An overview of this role

Our group focuses on providing GitLab’s teams as well as customers with ways to collect product usage insights. To do this, we build data collection and analytics tools within the GitLab product in a privacy-focused manner. Insights generated from Analytics Instrumentation enable us to identify the best places to invest people and resources, what product categories mature faster, where our user experience can be improved, and how product changes impact the business. You can learn more about what we’re building next on the Analytics Instrumentation Direction page.

As our new Fullstack Engineer, you will help us build out our internal as well as external instrumentation libraries and help other teams with instrumenting their features. To expand the scope of GitLab, you will play a key role, along with your fellow team members, to design and develop the new Product Analytics set of features.

Some examples of our projects: 

• Create new product analytics SDKs
• Unified Internal Events Tracking

What you’ll do  

• Write high-quality, efficient, and maintainable code while adhering to best practices and contributing to code reviews
• Embrace continuous learning and stay connected with industry best practices, tools, and technologies to drive improvements in our software
• Advocate for improvements to product quality, security, and performance
• Mentor and support fellow team members as you grow, sharing your knowledge and expertise to contribute to their growth
• Contribute to our development process by asking questions and providing feedback to make us better as a team
• Collaborate with more Senior Engineers on the architectural plans and technical designs ensuring scalability, performance, maintainability and measurability
• Participate in agile development practices, including planning sessions, stand-ups, and retrospectives, to drive iterative software development and continuous improvement for the team

What you’ll bring 

• Professional experience with VueJS or another modern JavaScript web framework (React, Angular, etc.) is a must-have.
• Professional experience with Ruby on Rails is a must-have.
• A solid understanding of semantic HTML, CSS, and core JavaScript concepts.
• Experience with writing automated tests (e.g. RSpec, Jest, Karma, Jasmine, Mocha, AVA, tape)
• Experience using Git in a professional/workplace environment
• Experience with creating libraries or APIs is a plus
• Experience with Typescript or any out of Go or Python
• Experience with GCP or AWS is a plus
• Experience in working with data warehouses, e.g. Snowflake is a plus
• An ability to self manage and organize in an asynchronous and collaborative work environment
• Demonstrated capacity to clearly and concisely communicate about complex technical, architectural, and/or organizational problems and propose thorough iterative solutions
• Familiarity with various stages of software development end-to-end (Agile methodologies is a plus)
• Proven ability to work effectively in a team including product managers, designers, and other engineers
• A commitment to continuous learning and openness to giving and receiving feedback as a part of fostering individual and team development

About the team

The Analytics Instrumentation group is distributed across 6 countries on 4 continents. Async communication and manager of one is core to how we continue to deliver value to users. 

Thanks to our Transparency value, you can see what we are working on and our Roadmap in our Product Direction page. You can see the way we’re working  on our Team page and watchsome of our recorded meetings. 

How GitLab will support you

• Benefits to support your health, finances, and well-being
• All remote, asynchronous work environment
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and development budget 
• Parental leave 
• Home office support

Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.

Job Description:

Take personal ownership in code, ensuring proper tests, documentation, and communication around development of software currently written with Java, Ruby, Scala, and JavaScript. Foster a collaborative environment to deliver high-quality, reliable, and well-tested features. Collaborate with professionals to gain a shared understanding of the software initiative. Analyze requirements of the initiative and propose solutions that meet the requirements while balancing time and cost. Create, modify, or review code to implement the requirements of the initiative. Be responsible for operating what is built in production, and ensuring that the code meets performance, reliability, quality, security, and testability standards. Create or modify a suite of tests to exercise the initiative’s functionality in an automated manner and ensure the company’s customers and professionals continue enjoying the best possible experience. Participate and lead discussions in team and project meetings. Develop enterprise-level features in Java, Scala, or Ruby on Rails with an emphasis on performance, scalability, and extensibility. Use code versioning tools such as Git and work with and effectively communicate across multiple technical and non-technical teams.

 Job Requirements:

1. Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Information Technology, or related, or its foreign equivalent plus five (5) years of hands-on experience writing professional software code.
2. In lieu of a Bachelor’s degree and five (5) years of experience, the employer will accept a Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Information Technology, or related, or its foreign equivalent plus two (2) years of hands-on experience writing professional software code.
3. Additional experience must include:
   • At least one object-oriented programming language.
   • SQL relational databases.
   • Linux, Mac, or Windows operating systems.
   • Programming data structures and algorithms.
   • Writing efficient code without straining computer processing time and memory based on volume and performance requirements.
4. Telecommuting is available for this position.
5. Must have current authorization to be employed in the U.S. without employer sponsorship.

Employer: Angi Inc.

