Security Engineer Jobs in Santa Clara, CA

Responsibilities Security Team at TikTok The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference. - Ensure that our applications are designed and implemented to the highest security and privacy standards thus maintaining and enhancing user trust. - Review and analyze design, architectures, existing systems services, operating systems, networks and applications from a security perspective, via black box testing, code reviews, automation, threat modeling and research. - Discover security issues that appear under new threat scenarios, support incident response, forensics, remediation in a cross-functional environment driving towards incident resolution. Qualifications Minimum Qualifications - Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or other relevant majors. - 3+ years of security engineering experience such as design review, threat modeling, security mitigation development, security tooling development or privacy engineering. - Advanced knowledge and understanding in various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing. You're expected to be an expert in at least one of these areas. - Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust. - Strong problem-solving skills and excellent debugging / troubleshooting skills. Job Information [For Pay Transparency] Compensation Description (annually) The base salary range for this position in the selected city is $145000 - $355000 annually. Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units. Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure). The Company reserves the right to modify or change these benefits programs at any time, with or without notice. For Los Angeles County (unincorporated) Candidates: Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues; 2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and 3. Exercising sound judgment.

Perform security architecture design review and threat analysis of firmware and hardware , to ensure security properties and robustness of our complex software products Identify vulnerabilities in our firmware, build proof of concepts, and drive remediation via secure code reviews, fuzz and penetration testing Recommend security controls, evangelize and drive adoption of new or improved tools, practices, and plans to increase product robustness and reliability. Collaborate with engineers, customers, and/or partners to perform internal or external security audits on our products to ensure the security quality. Respond to product security incidents, coordinate engineering teams and partners to solve security related issues Work with other parts of our company on a broad range of technologies and initiatives to enhance security. Research and exploit side-channel, fault, and advanced physical attacks Requirement BS+ in Computer Engineering, Computer Science, or Electrical Engineering. 7+ years of relevant work experience Programming background in ARM/RISCV assembly, Python, C, C++, and/or RUST Knowledge of embedded system architecture and security (e.g. Android/Linux, ARM trust zone, hypervisor/virtualization…etc.). Knowledge of hardware/software vulnerabilities and their exploit techniques Experience with security design review or threat modeling throughout hardware to software. Experience with secure code review, analysis, vulnerability assessment, hacking/attack analysis. Motivated by pursuing difficult and novel problems in a highly complex environment Excellent at multitasking, organizing, and prioritizing complex projects to meet deadlines Listens for nuances and digs into details to understand systems deeply Preferred Requirement experience on any automotive grade platform such as AUTOSAR, QNX, Android Automotive, etc. JTAG, debugging, binary instrumentation frameworks, Reverse-engineering (IDA Pro, Ghidra) ISO21434 or ISO 26262 compliance experience TARA or HARA methodology and execution experience CACSE (Certified Automotive Cyber-Security Expert) certificate CACSP (Automotive Cyber-Security Professional) certificate Salary range: $180,000- $260,000 Employee may be eligible for performance bonus, short and long term incentive programs. Actual total compensation will be dependent upon the individual's skills, experience and qualifications. In addition, MediaTek provides a variety of benefits including comprehensive health insurance coverage, life and disability insurance, savings plan, Company paid holidays, Paid time off (PTO), Parental leave, 401K and more. MediaTek is an Equal Opportunity Employer that is committed to inclusion and diversity to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose - to uplift everyone, everywhere by being the best way to pay and be paid. Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa. Job Description This notice is being provided as a result of the filing of an application for permanent alien labor certification for the below job opportunity. Any person may provide documentary evidence bearing on the application to the Certifying Officer of the Department of Labor, at the following address: U.S. Department of Labor Employment and Training Administration Office of Foreign Labor Certification 200 Constitution Avenue NW, Room N- 5311 Washington, DC 20210 Visa Technology & Operations LLC, a Visa Inc. company, needs a Cyber Security Engineer - Sr. Consultant level (multiple openings) in Foster City, CA to: Work and lead with a talented team, influencing and building the next generation IAM technology stacks with the global Visa organization. Serve as a subject matter expert and technical lead in the IAM team for various Cloud Security deployments. Research security controls and mentor other members of the security team. Perform gap assessments and create roadmaps covering the end-to-end delivery of the Security controls required to secure the cloud deployments. Liaise with number of Cybersecurity teams, IT, business stakeholders, conduct workshops and lead the design and implementation of the solutions. Position reports to the Foster City, CA office and may allow for partial telecommuting. Employer will accept a Bachelor's degree in Information Science, Computer Science, Engineering, or related field, followed by 10 years of progressive, post-baccalaureate experience in the job offered or in an engineer or analyst-related occupation. Qualifications Position requires experience in the following skills: AWS (Amazon Web Services) EC2 AWS (Amazon Web Services ) S3 AWS (Amazon Web Services ) IAM AWS (Amazon Web Services ) Lambda AWS (Amazon Web Services ) ECS Dynamo Service Now MSSQL CI/CD Python Docker Additional Information Worksite: Foster City, CA Travel Requirements: This position does not require travel. Mental/Physical Requirements: This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers. Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law. Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code. U.S. APPLICANTS ONLY: The estimated salary range for a new hire into this position is $ 184,579.00 USD to $ 279,400.00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity. Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401 (k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program. If interested in the position, please reference job number REF82872U when applying through the inhouse media requisition posting, via SmartRecruiters.

