified remediation. This is a hands-on role for someone who is comfortable working in production systems, writing code and infrastructure, responding to incidents, and making security improvements without slowing down the teams building on the platform. This role is fully remote; however, we’re only open to candidates based in the US and Canada. Responsibilities AWS Security: Own and improve security across Phantom’s multi-account AWS environment, including IAM, Identity Center, networking, compute, storage, secrets, logging, and organization-level guardrails. Kubernetes Security: Secure production Kubernetes environments running on Amazon EKS, including cluster configuration, workload identity, RBAC, admission controls, network boundaries, secrets, container security, and tenant isolation. Identity and Access: Design least-privilege access models for engineers, services, and automation. Build scoped, auditable, and time-bound access paths for sensitive production systems. Mission-Critical Systems: Protect the infrastructure supporting products and services that handle sensitive data and high-value operations. Cloud Security Architecture: Lead security design for new infrastructure, platform services, and major architectural changes. Infrastructure and Policy as Code: Build reusable security controls using tools such as Pulumi, Terraform, Kubernetes policy engines, and automated configuration validation. CI/CD and Supply Chain Security: Harden build, deployment, and release systems, including GitHub Actions, workload federation, build runners, dependencies, artifacts, signing, provenance, and access to production environments. Security Automation: Build tools that identify and remediate cloud and Kubernetes risks at scale. Apply AI-assisted workflows where they materially improve analysis, coverage, or response speed. Cross-Functional Leadership: Partner closely with Infrastructure, SRE, Developer Experience, and product engineering teams. Establish practical platform-security standards and help teams adopt them. Qualifications 7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or a closely related engineering role. Deep, hands-on experience securing production AWS environments. You understand IAM and resource policies, workload identity, network security, secrets management, logging, organization-level controls, and the ways these systems fail in practice. Deep experience securing Kubernetes in production, preferably Amazon EKS, including RBAC, workload identity, admission policy, network policy, pod security, secrets, and cluster hardening. Experience designing or securing mission-critical systems where compromise, excessive privilege, or loss of availability could have significant customer or business impact. Strong understanding of identity, authorization, least privilege, isolation, and blast-radius reduction across both human and machine access. Experience securing CI/CD and software supply chains, including GitHub Actions or similar systems, build runners, workload federation, artifacts, and production deployment paths. Experience writing and reviewing infrastructure as code using Pulumi, Terraform, CloudFormation, or similar tools. Ability to write production-quality code or automation in a language such as TypeScript, Python, Go, or Rust. High agency and ownership. You can take an ambiguous platform-security problem from initial investigation through implementation and verified remediation. Clear communication and a strong track record of partnering with infrastructure and engineering teams while maintaining a high security bar. Nice To Haves Experience with AWS Nitro Enclaves or other trusted execution environments, including attestation, isolation boundaries, secure key handling, and operational lifecycle management. Experience securing financial, payments, wallet, custody, or other high-value transaction systems. Familiarity with key-management infrastructure, AWS KMS, CloudHSM, cryptographic signing systems, or secrets-management platforms. Experience operating or securing multi-region Kubernetes and AWS environments at significant scale. Familiarity with service meshes and cloud-native networking technologies such as Istio, PrivateLink, Transit Gateway, or eBPF-based controls. Experience with GitHub OIDC, Argo CD, Helm, Crossplane, or Kubernetes-based infrastructure delivery. Experience using cloud-security and observability platforms such as Wiz, Datadog, GuardDuty, Security Hub, or CloudTrail. Experience building policy-as-code, automated remediation, or security tooling used by a large engineering organization. Familiarity with blockchain infrastructure or self-custodial wallet architecture. Why Work with Us Phantom is built by a team of experienced product and engineering leaders working to make crypto-powered finance safer and easier to use. Our platform supports products used by tens of millions of people, making infrastructure security both technically challenging and directly consequential. This role offers the opportunity to: Secure AWS and Kubernetes systems supporting products used by millions of people. Work on high-impact problems spanning cloud identity, production access, workload isolation, software supply chains, and mission-critical infrastructure. Build controls directly in the platform rather than operating as an advisory or review-only security function. Influence architecture early and own improvements through implementation and production verification. Help shape an AI-native security team with a strong engineering and automation culture. Benefits Competitive salary and equity Eligibility to participate in the company’s performance bonus program Comprehensive medical, dental, and vision insurance with 100% coverage Stipend for your ideal remote setup Flexible hours and a supportive remote environment Unlimited vacation—take time when you need it 401(k) retirement plan Monthly wellness benefit Weekly meal benefit Global off-sites The target base salary for this role will range between $200,000 to $250,000 with the addition of equity and benefits. This is determined by a few factors including your skillset, prior relevant experience, quality of interviews and market factors (such as location) at the point in time of offer. We strongly encourage candidates of all backgrounds to apply. We believe that our work is stronger with a variety of perspectives, and we’re eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. We’re committed to building an inclusive, supportive place for you to do the best work of your career. By submitting your resume and application materials, you acknowledge and agree that Phantom Technologies, Inc. ("Phantom") collects and processes your personal information (including application materials, interview records, and related data) to evaluate your candidacy. Phantom may use AI-powered tools and third-party service providers for transcription, note-taking, scheduling, and other administrative tasks. Phantom does not sell your information and your materials will be handled securely and in accordance with applicable data protection laws.