Annual Salary Range: $155,000 - $185,000    

Work location: 3601 Walnut St., Denver, CO 80205

Apply online at https://boards.greenhouse.io/angi

#LI-DNI

Senior Security Researcher 

Looking for an innovative, high-growth company in one of the hottest segments of the security market?  Look no further than Veracode!  

Veracode is recognized as a premier provider of SaaS-based application security solutions, transforming the way companies secure applications in today’s software driven world. We provide our customers with a solid foundation on which to build security into their modern agile development processes.Learn more about us at www.veracode.com!  

The Senior Security Researcher will understand a wide variety of security vulnerabilities, across various environments and languages, and be able to integrate findings into a report as part of the Applied Research team.  The researcher will act across various domains, capable of understanding and scoring CVE/CVSS across a wide range of languages and environments, including native application, web applications, containers and in services within the cloud.  

Key aspects of the Role: 

• Integrate security findings from various areas into reports for a CISO or other interested parties. 
• Configure and deploy automated application and cloud security testing solutions including SAST, DAST, SCA, IaC, and container scanning. 
• Triage and correlate CWEs, CVEs, and other common security defects, score them, and relay essential information to stakeholders. 
• Provide input and guidance into development of functional requirements for the Application Security Posture Management (ASPM) product. 
• Perform security assessment and research of containers, infrastructure as code, low- and no-code environments. 
• Provide independent research for product features. 
• Conduct independent research for the larger security community. 

What you’ll need: 

• Expert understanding of fundamental security concepts with a focus on application security in particular. 
• Able to investigate, understand, and contextualize a wide array of vulnerabilities and be able to explain them at a technical depth appropriate to audience. 
• The skills to reverse engineer or otherwise assess a CVE, reproduce the vulnerability, and pinpoint the affected source code. 
• Familiarity with modern SDLC practices, cloud-based architecture, and deployment patterns including technologies such as git, CI/CD pipelines (GitHub, GitLab), Docker, Kubernetes, AWS, Azure, etc. 
• Strong writing skills and the ability to discern what’s important as well as the ability to present those findings. 
• Prototyping tools for analysis and software hacking problems.   

What we offer you:   

• Outstanding Medical, Dental, and Vision Coverage to meet all your healthcare needs.    
• Wellness benefits to help you focus onwhat’smost important.   
• “Take What You Need” time off policy.    
• Extensive development and training offerings to help you grow your career at Veracode.   
• Generous 401k match to help save for your future.   
• Amazing community of professionals who take pride in what we do every day   

Compensation Transparency

In accordance with U.S. pay transparency laws, Veracode provides compensation transparency for roles based in the United States. Click here to view our compensation ranges by grade. Please note, specific compensation may be influenced by various factors including candidates experience, education, and work location.

Job Grade: Senior

Employment opportunities are available to all applicants without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco, Bugcrowd is supported by Rally Ventures, Costanoa Ventures, Blackbird Ventures, Triangle Peak Partners, and others.

You can imagine that managing the infrastructure for our platform is challenging since our own security is always front and center. Are you an experienced DevOps Engineer that has experience with various certification processes and are you excited to move our platform forward while keeping it safe and secure? Are you lazy enough to want to automate everything to make your own job easier, reduce developer friction and optimize the software development life cycle? Is security a second nature for you - either offensive or defensive (e.g., red or blue team experience)? We’d love to talk with you!

We are looking for somebody who’s either remote in the US or San Francisco-based for our growing agile infrastructure team. You’ll be part of an international, highly engaged and technical group that is well-versed in building enterprise-ready and extremely secure software systems. Our core values of “simple is strong, respect is king, build it like you own it and think like a hacker” should resonate with you. Furthermore, you should have:

• At least 5+ years of professional DevOps experience
• Experience with building infrastructure that complies with various certifications and either driving or assisting with those certification efforts
• Fluent in AWS and Terraform
• Experience with GovCloud
• Experience with Linux administration, CI/CD pipelines, containers and virtualization

We use a lot of different technologies, so the more of the following list you know, the better. In no particular order: AWS, Docker, ECS, git, GitHub, CloudWatch, DataDog, Node.js, Python, Bash, Terraform, Kafka, Postgres, Sagemaker. Ruby, Go, Javascript and Kotlin are languages you'll typically encounter here, so feeling comfortable with at least one of those will help a lot.

What you’ll be doing

• Support our engineering teams to deploy and run successfully in our service-oriented architecture; focussed on security and compliance.
• Monitor and maintain our infrastructure to ensure continuous availability of our platform
• Create and maintain instances of our platform stack in different environments (specifically GovCloud)

Working Conditions

The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.

Sitting and/or standing - Must be able to remain in a stationary position 50% of the time

Carrying and /or lifting - Must be able to carry / move laptop as needed throughout the work day.

Environment - remote, work-from-home 100% of the time.