TITLE: Security/Certification Engineer - FIPS/CC (Mobile Devices) POSITION TYPE: Full Time (W2) ABOUT WorldLink: WorldLink is a rapidly growing information technology company at the forefront of the tech transformation. From custom software development to cloud hosting, from big data to cognitive computing, we help companies harness and leverage today's most cutting-edge digital technologies to create value and grow. Collaborative. Respectful. Work hard Play hard. A place to dream and do. These are just a few words that describe what life is like at WorldLink. We embrace a culture of experimentation and constantly strive for improvement and learning. We take pride in our employees and their future with continued growth and career advancement. We put TEAM first. We are a competitive group that like to win. We're grounded by humility and driven by ambition. We're passionate, and we love tough problems and new challenges. You don't hear a lot of "I don't know how" or "I can't" at WorldLink. If you are passionate about what you do and having fun while doing it; tired of rigid and strict work environments and would like to work in a non-bureaucratic startup cultural environment, WorldLink may be the place for you. For more information about our craft, visit ************************ . WHO we're looking for: We are looking for a Security/Certification Engineer - FIPS/CC (Mobile Devices) who has experience in the common criteria evaluations of IT products and who has experience with FIPS validation of cryptographic modules (FIPS 140-3). You will be responsible for the end-end validation of the products (performing initial assessment of the security functions and specifications; consult with various teams in the development of the process, design, and documentation required for the common criteria evaluations of our Mobile Device products and the FIPS 140-2/3 accreditation of our cryptographic modules. Role and Responsibilities: Develop the security target for our products, assist with the testing,documentation and working with the necessary engineering teams during the evaluation. Develop plans and procedures using applicable security controls, including NIAP Protection Profiles (MDFPP, VPN, WLAN, Biometric enrollment, and verification), assist with the CAVP algorithm testing ,drafting and review of the security policies for our cryptographic modules according to the FIPS 140-3 specifications, possess information around the DCID 6/3, DoD 8500, or NIST SP 800-53. Assist in the development and review of all test reports and required certification documentation for all the Common Criteria evaluations and FIPS 140-2/3 accreditation. Use experience building testing environments, performing testing and reporting results (technical writing) for all of the common criteria and FIPS evaluations. Develop mitigation strategies to address vulnerabilities uncovered during security testing; and assist with completing all the required documentation to meet the specifications and certification requirements, as required. Perform vulnerability analysis of product or system designs against applicable security criteria using common tools, including Nessus, NMAP, and Wireshark. Project POC with Internal/External audience when required. Required Experience and Education: 5+ years of technical experience in Common Criteria evaluations NIAP-managed Common Criteria Evaluation and Validation Scheme (CCEVS or Scheme) of any product in the US scheme. Mobile device and Software knowledge are highly preferred. Bachelor's Degree in Electrical Engineering, Computer/Information Science, Information Assurance/Cybersecurity, or equivalent degree (Master's Degree preferred). Knowledge of common security related protocols and their design (i.e., SSH, IPsec, TLS, etc.) Be highly proficient in FIPS 186-4/5, SP 800-186, SP800-90B and the FIPS 140-3 requirements and have knowledge around the cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators. Necessary Skills and Attributes: Self-motivated individual with the ability to thrive in a team-based or independent environment. Detail-oriented with strong organization skills. Ability to work in a fast-paced environment. Limited supervision and the exercise of discretion. Ability to comprehend security standard requirements and specifications and apply them to products. Excellent communication (written/verbal) skills and analytical skills. Physical Demands: The physical demands described here are representative of those that must be met by contract employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the contract employee is occasionally required to stand, clean, crawl, kneel, sit, sort, hold, squat, stoop, stand, twist the body, walk, use hands to finger, handle, or feel objects, tools or controls, reach with hands and arms, climb stairs or ladders and scaffolding, talk or hear, and lift up to 20 pounds. Specific vision abilities required by the job include ability to distinguish the nature of objects by using the eye. Operate a computer keyboard and view a video display terminal between 50% - 95% of work time, including prolonged periods of time. Requires considerable (90%+) work utilizing high visual acuity/detail, numeric/character distinction, and moderate hand/finger dexterity. Performs work under time schedules and stress which are normally periodic or cyclical, including time sensitive deadlines, intellectual challenge, some language barriers, and project management deadlines. May require working additional time beyond normal schedule and periodic travel. WHAT we'll bring: During your interview process, our team can fill you in on all the details of our industry-competitive benefits and career development opportunities. A few highlights include: Medical Plans Dental Plans Vision Plan Life & Accidental Death & Dismemberment Short-Term Disability Long-Term Disability Critical Illness/ Accident/ Hospital Indemnity/ Identity Theft Protection 401(k) WHAT you should know: Our success begins and ends with our people. We embrace diverse perspectives and value unique human experiences. WorldLink is an Equal Employment Opportunity and Affirmative Action employer. All employment at WorldLink is decided on the basis of qualifications, merit, and business need. We endeavor to continue our footprint as a diverse organization by highlighting opportunities for all people. WorldLink considers applicants for all positions without regard to race, color, religion or belief, sex, (including pregnancy and gender identity), age, national origin, political affiliation, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. People with disabilities who need assistance with any part of the application process should contact us. This job description is designed to cover the main responsibilities and duties of the role but is not designed to be a comprehensive list of all.

Join a rapidly growing data start-up specializing in data value engineering as a Sr. Security Operations Engineer and play a key role in securing our cloud-hosted applications while ensuring compliance with industry standards. Our innovative platform offers a comprehensive approach to data management, covering collection, analysis, packaging, visualization, and exchange. Designed for flexibility and integration, our system empowers organizations and individuals to take control of their data, recognize its ownership, and maximize its value. Responsibilities: Hands on engagement in security review, implication and compliance issues with Developers, DevOps, customers. Drive security audit reviews and certification process Configure, integrate and implement various security controls using tools and technologies (IAM, MFA, SSO, Firewall/IDS/IPS systems, Network/application vulnerability scanners etc) in cloud environment Understanding of Security Industry Standards and Compliance Frameworks and Requirements (PCI-DSS, SOC2, CIS configuration Benchmarks, NIST, GDPR, LGPD, etc.) Build dashboards of various security controls implemented for reviews by compliance team Develop and augment security process automation through scripting or programming Work collaboratively with developers, staff and business partners Document tasks, procedures, environments in configuration Requirements:3+ years of experience in security operations 2+ years of experience designing, building, implementing, integrating and/or maintaining code Deep understanding of security controls for data security in cloud hosted applications based on PCI-DSS & SOC2 standards Experience in vulnerability assessment using tools like GitHub Advanced Security, SonarQube, Qualys etc Experience working in AWS cloud environments (Azure or GCP a nice to have). Ability to develop automation scripts and perform design reviews Strong experience implementing security controls and integration in cloud hosted environments using tools and technologies (IAM, MFA, SSO, DLP systems, Firewall/IDS/IPS systems, Secure Configurations, network/application vulnerability scanners) Understanding of the security industry standards and compliance frameworks, controls and requirements (PCI-DSS, SOC2, CIS configuration Benchmarks, NIST, GDPR, LGPD, etc.) Understanding of OWASP vulnerabilities and common network/application/API attacks Some experience in task automation with Python/Shell Scripting At least one of the security certifications, like CISA, CISM, GSEC, CASP+ Education: Bachelor of science degree (or equivalent) in computer science, engineering, or similar experience Type: Fulltime and Hybrid work schedule Location: Mountain View, CA Salary Range: $155K-$175K/Year, plus benefits Submit resume to ***********************