Staff Security Architect

Building the Future of Crypto Our Krakenites are a world-class team with crypto conviction, united by our desire to discover and unlock the potential of crypto and blockchain technology.What makes us different? Kraken is a mission-focused company rooted in crypto values. As a Krakenite, you’ll join us on our mission to accelerate the global adoption of crypto, so that everyone can achieve financial freedom and inclusion. For over a decade, Kraken’s focus on our mission and crypto ethos has attracted many of the most talented crypto experts in the world.Before you apply, please read the Kraken Culture page to learn more about our internal culture, values, and mission. We also expect candidates to familiarize themselves with the Kraken app. Learn how to create a Kraken account here.As a fully remote company, we have Krakenites in 70+ countries who speak over 50 languages. Krakenites are industry pioneers who develop premium crypto products for experienced traders, institutions, and newcomers to the space. Kraken is committed to industry-leading security, crypto education, and world-class client support through our products like Kraken Pro, Desktop, Wallet, and Kraken Futures.Become a Krakenite and build the future of crypto!Proof of workThe teamWe are seeking a skilled & hands-on Senior Security Architect for Kraken Security Labs. Kraken Security Labs provides boutique-style, deeply technical internal security consulting on current and future products.We don't merely provide high-level guidance but indeed get deeply embedded in the different engineering teams and do not mind hands-on work.Our projects span from classical infrastructure security projects, over cryptography, web3, and complex Rust projects, to securing our next generation of AI products.You will work in a small, highly technical team and collaborate with teams all across the company & world.The opportunityDesign, review & verify robust security architecture in a heterogeneous environmentConduct thorough security assessments and audits of existing architectures, recommending practical improvementsStay updated with latest (blockchain) security trends, threats and mitigation techniquesProvide expertise to our blockchain teams, ensuring secure operational practicesSkills you should HODLProven experience as an IT security expert, with a strong background in application securityExperience in security testing diverse applicationExperience with infrastructure securityBasic familiarity with security frameworks (OWASP, NIST, etc)Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environmentStrong communication and collaboration skills to effectively remotely work with stakeholders across the organizationUnless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.Kraken is powered by people from around the world and we celebrate all Krakenites for their diverse talents, backgrounds, contributions and unique perspectives. We hire strictly based on merit, meaning we seek out the candidates with the right abilities, knowledge, and skills considered the most suitable for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgable about crypto!We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments are designed to evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Assessment results are considered alongside other relevant information, such as experience and interviews, and are not the sole basis for any employment decision.As an equal opportunity employer, we don’t tolerate discrimination or harassment of any kind. Whether that’s based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status or any other protected characteristic as outlined by federal, state or local laws. Stay in the knowFollow us on TwitterLearn on the Kraken BlogConnect on LinkedInCandidate Privacy Notice