ADA Statement

Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ada@bugcrowd.com.

Culture

• At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
• We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
• Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.

At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. We are a supportive & collaborative team who understand that reaching Bugcrowd’s potential depends on the happiness of the employee.

Pay Range Disclosure

At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent.

The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business. The national estimate for the current base range for the DevOps Engineer position is $121,000 - $145,200.

Background Checks

The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). 

Background checks may include identity verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.

A supportive, collaborative group of people who understand that success depends on the team.

Bugcrowd is an equal opportunity employer and will not discriminate against any employee or applicant on the basis of age, color, disability, gender, national origin, race, religion, sexual orientation, veteran status, or any other classification protected by federal, state, or local law.

Disclaimer

Apply at: https://www.bugcrowd.com/about/careers/

Acquia is the open source digital experience company. We provide the world's most ambitious brands with technology (built around Drupal) that allows them to embrace innovation and create customer moments that matter. At Acquia we believe in the power of community and collaboration - giving our customers the freedom to build tomorrow on their terms.  

Headquartered in the U.S., we have been named as one of North America’s fastest growing software companies as reported by Deloitte and Inc. Magazine, and have been rated a leader by the analyst community and named one of the Best Places to Work by the Boston Business Journal. We are Acquia. We are building for the future of the web, and we want you to be a part of it.

The Web & Digital Strategy team is looking for a Front-End Developer who has a passion for crafting great digital experiences on the web that are performant, responsive and accessible. You will partner with our development agency to develop new features, resolve bugs and provide overall production support for sites like Acquia.com

We are looking for someone that has a passion for working with Drupal and is a great theme developer. You should have a good understanding in writing HTML/CSS/JS, but without the use of Bootstrap or other front-end frameworks. We work closely with all of the Acquia products, so knowing how to use products such as Site Studio, Personalization, etc. will be very important.  Acquia.com is a shining example of Drupal and Acquia DXP, so you will have a great opportunity to learn from some of the best Drupal developers.

Requirements:

• A history of building great Drupal themes that are responsive and accessible, with Design Systems and component based design.
• Understanding of how to debug and troubleshoot common front-end issues.
• Develop with the mindset of creating component based architectures and systems.
• Experience with Drupal Site Building, being able to work with Content Types and Views as needed for theme development.
• Worked with common Drupal Development git-based workflows and good front-end code management
• Understanding of front-end performance as it relates to key performance scores found in Google Lighthouse
• Working knowledge of a wide range of Drupal modules, deep understanding of Twig and the overall theming functions in Drupal.

Key Skills and Attributes:

• 1+ year developing themes for Drupal websites. Drupal experience required. 
• CSS/HTML5 with a general understanding of responsive design and accessible development.
• Javascript/AlpineJS - Intermediate level skills of enhancing experiences with Javascript and Javascript frameworks like React, NextJS and VueJS.
• Micro Animations, using Javascript and CSS techniques.
• Acquia Certified Front-end Developer would be preferred but not required

Individuals seeking employment at Acquia are considered without regard to race, color, religion, caste, creed, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Whatever you answer will not be considered in the hiring process or thereafter.

About SecurityScorecard:

SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Alex Yampolskiy and Sam Kassoumeh and funded by world-class investors, SecurityScorecard’s patented rating technology is used by over 25,000 organizations for self-monitoring, third-party risk management, board reporting, and cyber insurance underwriting; making all organizations more resilient by allowing them to easily find and fix cybersecurity risks across their digital footprint. 

Headquartered in New York City, our culture has been recognized by Inc Magazine as a "Best Workplace,” by Crain’s NY as a "Best Places to Work in NYC," and as one of the 10 hottest SaaS startups in New York for two years in a row. Most recently, SecurityScorecard was named to Fast Company’s annual list of theWorld’s Most Innovative Companies for 2023and to the Achievers 50 Most Engaged Workplaces in 2023 award recognizing “forward-thinking employers for their unwavering commitment to employee engagement.”  SecurityScorecard is proud to be funded by world-class investors including Silver Lake Waterman, Moody’s, Sequoia Capital, GV and Riverwood Capital.

About the Role:

This role is crucial for maintaining vulnerability intelligence data. We collect data from various sources in different formats and process collected data turning data into usable information.

Responsibilities include developing and maintaining parsers and processors for various data formats and sources, storing processed data in data stores (mysql and others). We mainly use Java for backend development with a few other technologies for smaller tasks.

The ideal candidate will have a background in designing and deploying highly efficient and reliable backend systems. 

This is a one year contract position. 