About the Role We are seeking an outstanding Lead Security Engineer with a specialized focus on AI to innovate and safeguard Hinge Health's digital ecosystem against emerging threats. You'll be at the forefront of a rapidly evolving landscape, leading initiatives that redefine how AI supports security operations while ensuring robust data protection. This is your chance to make a profound impact on millions of lives by driving advancements in the healthcare industry, ensuring utmost security, compliance and privacy. As a Lead Security Engineer, you will be at the forefront of architecting and implementing secure, scalable, and cutting-edge solutions on AWS. Your role will be responsible for securing Hinge Health's digital assets against potential threats while still maintaining seamless accessibility for authorized users. You love the thrill of exploring new technologies and ensuring they meet the highest security standards and are passionate about the intersection of security and Artificial Intelligence. Your expertise in healthcare, compliance, and agile methodologies will lead the implementation of top-notch AI security best practices to shape the future of a secure and scalable Cloud environment. The ideal candidate should be passionate about security and eager to drive change, embrace challenges, and take healthcare security to new heights. What You'll Accomplish AI Enablement for Security Operations: Design, implement, and optimize AI-driven tools to enhance security monitoring, threat detection, incident response, and IAM tasks. Secure AI Implementation: Develop and enforce policies and protocols to protect AI tools and platforms from misuse, data breaches, and external threats. Stay abreast of industry trends and changing threat landscape and review technologies and services and make recommendations to continuously improve our capabilities. Provide solutions to complex security problems with new services: Design and deliver security solutions for new services by evaluating potential risks, stakeholder needs, and available tooling as well as custom solutions. Security, Compliance and Regulations: Meet all compliance regulations including HIPAA, privacy, and other relevant security frameworks. Ensure that new services introduced into our environment adhere to all relevant compliance obligations. Take a proactive approach to mitigate potential risks. Cyber Security Operations: Develop and drive cybersecurity initiatives related to incident response, threat intelligence, vulnerability management, monitoring, and reporting tools - to continuously improve and expand capabilities. Identity and Access Management: Design and implement IAM solutions - enabling secure and granular access controls for users and applications, enforcing least privilege principles, and utilizing automation and AI for privilege escalation, approvals, and overall developer experience. Security Governance, Auditing and Assessment: Collaborate with internal and external auditors to ensure continuous compliance with security standards. Work closely with engineering, IT, and compliance teams to align security measures with organizational goals and industry standards. Basic Qualifications Bachelor's degree in technical/engineering/scientific area or comparable education/experience. 7+ years in cybersecurity, with 3+ years focused on security operations or IAM. 5+ years of experience in cloud security operations, specifically AWS. 3+ years of coding experience. Hands-on experience securing AI/ML systems, including data pipelines, model deployments, API integrations, and their security challenges. Expert knowledge of enterprise IT infrastructure technology, systems, vulnerability, and incident management processes. Experience developing Terraform and updating existing infrastructure as code to conform with security standards. Preferred Qualifications AWS Solutions Architect Certification. AI/ML certifications are a plus. Familiarity with adversarial machine learning threats and mitigation strategies. SOC, PCI, HIPAA training certifications. Knowledge of low-level networking principles. Deep, low-level understanding of OAUTH2 and SAML. Compensation This position will have an annual salary, plus equity and benefits. Please note the annual salary range is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. The annual salary range for this position is $192,000 - $288,000. About Hinge Health Hinge Health is moving people beyond pain by transforming the way it is treated and prevented. Connecting people digitally and in-person with expert clinical care, we combine advanced technology, AI, and a care team of experts to guide people through personalized care directly from their phone. Our approach is proven to reduce pain by 68%, prevent 42% of new opioid prescriptions, and avoid more than half of joint replacement surgeries. Available to 18M people, Hinge Health is trusted by leading health plans and employers. What You'll Love About Us Inclusive healthcare and benefits: On top of comprehensive medical, dental, and vision coverage, we offer employees and their family members help with gender-affirming care, tools for family and fertility planning, and travel reimbursements if healthcare isn't available where you live. Planning for the future: Start saving for the future with our traditional or Roth 401k retirement plan options which include a 2% company match. Modern life stipends: Manage your own learning and development. Diversity and Inclusion We're committed to building diverse teams that reflect the communities we serve. Hinge Health is an equal opportunity employer and prohibits discrimination and harassment of any kind. We make employment decisions without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability status, pregnancy, or any other basis protected by federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We provide reasonable accommodations for candidates with disabilities. If you feel you need assistance or an accommodation due to a disability, let us know by reaching out to your recruiter. #J-18808-Ljbffr