Security Software Engineer

Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution.The company is founder-led, profitable, and growing.Canonical is looking for exceptional security-focused software engineers to be integrated across product teams. While they also contribute to the product as engineers, their primary focus is to challenge the entire team to think more deeply about security through state-of-the-art practices such as threat modeling, table-top exercises, architecture and design reviews, static analysis tools, and fuzzing, among others. These roles encompass all aspects of product security, including feature development, vulnerability response, proactive security, and open source community participation. Engineers in these roles collaborate closely with other Canonical teams, customers, and partners across the open source ecosystem.Each product engineering team at Canonical reserves one or two openings for security-oriented software engineers. We also develop a number of products driven entirely by security needs, such as our AppArmor kernel investments and the Ubuntu Security Guide (USG). As the publisher of Ubuntu, we also handle long-term security response for the entire operating system and open source ecosystem. Working with tens of thousands of upstreams means that we need to be fluent in every major programming language and design, build, and adopt sophisticated tools that enable us to work at scale and speed with confidence.Apply here if you are an exceptional security-focused software engineer, passionate about open source, and excited by Canonical's products and mission.This role requires the ability to be productive in a globally distributed team through strong self-discipline and motivation. It also involves mandatory international travel at least twice a year, typically for one week.Location: Worldwide, this is a globally remote roleWhat you'll doSecurity roles might tackle any of the following: Define, implement, and document new security features  Lead security-focused initiatives within a product engineering team Analyze, fix, and test vulnerabilities in open source software Contribute to Ubuntu and upstream open source projects to benefit the community  Audit and analyze source code for vulnerabilities  Integrate new tools into our security infrastructure, pipelines, and processes Achieve and retain various security certifications  Extend and enhance Linux cryptographic components to meet country-specific compliance requirements, such as FIPS and Common Criteria (CC) certifications Work with external partners to develop Center for Internet Security (CIS) benchmarks Design and develop hardening automation for Ubuntu  Stay up to date with trends and developments in the security industry Develop, test, and maintain new software capabilities Provide guidance and support to other engineering teams on security best practices What we are looking for in you An exceptional academic track record from both high school and university Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path A track record of going above and beyond expectations Thorough understanding of the common categories of security vulnerabilities and how to fix them Knowledge of modern software engineering techniques Familiarity with open source development tools and methodologies  Skill in one or more of C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/Typescript Experience as a security champion Experience driving security within a wider SSDLC process  Professional written and spoken English  Experience with Linux (Debian or Ubuntu preferred)  Excellent interpersonal skills, curiosity, flexibility, and accountability  Passion, thoughtfulness, and self-motivation  Excellent communication and presentation skills  Results-oriented, with a personal drive to meet commitments  Optional skills we also value Clear and effective communication with both the team and Ubuntu community members Experience working with the Linux kernel  Experience with security certifications and knowledge of FIPS and/or Common Criteria (CC) Experience with OVAL (Open Vulnerability Assessment Language)  Knowledge of cryptographic modules such as OpenSSL and Libgcrypt Knowledge of low-level Linux cryptography APIs Demonstrated ability to learn quickly Performance engineering experience  What we offer youWe consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person Personal learning and development budget of USD 2,000 per year Annual compensation review Recognition rewards Annual holiday leave Maternity and paternity leave Employee Assistance Programme Opportunity to travel to new locations to meet colleagues Priority Pass, and travel upgrades for long haul company events About CanonicalCanonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004.​ Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.Canonical is an equal opportunity employerWe are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.#LI-remote

Ubuntu Security Engineer

Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution.The company is founder-led, profitable, and growing.Canonical is building a team dedicated to providing security coverage across a wide range of ecosystems and environments, working to make the world a better, safer place. We are hiring an Ubuntu Security Engineer to join an industry-leading security engineering team and help protect the open source community and Ubuntu users from emerging threats. We are looking for candidates across all levels of experience, from Graduate to Senior.As part of the Ubuntu Security Team, you will work with some of the best and brightest people in technology to monitor, triage, respond to, and document new and existing vulnerabilities in open source software. You will collaborate with internal teams and external partners to identify issues, prioritize them, and coordinate remediation.This is an engineering-focused role that may also involve activities such as producing security assessments, building features, conducting code reviews, developing internal tools, engaging with the open source community, and participating in industry initiatives and events.This role requires international travel at least twice a year, usually for one week. It also requires the ability to be productive in a globally distributed team through self-discipline and self-motivation.Location: Worldwide, this is a globally remote roleThe role entails Analyzing, fixing, and testing vulnerabilities in open source packages Keeping track of vulnerabilities in the Ubuntu ecosystem as they are discovered, researched, and fixed, leveraging internal tools Collaborating with other teams in the Ubuntu community and upstream developers, as needed, to exchange or develop vulnerability patches and ensure that Ubuntu includes the most robust security features Auditing source code for vulnerabilities Building features and tools to help teams strengthen the security of their products and contribute to the overall security of Ubuntu What we are looking for in you You have a thorough understanding of the common categories of security vulnerabilities and techniques for fixing them You are familiar with coordinated disclosure practices You are familiar with open source development tools and methodologies You are skilled in one or more of C, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript You have excellent logic, problem-solving, troubleshooting, and decision-making skills You can clearly and effectively communicate with the team and Ubuntu community members Experience with Linux (Debian or Ubuntu preferred)  Excellent interpersonal skills, curiosity, flexibility, and accountability Appreciative of diversity, polite, and effective in a multi-cultural, multi-national organization Thoughtfulness and self-motivation Result-oriented, with a personal drive to meet commitments What we offer colleaguesWe consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus or commission. We provide all team members with additional benefits which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person Personal learning and development budget of USD 2,000 per year Annual compensation review Recognition rewards Annual holiday leave Maternity and paternity leave Team Member Assistance Program & Wellness Platform Opportunity to travel to new locations to meet colleagues Priority Pass and travel upgrades for long-haul company events About CanonicalCanonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open-source projects and the platform for AI, IoT, and the cloud, we are changing the world of software. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence; in order to succeed, we need to be the best at what we do. Most colleagues at Canonical have worked from home since our inception in 2004.​ Working here is a step into the future and will challenge you to think differently, work smarter, learn new skills, and raise your game.Canonical is an equal opportunity employerWe are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.#LI-remote