Infrastructure Security Vulnerability Analyst

Join Hive as a Security Compliance Analyst, where you will play a pivotal role in ensuring our information security governance and compliance standards are met. Collaborate with engineers and auditors to strengthen our security compliance framework. You will be responsible for addressing auditors' inquiries and managing on-call operations, while contributing to the risk management program led by our Information Security team. If you're passionate about securing innovative AI solutions, we want to hear from you!

Join Hive as a Security Compliance Manager and take the lead in enhancing our security framework. Collaborate with engineers and auditors to ensure compliance with industry standards such as ISO and SOC, as well as federal regulations. You will own the execution of our Information Security program, focusing on improving personnel screening compliance and risk monitoring. Your role will require effective communication with technology and business leaders across all levels, driving consensus among stakeholders to ensure security controls are effective and remediated as necessary.

Join Lambda, a pioneering force in AI cloud infrastructure, dedicated to revolutionizing the way organizations harness computational power. Serving a diverse clientele that includes AI researchers and enterprise giants, Lambda's commitment is to make high-performance computing as accessible as electricity, empowering individuals and businesses alike to achieve superintelligence. If you're passionate about building the most advanced AI cloud platform, we would love to have you onboard.*Note: This role requires you to be present at our San Francisco or San Jose office 4 days a week, with Tuesday designated as the work-from-home day.Key ResponsibilitiesEnsure organizational security practices align with ISO 27001, 27701, PCI, SOC 2, and other regulatory frameworks to support business objectives.Oversee IT Risk Register, focusing on risk identification, tracking, and prioritization.Lead the remediation of control deficiencies and gaps.Provide expert guidance to Control Owners for the planning, design, implementation, and maintenance of security controls, policies, and standards.Engage with both technical and non-technical stakeholders to discuss cybersecurity risk management and program reporting.Support the Customer Trust program, which includes managing customer assessments and security questionnaires.Assist control owners with root cause analysis and monitor the progress of risk management action plans.Develop risk metrics for management regarding information security control maturity, compliance status, and performance findings. Support third-party risk management assessments to ensure compliance with information security requirements.Your ProfileMinimum of 8 years of experience in cybersecurity risk and controls management, with a deep understanding of frameworks like ISO 27001, 27701, PCI-DSS, SOC, NIST CSF, and other regulatory requirements.Proven experience in managing audits and certification programs, including scope planning and developing control procedures aligned with policies and standards.

About Plaud Inc.Plaud is revolutionizing the way professionals interact with technology through our innovative AI work companion designed to boost productivity and enhance performance via intuitive note-taking solutions. Since our inception in 2023, we have garnered the trust of over 1,500,000 users globally.Based in San Francisco and incorporated in Delaware, Plaud Inc. is at the forefront of human–AI intelligence, leveraging a unique combination of hardware and software. We adhere to the highest standards of security and privacy, ensuring compliance with SOC 2, HIPAA, GDPR, ISO27001, ISO27701, and EN18031.To discover more about our journey and innovations, visit https://www.Plaud.ai and connect with us on Instagram, X, Facebook, LinkedIn, and YouTube.

Who We AreAt Stealth Fintech, we are committed to transforming the landscape of ERP-native B2B payments. As a well-backed early-stage startup operating in stealth mode, we are developing innovative solutions designed to redefine how businesses transact. If you are passionate about addressing significant challenges from the ground up, we invite you to join our team. Led by visionary founders, we are focused on building modern infrastructure for B2B payments that empowers enterprises to leverage their ERP systems for swift, transparent, and controlled payment processes, whether it’s paying suppliers, card issuers, or reimbursing employees globally.About the PositionWe are in search of a Payments Compliance Analyst to enhance our compliance program tailored for enterprise clients making payments to vendors and suppliers worldwide. In this role, you will facilitate compliance operations related to onboarding and payment monitoring, collaborating closely with our regulated payment partners. Our platform integrates within ERP and finance systems, allowing enterprises to automate accounts payable and supplier payments across borders. Your primary focus will be on managing supplier risk at scale, ensuring compliance in onboarding and payment execution while supporting complex workflows for large enterprises.Your Key ResponsibilitiesSupport compliance for enterprise vendor and supplier payment flows, involving high-value and recurring payments, which includes:Conducting Know Your Business (KYB) and customer due diligence for enterprise clients.Performing fraud and sanctions screening for both domestic and international vendors, suppliers, and contractors.Conduct transaction monitoring and investigations for global supplier payments.Review risks associated with sanctions, embargoes, and adverse media, specifically concerning:Supplier jurisdictions.Counterparties and beneficial owners.Assist with Suspicious Activity Report (SAR) and Suspicious Transaction Report (STR) filings, regulatory reporting, and internal escalations.Collaborate with Product, Engineering, and ERP integration teams to:Embed compliance controls within accounts payable and supplier workflows.Support the integration of new payment rails, currencies, countries, and supplier types.