Ready to be pushed beyond what you think you're capable of? At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system. To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems. Our work culture is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be. At Coinbase, security isn't just a priority. It's the foundation of everything we do. In the fast-evolving world of digital currency, where trust is paramount, security breaches can mean the difference between success and failure. That's why we've made security a cornerstone of our mission, setting the standard for protecting millions of customers and billions of dollars in assets. As a Blockchain Security Engineer on the Decentralized Financial Security Team, you will work closely with engineers, technical product managers and senior leadership on designing secure products from the ground up. You will be responsible for performing secure design reviews, threat modeling, vendor reviews and secure code reviews for upcoming Coinbase products or features that will be used by millions of customers. You will have an opportunity to work on the latest technology and provide leadership visibility of the current risk posture. You'll also have an opportunity to pitch, lead and participate in cross-functional initiatives that uplevel the security of all Coinbase products and services. What you'll be doing (ie. job duties): To be completed by all business teams except Eng. Perform design reviews, threat modeling and code reviews of upcoming features and products. Identify top product risk areas and lead risk-reduction initiatives with cross-functional teams. Improve and/or automate existing processes to increase efficiency. Participate in the team on-call rotation to support engineering teams through timely design consultations, vulnerability analysis, bug fix verification, etc. What we look for in you (ie. job requirements): To be completed by all business teams except Eng. Bachelor's degree in Computer Science Expertise in Application Security and fundamental knowledge of cryptography 2+ years of threat modeling/design review experience Strong communication skills with the ability to translate technical security requirements and risks into terms that anyone can understand. Ability to work independently and unblock yourself. Nice to haves: MS or PhD in Computer Science or related field. Experience in at least one of: Go, Ruby or Python. Experience automating manual processes or carrying out process improvements. Experience in Blockchain, Exchange, or Decentralized Exchange Security. ID: P69496 Pay Transparency Notice: Depending on your work location, the target annual salary for this position can range as detailed below. Full time offers from Coinbase also include target bonus + target equity + benefits (including medical, dental, vision and 401(k)). Pay Range: $152,405-$179,300 USD Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying. Commitment to Equal Opportunity Coinbase is committed to diversity in its workforce and is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the Know Your Rights notice here. Additionally, Coinbase participates in the E-Verify program in certain locations, as required by law. Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations[at]coinbase.com to let us know the nature of your request and your contact information. For quick access to screen reading technology compatible with this site click here to download a free compatible screen reader (free step by step tutorial can be found here). Global Data Privacy Notice for Job Candidates and Applicants Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here. By submitting your application, you are agreeing to our use and processing of your data as required. For US applicants only, by submitting your application you are agreeing to arbitration of disputes as outlined here. Benefits at Coinbase Medical Plan, Dental and Vision Plan with generous employee contributions Health Savings Account with company contributions each pay period Disability and Life Insurance 401(k) plan with company match Wellness Stipend Mobile/Internet Reimbursement Connections Stipend Volunteer Time Off Fertility Counseling and Benefits Generous Time off/Leave Policy The option of getting paid in digital currency Learn more about our mission

Who we're looking for: We are looking for an individual who has experience in the common criteria evaluations of IT products and who has experience with FIPS validation of cryptographic modules ( FIPS 140-3) . They will be responsible for the end-end validation of the products ( performing initial assessment of the security functions and specifications; consult with various teams in the development of the process, design, and documentation required for the common criteria evaluations of our Mobile Device products and the FIPS 140-2/3 accreditation of our cryptographic modules. Role and Responsibilities: Develop the security target for our products, assist with the testing, documentation and working with the necessary engineering teams during the evaluation. Develop plans and procedures using applicable security controls, including NIAP Protection Profiles (MDFPP, VPN, WLAN, Biometric enrollment, and verification), assist with the CAVP algorithm testing ,drafting and review of the security policies for our cryptographic modules according to the FIPS 140-3 specifications, possess information around the DCID 6/3, DoD 8500, or NIST SP 800-53. Assist in the development and review of all test reports and required certification documentation for all the Common Criteria evaluations and FIPS 140-2/3 accreditation. Experience building testing environments, performing testing and reporting results (technical writing) for all of the common criteria and FIPS evaluations. Develop mitigation strategies to address vulnerabilities uncovered during security testing; and assist with completing all the required documentation to meet the specifications and certification requirements, as required. Perform vulnerability analysis of product or system designs against applicable security criteria using common tools, including Nessus, NMAP, and Wireshark. Project POC with Internal/External audience when required. Skills: Self-motivated individual with the ability to thrive in a team-based or independent environment. Detail-oriented with strong organization skills. Ability to work in a fast-paced environment. Limited supervision and the exercise of discretion. Ability to comprehend security standard requirements and specifications and apply them to products. Excellent communication (written/verbal) skills and analytical skills. Required Experience and Education: 5+ years of technical experience in Common Criteria evaluations NIAP-managed Common Criteria Evaluation and Validation Scheme (CCEVS or Scheme) of any product in the US scheme . Mobile device and Software knowledge highly preferred. Bachelor's Degree in Electrical Engineering, Computer/Information Science, Information Assurance/Cybersecurity, or equivalent degree (Master's Degree preferred). Knowledge of common security related protocols and their design (i.e., SSH, IPsec, TLS, etc.) Be highly proficient in FIPS 186-4/5, SP 800-186, SP800-90B and the FIPS 140-3 requirements and have knowledge around the cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators .

Application Security Architect & Developer (Remote in San Francisco) Salary: $130,000-$180,000 A software security company with a global team is looking for an experienced Application Security Architect & Developer to join their team. Are you a seasoned application security expert with a passion for proactive threat prevention? Do you thrive on building innovative security solutions from the ground up, diving deep into runtime environments and even the Linux kernel? If so, we have an exciting opportunity for you: As an Application Security Architect & Developer, you'll be instrumental in designing, developing, and deploying cutting-edge security mechanisms to safeguard applications in both cloud and private data center environments. You'll leverage your deep understanding of application runtimes and threats to build robust protections, from rapid prototypes to production-ready code. Responsibilities: Analyze application runtime environments (Python, Java, JavaScript, etc.) and emerging threat landscapes. Architect and develop innovative security protection mechanisms at both user and Linux kernel levels. Design and build prototypes and production-grade solutions for vulnerability detection and exploit prevention. Develop and deploy security solutions across cloud platforms (AWS, Azure, GCP) and private data centers. Require skills: Bachelor's degree (or equivalent) in Computer Science or a related field. 7+ years of experience in application security development or monitoring for enterprise applications. Deep technical understanding of application runtime behavior and security vulnerabilities. Proficiency in multiple programming languages, including Python, Java, Go, Rust, and C/C++. Experience with modern backend frameworks (e.g., Django, Spring, Flask, NestJS, ASP.NET). Solid experience with containers, Kubernetes, Linux applications, and the Linux kernel. Familiarity with Agile development methodologies and CI/CD pipelines. Proven experience developing in cloud environments (AWS, GCP, Azure). Desired Skills: Experience with microservices architectures. Hands-on experience with AI and Machine Learning in security contexts. Expertise in Linux Kernel security/monitoring and eBPF. Experience with Open Telemetry and similar monitoring APIs and tools. Interested? Apply directly through LinkedIn, or send your CV to ********************* By applying to this role you understand that we may collect your personal data and store and process it on our systems. For more information please see our Privacy Notice (*********************************