Job Responsibilities:

• Develop and maintain data collectors:Develop data collectors for various data sources such as git repositories, third party APIs. 
• Develop and maintain data processors:Develop data parsers and processors for structured and unstructured data.
• Develop and maintain monitoring tools:Develop and maintain monitoring tools and alerts to detect changes in data sources and formats.
• Other development activities as necessary: Setting up and maintaining CI/CD pipelines, developing and maintaining unit and integration tests, managing JIRA tickets, writing technical documentation, working on other development tasks not listed above  

Required Qualifications:

• Bachelor’s degree in Computer Science/Engineering, Information Technology, or a related field.
• 5+ years of experience in software development.
• Strong problem-solving skills and the ability to operate effectively under tight deadlines with attention to detail.
• Proficient in Java and SQL
• Experience with MySQL
  
  

Preferred Qualifications:

• Familiarity with cyber security topics such as vulnerabilities, CVEs and related standards and technologies
• Experience with scripting languages 
• Experience with Elasticsearch/Opensearch
• Examples of open source projects or contributions
  
  

Additional Skills:

• Excellent communication skills, both written and verbal, in English.
• Strong organizational skills with the ability to manage multiple priorities.
• Proactive attitude, open-minded and a strong team player.

Benefits:

Specific to each country, we offer a competitive salary, stock options, Health benefits, and unlimited PTO, parental leave, tuition reimbursements, and much more!

SecurityScorecard is committed to Equal Employment Opportunity and embraces diversity. We believe that our team is strengthened through hiring and retaining employees with diverse backgrounds, skill sets, ideas, and perspectives. We make hiring decisions based on merit and do not discriminate based on race, color, religion, national origin, sex or gender (including pregnancy) gender identity or expression (including transgender status), sexual orientation, age, marital, veteran, disability status or any other protected category in accordance with applicable law. 

We also consider qualified applicants regardless of criminal histories, in accordance with applicable law. We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact talentacquisitionoperations@securityscorecard.io.

Any information you submit to SecurityScorecard as part of your application will be processed in accordance with the Company’s privacy policy and applicable law. 

SecurityScorecard does not accept unsolicited resumes from employment agencies.  Please note that we do not provide immigration sponsorship for this position. 

Job Locations: Remote, Mexico City, MX

To the attention of candidates (Mexico City): 

This role requires full time work over the Weekends. Candidates should be comfortable working with a “Wed-Sun” or “Sat-Wed” 5-day working week schedule. Candidates MUST have right-to-work in Mexico.  Visa sponsorship is NOT provided for this position.

About the Department

The Cloudflare Customer Support Team solves complicated problems and answers technical questions via phone, email, chat and social media. Whether it is a Wordpress blogger using our services for free or a global Enterprise business with petabytes of web traffic, we are always eager to assist. We are the eyes and ears of Cloudflare, acting as the real-time voice of the customer to help communicate their needs and real-world use cases back to the rest of the company - for better service and future product development.

Description

Security Operations Center Analysts provide premium-level support for Cloudflare’s security products and features. Our largest and most technically sophisticated customers will contact the SOC as a Service team for assistance and intelligence in dealing with threats or attacks on their infrastructure at OSI Layers 3, 4, and 7. This will span the range of Cloudflare security products from Magic Transit Infrastructure Protection, DDoS mitigation and Network Firewall, to using the Web Application firewall (WAF), Spectrum, Bot Management and Rate Limiting to help customers.

Security Operations Center Analysts analyze threats, make detailed and informed suggestions for mitigation and may need to implement mitigation strategies directly on behalf of the customer. The team also provides attack reporting beyond Cloudflare’s self-service reports.

Responsibilities

• Monitor and investigate the alerts to identify attacks
• Work with Engineering and Operations teams to mitigate attacks, suggest steps to mitigate, and apply the appropriate mitigation, when applicable
• Work with Engineering and Product teams to improve the products and tools
• Extensive communications with customers via chat, email, and phone 
• Review the latest alerts to determine relevancy and urgency. Create new tracking tickets for alerts that signal an incident and require review or escalation
• Configure / Manage security monitoring rules and contribute to tool improvements
• Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
• Participation in a weekend and holiday rotation required with main working hours 9 to 5 Pacific time 

Key skill sets

• Strong understanding of the OSI model, TCP, UDP, BGP, QUIC
• Advanced understanding of iptables
• Analysis of traffic for attack anomaly detection and creation of mitigation rules
• Experience in handling attack mitigation and thorough knowledge of various attacks (L3/4 and L7)
• At least 2 years of technical support experience and customer support experience is a must
• Strong communication skills with high-value customers 
• Command line / Bash shell
• Sysadmin skills (Linux/Mac/Windows) & Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, Git etc.)
• Security skills and certifications preferred: CISSP, GCIA GCIH, GCFA, GCFE, etc.

Bonus Points:

• Previous DDoS mitigation for OSI layers 3,4, & 7, filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blacklisting, whitelisting, and/or rate limiting is a plus