About UsAt Sierra, we are pioneering a platform designed to enhance human connections in customer experiences through advanced AI technologies. Our headquarters is in San Francisco, with expanding offices in Atlanta, New York, London, France, Singapore, and Japan.Our culture is defined by essential values: Trust, Customer Obsession, Craftsmanship, Intensity, and Family. These principles guide our actions and are integral to our success.Our co-founders, Bret Taylor and Clay Bavor, bring extensive experience from leading roles at OpenAI, Salesforce, Facebook, and Google, among others.What You Will DoOversee independent audits and compliance programs, including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA, and other relevant frameworks.Lead the definition of project scope, conduct readiness assessments, engage auditors, plan remediation efforts, and report to executives.Gain a comprehensive understanding of Sierra’s Conversational AI Platform, model providers, and cloud architecture. Collaborate with Platform and Agent Engineering teams to implement controls across diverse cloud environments.Create and maintain a centralized library of security controls aligned with compliance, regulatory, and customer requirements. Continuously evaluate control effectiveness, identify vulnerabilities, prioritize risks, and drive remediation efforts to enhance our security posture.Establish and enforce security baselines for cloud infrastructure, containerized workloads, Kubernetes, identity management, encryption, logging, and network security. Work alongside engineering teams to integrate security measures into configuration and change management processes.Develop and manage automated compliance workflows leveraging AI, infrastructure as code, and security tools to optimize efficiency and assurance of controls.

Astranis is at the forefront of satellite technology, developing advanced satellites designed for high orbits to extend humanity's reach into the solar system. Our cutting-edge satellites deliver dedicated, secure networks to a diverse clientele, including large enterprises, government agencies, and the US military. With five satellites currently in orbit and several more set to launch, Astranis is managing a robust pipeline of over $1 billion in commercial contracts.As a leading satellite communications partner, we cater to clients with rigorous demands for uptime, data security, network visibility, and customization. Backed by over $750 million from notable investors like Andreessen Horowitz, Blackrock, and Fidelity, our team of 450 engineers and entrepreneurs operates from our state-of-the-art 153,000 sq. ft. headquarters in Northern California.Position Overview:Astranis is seeking a passionate and driven Security Operations Analyst, ready to navigate the complexities of digital security. The ideal candidate possesses a robust enthusiasm for cybersecurity, with a talent for dissecting malware, unraveling phishing schemes, and leading incident response efforts. As cyber threats evolve rapidly, we require a proactive and innovative individual who is committed to safeguarding our digital landscape and maintaining the integrity of our data and systems.Key Responsibilities:Continuously monitor and analyze security alerts and incidents in real-time utilizing tools like Splunk. React promptly and effectively to security events.Collaborate with team members to identify and mitigate security incidents, providing support during incidents and participating in post-incident analyses.Dissect and analyze malware to comprehend its behavior, origins, and impact, leveraging insights to strengthen our defenses.Investigate phishing attempts, pinpointing attack vectors and recommending preventive measures.Develop, integrate, and manage various security tools and solutions.Participate in red and purple team exercises.Maintain and update security documentation, including procedures, runbooks, and policies related to Splunk and security operations.Engage in enhancing security monitoring and incident response processes.Learn and apply various cybersecurity tools and technologies.

Join Mindlance as a Cyber Intelligence Security Analyst and be at the forefront of safeguarding our digital assets. In this role, you will leverage your analytical skills to monitor, assess, and mitigate security threats while collaborating with cross-functional teams to enhance our cyber defense strategies. This position offers a unique opportunity to contribute to the security posture of a leading organization in a dynamic environment.