Our client is seeking a diligent and organized Contract Security Analyst in the IAM space to join our BT team and support day-to-day activities within the Identity and Access Management (IAM) domain. This role will primarily focus on supporting key security and audit objectives specifically related to our business applications portfolio. Key responsibilities include assisting in the coordination and tracking required for delivering OIG requirements and supporting the onboarding of critical application logs into our security information and event management (SIEM) systems to enhance our detection and response capabilities. The successful candidate will work closely with the IAM team, business application owners, and potentially other security functions like the Detection and response or Compliance/IA teams. Daily tasks may involve tracking action items, coordinating evidence collection for OIG deliverables, facilitating communication for log source onboarding, maintaining status documentation, and assisting with reporting. Skills: This position requires strong organizational skills, analytical skills, attention to detail, clear communication, and the ability to manage multiple tasks effectively to help ensure the timely completion of critical IAM-related initiatives for business applications. 5-7 years' experience required in IAM or Security, ideally with an identity provider or enterprise organization of similar size to the client. Must understandthe basics of SaaS applications Desired Soft Skills: Persuasive & Clear Communicator: They can articulate their points logically and understandably, making them effective at convincing others or explaining complex topics. Personable: They are pleasant, friendly, and easy to work with, which helps build rapport and trust. Pushes back gently: They are not afraid to voice disagreement, concerns, or alternative perspectives, but they do so tactfully and respectfully, avoiding unnecessary conflict while still making their point.

LinkedIn is the world's largest professional network, built to help members of all backgrounds and experiences achieve more in their careers. Our vision is to create economic opportunity for every member of the global workforce. Every day our members use our products to make connections, discover opportunities, build skills and gain insights. We believe amazing things happen when we work together in an environment where everyone feels a true sense of belonging, and that what matters most in a candidate is having the skills needed to succeed. It inspires us to invest in our talent and support career growth. Join us to challenge yourself with work that matters. Our team is responsible for architecting, designing, implementing, and maintaining robust network infrastructures for data centers and DCI optical networks. We ensure seamless connectivity, security, and reliability within campus and across global data center networks. We develop tools and automate processes to support our hypergrowth. As a Staff Network Engineer, you'll play a pivotal role as a technical leader and exemplar within our team. We seek an individual who crafts and implements technology solutions aligned with business and technical goals, stays abreast of cutting-edge networking research, fosters collaboration across teams, and adeptly balances competing priorities. In addition to leadership acumen, a successful Staff Network Engineer should demonstrate sufficient proficiency in both networking and software engineering. At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team. This role will be based out of our Hillsboro, OR. Responsibilities: Review architectures, network designs, automated network provisioning and tools, and provide recommendations for continuous improvements in all aspects of the network, including network performance, capacity, reliability, and observability. Design, deploy, and operate a large-scale network for data center infrastructure and backbone across multiple geographical regions. Collaborate with cross-functional teams to align implementation with business objectives. Perform network maintenance and upgrades. Identify gaps and develop solutions to automate deployments and auto-remediate network faults. Network security and compliance. Participate in on-call rotation, resolve network outages, conduct post-mortems and remediation plans. Evaluate new platforms to address scaling challenges and drive requirements with OEMs/ODMs to support our technology stack. Basic Qualifications: Bachelor's degree in Computer Science or a related field, or equivalent experience 5+ years of proven hands-on industry experience in network and data center engineering in hyperscalers environment. Understanding of network protocols such as TCP/IP, BGP, MPLS, RDMA, network overlay technologies, and network-based Quality of Service (QoS). Experience with programming languages like Python, Go, or other scripting languages. Knowledge in Kubernetes, host networking, host TCP tuning. Knowledge in network congestion control solutions such as QoS, DCTCP/ECN, and eBPF. Knowledge in network management, configuration generation and provisioning systems and tools. Ansible, REST/gRPC, NETCONF, Jenkins, Puppet, YANG, OpenConfig, etc. Previous knowledge in hardware and software testing using IXIA or other testing platforms. Preferred Qualifications: Master's Degree in a technical discipline 10+ years of professional experience Experience in SONiC Experience in evaluating and deploying new HW platforms and SWs to solve DC growth and operational challenges. Experience in designing and deploying network infrastructure for HPC workloads. Suggested Skills: Network Protocols Kubernetes Network Design Network Engineering You will Benefit from our Culture: LinkedIn is committed to fair and equitable compensation practices. The pay range for this role is [$147000 to $240000]. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skill set, depth of experience, certifications, and specific work location. This may be different in other locations due to differences in the cost of labor. The total compensation package for this position may also include annual performance bonus, stock, benefits and/or other applicable incentive compensation plans. For more information, visit ************************************** Equal Opportunity Statement We seek candidates with a wide range of perspectives and backgrounds and we are proud to be an equal opportunity employer. LinkedIn considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class. LinkedIn is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful. If you need a reasonable accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us at accommodations@linkedin.com and describe the specific accommodation requested for a disability-related limitation. Reasonable accommodations are modifications or adjustments to the application or hiring process that would enable you to fully participate in that process. Examples of reasonable accommodations include but are not limited to: -Documents in alternate formats or read aloud to you -Having interviews in an accessible location -Being accompanied by a service dog -Having a sign language interpreter present for the interview A request for an accommodation will be responded to within three business days. However, non-disability related requests, such as following up on an application, will not receive a response. LinkedIn will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by LinkedIn, or (c) consistent with LinkedIn's legal duty to furnish information. Pay Transparency Policy Statement As a federal contractor, LinkedIn follows the Pay Transparency and non-discrimination provisions described at this link: ******************************** Global Data Privacy Notice for Job Candidates This document provides transparency around the way in which LinkedIn handles personal data of employees and job applicants: ***************************************

