AppleNASDAQ: AAPL: Designs and sells consumer electronics, software, and online services.
Conduct offensive security research to find and fix vulnerabilities across Apple products to protect users; work as part of a security engineering and research team.
HUMAN: Provides cybersecurity solutions to protect against automated bot attacks.
Deep knowledge of internet protocols, javascript signal collection, and adversarial techniques; proven scripting experience with Python and JavaScript; experience researching fraud/abuse in Ad Tech or cybersecurity; strong analytic and communication skills.
MicrosoftNASDAQ: MSFT: Develops software, services, devices, and cloud computing solutions.
1+ YOEMaster's (1+ yr) or Bachelor's (2+ yrs) in a relevant field or equivalent; ability to pass Microsoft security screening; research experience with LLMs, CodeLLM or AI IDE preferred; experience publishing and running large-scale ML experiments.
GitHub Copilot, Microsoft VS Code, Microsoft Visual Studio, Copilot CLI, Copilot Code Review, LLM, CodeLLM, RAG, Code agent, AI IDE
CACINYSE: CACI: Provides information technology and professional services to government clients.
7+ YOERequires 7+ years in vulnerability research, exploitation, or low-level engineering; Kubernetes, Linux internals, cloud security, Python, binary analysis, fuzzing, and US citizenship. Clearance eligibility required.
Wiz: Cloud security platform providing agentless visibility and risk mitigation
6+ YOE6+ years security/threat research experience; deep OS internals knowledge; cloud and Kubernetes familiarity; Python proficiency; strong communication and independent research skills.
JPMorgan ChaseNYSE: JPM: Global financial services firm providing banking and investment solutions.
10+ YOEBachelor's degree in information systems, software engineering, computer science, or related field plus 10 years of relevant experience and expertise in financial modeling, trading systems, mortgage-backed securities, and programming.
Python, C#, CVS, GitHub, Microsoft Excel VBA, Intex Deal Maker, C++, YieldBook API, Bloomberg API
Pensar: AI-powered continuous adversarial security testing for developers.
5+ YOE5+ years in offensive security or vulnerability research; strong programming in Python, Go, JavaScript, C/C++; experience running end-to-end pentests, customer-facing communication, and open source contributions; Bachelor's degree or equivalent.
Security Engineer, Product Security - Global Security Organization
Singapore or Los Angeles or New York City or London or Dublin or Paris or Berlin or Dubai or Jakarta or Seoul or Tokyo
OnsiteFull Time
TikTok: Global short-form video hosting and social media platform.
3+ YOERequires 3+ years in product security or cybersecurity, AI and automation experience, vulnerability analysis, incident response, and security researcher collaboration. Programming and Unix-based systems experience preferred.
5+ YOEBachelor's or equivalent experience,5+ years security engineering and assessments,5+ years coding experience,1 year technical leadership,experience with security reviews,threat modeling,and vulnerability research.
Security Engineer 1, Application Security - Remote US
United States or New York City
$100k-$160k/yrRemoteFull Time
Trail of Bits: Provides high-end security research and software auditing services.
0+ YOEDemonstrated vulnerability research and code-analysis ability, coding proficiency in at least two languages (e.g., Rust, Go, C, C++, Python, JavaScript, TypeScript), memory-safety and systems knowledge, autonomous problem-solving, and clear technical communication.
Security Software Engineer, Open Source Frameworks
San Francisco or New York City or London or Berlin
$208k-$312k/yrHybridFull Time
Vercel: Frontend cloud platform for building and hosting web applications.
4+ YOE4+ years security engineering with hands-on open source contributions; deep JavaScript/TypeScript and Node framework knowledge; vulnerability research, coordinated disclosure, and CVE experience; strong communication.
Staff Application Security Engineer – Threat Research
New York City, New York, United States
$107k-$284k/yrHybridFull Time
CVS HealthNYSE: CVS: Provides retail pharmacy, health insurance, and pharmacy benefit management services.
7+ YOERequires 7+ years in application or information security, 5+ years programming, 3+ years cloud and container security, infrastructure or security as code, assessments, vulnerability analysis, and threat modeling.
Java, Python, JavaScript, C#, C/C++, PowerShell, Shell, AWS, Microsoft Azure, Google Cloud Platform, Docker, Kubernetes, Snowflake, Web Application Firewall, API
MerckNYSE: MRK: Develops and manufactures prescription medicines and vaccines.
Leading global operational technology security initiatives, collaborating with senior leaders, and shaping security solutions for manufacturing, research, and animal health operations.
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
PhD or equivalent research experience; expertise in SAT/SMT/theorem proving/program analysis; strong programming and research skills; professional software development experience preferred.
CloudflareNYSE: NET: Provides security and performance services for internet properties.
4+ YOERequires 4+ years in offensive or application security, AI/LLM and agentic security expertise, penetration testing or exploit development, cloud security, MITRE ATT&CK, BAS tools, and strong communication skills.
LLMs, MITRE ATT&CK, AWS, GCP, Bare Metal, Automated Breach and Attack Simulation (BAS), WAF, EDR, SIEM
Senior Manager - Blockchain Security & Digital Asset Infrastructure
New York or Charlotte or Chicago or St. Louis or Boston
$150k-$344k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
8+ YOEBachelor's in a technical field and 8+ years in cybersecurity, systems engineering, blockchain security or cryptographic research; hands-on custody and key-management experience; expertise in blockchain protocols, cryptography, incident response, and AI-enabled threat analysis.
Principal Associate, Security Intelligence Analyst, Protective Intelligence Global Workplace Services
McLean or New York City or Richmond
$99k-$136k/yrOnsiteFull Time
Capital OneNYSE: COF: Provides credit card, banking, and auto loan services.
3+ YOEBachelor's degree or military experience; 3+ years in intelligence gathering, OSINT collection, online research, investigations, social media investigations, analysis, and reporting.
OSINT, security operation centers, intelligence database search tools, social media
Principal Associate, Security Intelligence Analyst, Protective Intelligence Global Workplace Services
McLean or New York City or Richmond
$99k-$136k/yrOnsiteFull Time
Capital OneNYSE: COF: A diversified financial services providing banking and credit products.
3+ YOEBachelor's degree or military experience and 3+ years in intelligence gathering, OSINT collection, online investigations, social media investigations, analysis, and reporting. Strong research and communication skills required.
Open Source Intelligence (OSINT), Security Operation Centers (SOC)
Data Protection, Privacy and Security Associate (DC or NY)
New York City or Washington
$260k-$390k/yrHybridFull Time
DLA Piper: Global law firm providing comprehensive legal and business services.
3+ YOEJD and active bar admission (DC or NY), 3+ years' experience in data privacy/cybersecurity or regulatory advisory, strong research and writing, client interaction, and problem-solving skills.