7+ years of relevant experience working on distributed systems or BS in Computer Science with 5+ years of relevant experience Relevant development experience with OO languages (such as Python, Java, C++, etc.) In depth understanding of CI/CD, developer workflows and best practices In depth understanding of Git, standard branching & release process Automated build orchestration tools such as Jenkins, Hudson, CircleCI Experience in Kubernetes preferred Motivated and willing to learn and solve challenging problems Strong analytical skills Experience supporting a 24x7 software service

System Power Engineer The main function of a system power engineer is to research, design, develop, test high-density, industry-leading wearable electronics. The candidate will work with emerging technologies in a fast-paced team. Job Responsibilities: Initiate and drive project plan, including creating new designs and modifications of existing designs. Drive product prototypes, working models or theoretical models constructed with computer simulation. Design and/or review system power architecture. Model and characterize power for a wide selection of new technologies the team is investigating. Write detailed functional specifications and design flow/tradeoff. Support new technology introduction. Act as a subject matter expert to engineering staff and consult specifications to evaluate power requirements of the overall system. Provide training and support to system integrators, product owners and users. Direct technicians, engineering designers or other technical support personnel as needed. Candidates will be evaluated based on their deliverables in hardware design and prototype builds, as well as documentation and communications with cross-functional teams. Skills: Good EE fundamentals in power and analog domain. In depth knowledge of power converter topologies, system architecture and characterization. Solid hands-on experience in lab equipment, such as oscillating scope, differential probes. Ability to drive projects with high ambiguity, multiple paths, and fuzzy future to clarity. Experience in consumer electronics and working with vendors/contract manufactures is a plus. Understanding of battery, thermal, and system integration is a plus. Understanding of wireless charging technology is a plus. Experience in developing automated tests and validation is a plus. Experience in power modeling in consumer technology is a strong plus. Education/Experience: Bachelor's degree in engineering required.

Job Title: Network Engineer Duration: 6 Months to start with The main function of a network engineer is to determine user requirements and design specifications for computer networks. The ideal candidate will understand and execute Python scripts and have a background in network engineering devices. Must-Have Skills 2+ years of Network Engineering, Linux/Unix, and Python experience Basic knowledge of computer hardware as it relates to data storage Knowledge of computer software, such as configuration management software, desktop communications software, operating system software and internet directory services software Nice-to-Have Skills: Data center engineering knowledge Responsibilities: Adjust network sizes to meet volume or capacity demands Communicate with customers, sales staff, or marketing staff to determine customer needs Coordinate network operations, maintenance, repairs or upgrades Design, build, or operate equipment configuration prototypes, including network hardware, software, servers, or server operating systems Determine specific network hardware or software requirements such as platforms, interfaces, bandwidths, or routine schemas Develop and implement solutions for network problems Education: Bachelor's degree in computer science or a related field required

W2 ONLY No CTC ONSITE 4 DAYS A WEEK IN SAN RAMON OR SF The Network Engineer is responsible for managing, maintaining, and optimizing network infrastructure in a fast-paced and expanding environment. This role includes engineering, design, deployment, troubleshooting, and supporting a range of network systems. The engineer will also ensure network availability, security, and reliability, supporting mission-critical systems and adhering to business objectives and SLAs. Key Responsibilities: Design, implement, and maintain network systems (servers, virtual solutions, VDI, etc.) ensuring high availability and performance. Automate network deployment and data collection tasks for improved efficiency. Oversee data center infrastructure, including hardware installation, cabling, and vendor management. Develop and maintain security policies, procedures, and tools to protect network infrastructure. Lead network troubleshooting, security issue remediation, and root cause analysis. Monitor network performance, system availability, and reliability, ensuring SLA compliance. Provide technical support to end-users and resolve network incidents and vulnerabilities. Participate in 24/7 on-call rotations and support the design of new office network setups. Lead IT infrastructure projects and manage vendor relationships for installations and system maintenance. Qualifications: Education: Bachelor's degree in IT, Computer Science, or related field. Experience: 4+ years in network engineering, Cisco environment, and data center management. Certifications: CCNA or CCNP preferred. Skills: Expertise with Cisco networking equipment (switches, routers, firewalls), network automation (Python, Ansible, Terraform), and monitoring tools (Dynatrace). Additional: Knowledge of SD-WAN, Cisco DNA, Firewalls, Cisco ISE, and Azure cloud integration desired. Work Environment: Physical Demands: Occasional lifting of up to 50 pounds and the ability to perform manual tasks (e.g., cabling, troubleshooting in data centers). This role is ideal for an engineer who thrives in a dynamic environment and is eager to help drive innovation and operational excellence in network infrastructure.

Clearance Requirement: U.S. Citizenship required Experience Level: Senior (7+ years) iMETALX, Inc. is a company that aims to create a future where space is accessible and sustainable for all. We provide space domain awareness (SDA) and in-space servicing solutions for governments and businesses. iMETALX is looking for an engineer to join the team to work on cross-domain applications focusing on In-Space Servicing, Assembly, and Manufacturing (ISAM) such as on-orbit refueling, repositioning, and repair. This will span areas around spacecraft autonomy, such as world view, perception, and controls, as well as testing and deploying the software on real systems. iMETALX is looking for a platform engineer to bring on the team to support product development for various on-orbit demonstrations on our roadmap. Job Description: We are seeking a highly experienced Platform Systems Engineer to lead the design, development, and management of robust software platforms supporting high-performance computing and AI-enabled systems. This role requires deep technical knowledge in embedded systems, platform scalability, GPU integration, and infrastructure performance-across both edge devices and on-premises cloud environments. As a senior engineer, you'll work cross-functionally with software and hardware teams to deliver resilient, scalable platforms that meet demanding power, performance, and security requirements. Key Responsibilities Design, implement, and manage software platforms on Windows and Ubuntu using C++, Python, and deep learning frameworks (e.g., TensorFlow, PyTorch). Collaborate closely with hardware and software developers to ensure seamless integration, with attention to GPU compatibility, power requirements, and resource constraints. Architect and optimize platforms for scalability, efficiency, and network interfacing, supporting high-throughput and real-time performance. Support and enhance both developer and user experience by refining platform strategies, tooling, and build systems. Monitor system performance, perform root-cause analysis, and proactively troubleshoot platform-level issues. Drive CI/CD improvements and support the automation of routine tasks, especially for pre-deployment validation and platform testing. Ensure data protection, platform security, and vulnerability mitigation across systems. Implement and maintain containerization strategies (e.g., Docker), supporting modular and portable deployment. Design and maintain build frameworks that support multi-platform compilation and hardware abstraction layers. Work with architectures such as x86, mingw, ARM, and integrate across edge devices and on-prem/cloud-hosted systems. Optimize memory usage and structures to ensure deterministic and efficient behavior in constrained, real-time environments, and error handling. Implement support for network protocols and platform-level messaging between distributed components. Document processes, platform configurations, and operational workflows for reproducibility and team alignment. Stay current with emerging technologies and best practices in embedded systems, platform development, and devops. Qualifications U.S. Citizenship is required due to the nature of the work and customers. 7+ years of experience in embedded systems, platform engineering, or infrastructure development. Strong expertise with C++, Python, and working in Linux (Ubuntu) and Windows environments. Hands-on experience with deep learning frameworks and supporting GPU-accelerated applications. Deep understanding of containerization, build systems, and CI/CD pipelines. Experience with edge computing, site-hosted cloud architectures, and real-time system constraints. Familiarity with network protocols, memory management, and system-level performance tuning. Experience with x86, mingw, ARM and other hardware architectures common to embedded and platform development. Ability to own cross-functional development efforts and influence platform direction with minimal oversight. Strong documentation skills and a commitment to operational excellence. Preferred Qualifications: Experience with secure systems design or DoD/NASA platform standards Background in high-assurance, real-time, or safety-critical environments Contributions to open-source platform tools or embedded software frameworks Why Join Us? You'll be at the forefront of deploying intelligent systems in challenging environments-from space to the edge-while helping define the future of space AI platforms. We offer a highly collaborative team, cutting-edge hardware, and an environment where innovation is expected and rewarded.

Responsibilities Team Intro As a Endpoint Specialist at TikTok USDS, you will play a crucial role in primarily administering and maintaining our physical and virtual workstations. You will work closely with the IT Support Service department to ensure the smooth deployment and management of Windows and Mac laptops across the organization. In addition, you will work closely with lines of business to understand their requirements, design tailored virtual desktop infrastructure (VDI) solutions, and provide expert-level support to ensure optimal system performance and security. As an Endpoint Security Specialist, the candidate will be part of the Security Technology Operations & Information Technology (STOP IT) team responsible for configuring, maintaining, and operating our end-user devices that provide our workforce with secure access to the communication and collaboration platforms, applications, and data they require to be successful. You will be supporting technical issues using existing knowledge, researching, and troubleshooting, resolving incidents and managing requests in-person and remotely, maintaining inventory and updating records ensuring the accuracy of assets, and with our digital asset compliance program. You will play an important role in process improvement, automation, self-service, discovery/documentation of problem-solving and troubleshooting steps, and updating user guides and knowledge articles. Key Responsibilities: 1. Security and Compliance: - Implement security best practices and policies for workstations. - Ensure compliance with industry standards and regulations. - Deploy patches to operating systems and applications - Implement and enforce security protocols and policies for endpoint devices to safeguard corporate data and infrastructure. - Stay up-to-date with endpoint security trends and technologies, proactively addressing potential vulnerabilities. 2. VDI Design and Implementation: - Collaborate with clients to assess their VDI needs and design customized solutions. - Implement and configure VMware Horizon View and related components to deploy VDI environments. - Ensure high availability, scalability, and performance of VDI systems. 3. Infrastructure Optimization: - Monitor VDI infrastructure for performance bottlenecks and implement optimizations. - Troubleshoot and resolve complex issues related to virtualization and VDI environments. - Conduct capacity planning to meet current and future demand. 4. Documentation and Training: - Maintain detailed documentation of workstation configurations and procedures. - Provide training and knowledge transfer to team members and clients. 5. Technical Expertise:s. - Knowledge of App Volumes, Dynamic Environment Manager, Horizon TrueSSO, and Unified Access Gateways will be key. 6. Client Interaction: - Build strong client relationships by providing excellent technical support and guidance. - Collaborate with clients to understand their evolving IT needs and propose solutions accordingly. 7. Endpoint Support: - Configure and provision a wide range of endpoints, including computers, mobile devices, and IoT devices. - Ensure endpoints are set up in accordance with company standards and user needs. - Collaborate with the IT Support Team to provide technical support to end-users for endpoint-related problems, ensuring a quick resolution. Qualifications Minimum Qualifications: - 5+ years of experience working with Horizon virtual desktops - Working level understanding of end user device management technologies ( i.e. Workspace One, Apple Business Manager, ) - Strong knowledge of VMware Horizon View, vSphere, VMware Cloud on AWS and Advanced Experience in Windows Desktop Operating Systems - Knowledge of AWS, specifically EC2, VPC, ELB, R53, RDS, IAM, and other infrastructure services - such as strong knowledge of endpoint security best practices and compliance standards. - Solid knowledge of automated provisioning of end user devices along with excellent troubleshooting skills and the ability to resolve endpoint-related issues. - Excellent problem-solving skills and the ability to work well under pressure with strong communication and interpersonal skills for client interactions. - Knowledge of storage technologies (e.g., SAN, NAS) and networking concepts Preferred Qualifications: - Proficiency in scripting languages (e.g., PowerShell) for automation. - Familiarity with cloud-based VDI solutions is a plus. - VMware certifications, such as VCP-DTM or VCAP-DTM, are highly desirable. - Strong knowledge of the internals of the operating systems Windows, mac OS, iOS, Android. - Good understanding of unified endpoint management related concepts Apple Business Manager, Android for Work, Intune, etc. Job Information [For Pay Transparency] Compensation Description (annually) The base salary range for this position in the selected city is $118800 - $182000 annually. Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units. Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure). The Company reserves the right to modify or change these benefits programs at any time, with or without notice. For Los Angeles County (unincorporated) Candidates: Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues; 2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and 3. Exercising sound judgment.

Ready to be pushed beyond what you think you're capable of? At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system. To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems. Our work culture is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be. At Coinbase, security isn't just a priority. It's the foundation of everything we do. In the fast-evolving world of digital currency, where trust is paramount, security breaches can mean the difference between success and failure. That's why we've made security a cornerstone of our mission, setting the standard for protecting millions of customers and billions of dollars in assets. As a Blockchain Security Engineer on the Decentralized Financial Security Team, you will work closely with engineers, technical product managers and senior leadership on designing secure products from the ground up. You will be responsible for performing secure design reviews, threat modeling, vendor reviews and secure code reviews for upcoming Coinbase products or features that will be used by millions of customers. You will have an opportunity to work on the latest technology and provide leadership visibility of the current risk posture. You'll also have an opportunity to pitch, lead and participate in cross-functional initiatives that uplevel the security of all Coinbase products and services. What you'll be doing (ie. job duties): To be completed by all business teams except Eng. Perform design reviews, threat modeling and code reviews of upcoming features and products. Identify top product risk areas and lead risk-reduction initiatives with cross-functional teams. Improve and/or automate existing processes to increase efficiency. Participate in the team on-call rotation to support engineering teams through timely design consultations, vulnerability analysis, bug fix verification, etc. What we look for in you (ie. job requirements): To be completed by all business teams except Eng. Bachelor's degree in Computer Science Expertise in Application Security and fundamental knowledge of cryptography 2+ years of threat modeling/design review experience Strong communication skills with the ability to translate technical security requirements and risks into terms that anyone can understand. Ability to work independently and unblock yourself. Nice to haves: MS or PhD in Computer Science or related field. Experience in at least one of: Go, Ruby or Python. Experience automating manual processes or carrying out process improvements. Experience in Blockchain, Exchange, or Decentralized Exchange Security. ID: P69496 Pay Transparency Notice: Depending on your work location, the target annual salary for this position can range as detailed below. Full time offers from Coinbase also include target bonus + target equity + benefits (including medical, dental, vision and 401(k)). Pay Range: $152,405-$179,300 USD Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying. Commitment to Equal Opportunity Coinbase is committed to diversity in its workforce and is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the Know Your Rights notice here. Additionally, Coinbase participates in the E-Verify program in certain locations, as required by law. Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations[at]coinbase.com to let us know the nature of your request and your contact information. For quick access to screen reading technology compatible with this site click here to download a free compatible screen reader (free step by step tutorial can be found here). Global Data Privacy Notice for Job Candidates and Applicants Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here. By submitting your application, you are agreeing to our use and processing of your data as required. For US applicants only, by submitting your application you are agreeing to arbitration of disputes as outlined here. Benefits at Coinbase Medical Plan, Dental and Vision Plan with generous employee contributions Health Savings Account with company contributions each pay period Disability and Life Insurance 401(k) plan with company match Wellness Stipend Mobile/Internet Reimbursement Connections Stipend Volunteer Time Off Fertility Counseling and Benefits Generous Time off/Leave Policy The option of getting paid in digital currency Learn more about our mission

Application Security Architect & Developer (Remote in San Francisco) Salary: $130,000-$180,000 A software security company with a global team is looking for an experienced Application Security Architect & Developer to join their team. Are you a seasoned application security expert with a passion for proactive threat prevention? Do you thrive on building innovative security solutions from the ground up, diving deep into runtime environments and even the Linux kernel? If so, we have an exciting opportunity for you: As an Application Security Architect & Developer, you'll be instrumental in designing, developing, and deploying cutting-edge security mechanisms to safeguard applications in both cloud and private data center environments. You'll leverage your deep understanding of application runtimes and threats to build robust protections, from rapid prototypes to production-ready code. Responsibilities: Analyze application runtime environments (Python, Java, JavaScript, etc.) and emerging threat landscapes. Architect and develop innovative security protection mechanisms at both user and Linux kernel levels. Design and build prototypes and production-grade solutions for vulnerability detection and exploit prevention. Develop and deploy security solutions across cloud platforms (AWS, Azure, GCP) and private data centers. Require skills: Bachelor's degree (or equivalent) in Computer Science or a related field. 7+ years of experience in application security development or monitoring for enterprise applications. Deep technical understanding of application runtime behavior and security vulnerabilities. Proficiency in multiple programming languages, including Python, Java, Go, Rust, and C/C++. Experience with modern backend frameworks (e.g., Django, Spring, Flask, NestJS, ASP.NET). Solid experience with containers, Kubernetes, Linux applications, and the Linux kernel. Familiarity with Agile development methodologies and CI/CD pipelines. Proven experience developing in cloud environments (AWS, GCP, Azure). Desired Skills: Experience with microservices architectures. Hands-on experience with AI and Machine Learning in security contexts. Expertise in Linux Kernel security/monitoring and eBPF. Experience with Open Telemetry and similar monitoring APIs and tools. Interested? Apply directly through LinkedIn, or send your CV to ********************* By applying to this role you understand that we may collect your personal data and store and process it on our systems. For more information please see our Privacy Notice (*********************************