Your Role at Lila SciencesThe Senior Director of Cloud Security and Compliance will spearhead the comprehensive security, governance, risk management, and regulatory compliance for our cloud environments and research workflows. In this pivotal role, you will architect and oversee cloud security frameworks, data protection strategies, and compliance initiatives across both multi-cloud and on-premises infrastructures. You will collaborate closely with teams in Engineering, Data Science, IT, Legal, and Compliance to establish secure operational patterns, facilitate swift yet secure experimentation, and uphold a resilient governance program that provides verifiable evidence for regulators and clients.Your ContributionsCloud Security Architecture & GovernanceFormulate and uphold a comprehensive cloud security strategy, reference architectures, and security standards for public cloud environments (AWS, Azure, GCP) and hybrid solutions.Implement secure-by-default design patterns for cloud resources, data flows, and analytics, while intentionally setting CI/CD security patterns aside from your primary focus.Establish and manage IAM principles of least privilege, network segmentation, private endpoints, key/secret management, and centralized logging for AWS, Kubernetes, and cloud-native services.Governance, Compliance & Risk ManagementCreate, execute, and continuously enhance policies, standards, and procedures in line with key frameworks (e.g., NIST CSF, NIST 800-53, FedRamp, ISO 27001, SOC 2, GDPR/CCPA).Oversee the data protection program, including data classification, minimization, retention, and lifecycle management; supervise relevant DLP strategies.Conduct third-party risk assessments, manage vendor security inquiries, and oversee security clauses in contracts, ensuring audit evidence is well-maintained.Security Controls & MonitoringDefine and supervise security controls across cloud resources, focusing on identity and access management, encryption, key management, log collection, and telemetry.Work in tandem with Security Operations to implement monitoring systems, alerting protocols, incident response coordination, and audit evidence collection.Compliance & Audit ReadinessPrepare for internal and external audits by mapping controls to frameworks and translating them into actionable engineering artifacts and evidence.Ensure ongoing compliance with SOC 2, ISO 27001, and other regulatory mandates, collaborating with Legal and Privacy on data protection controls.Data and Machine Learning SecurityEnhance security protocols for data and machine learning/AI processes, focusing on privacy protection and secure data handling.

About Juniper SquareAt Juniper Square, our mission is to empower individuals by unlocking the immense potential of private markets. Privately owned assets like commercial real estate, private equity, and venture capital constitute half of the financial ecosystem but are often inaccessible to the general public. We are at the forefront of digitizing these markets, enhancing efficiency, transparency, and accessibility in one of the most dynamic sectors of finance. If you are passionate about leveraging technology to improve market functionality and wish to be part of a values-driven organization, we invite you to apply.We offer a range of work arrangements, from fully remote positions to full-time roles in our physical offices. Our commitment to a digital-first approach enables effective collaboration across 27 U.S. states, 2 Canadian provinces, India, Luxembourg, and England. For those who prefer an office environment, we maintain physical locations in San Francisco, New York City, Mumbai, and Bangalore.Your RoleAs a Senior GRC Analyst, you will play a pivotal role in supporting our governance, risk management, and compliance (GRC) framework. The ideal candidate will possess extensive experience in developing scalable and tailored risk management and compliance processes suited for a high-growth organization. Strong analytical, problem-solving, and communication skills are essential, as you will collaborate with diverse cross-functional teams to foster effective risk management practices.Key ResponsibilitiesCustomer Trust and AssuranceCompliance ManagementOversee the maintenance and onboarding of security compliance certifications and frameworks, including SOC2, ISO, and more.Collaborate with cross-functional teams to gather controls evidence for timely submissions to external auditors.Facilitate a seamless audit process through effective communication and teamwork.Continuously enhance the audit process through automation and rationalization of controls.

About the RoleWe are in search of a dedicated and skilled Senior Governance, Risk, and Compliance (GRC) Analyst to enhance our team. This crucial position will allow you to safeguard our impactful operations, manage risks effectively, and ensure compliance with the intricate regulatory frameworks of the fintech sector. As a subject matter expert, you will transform complex requirements into practical controls while fostering a culture of security throughout the organization.Key ResponsibilitiesOversee information security and third-party risk assessments, formulating mitigation strategies.Lead both internal and external audits, including evidence collection and remediation efforts.

At Qualia, we take pride in revolutionizing the B2B real estate technology landscape, transforming the home buying and selling experience into a seamless, secure, and enjoyable journey. Our innovative SMB and Enterprise products connect users across the real estate ecosystem—including homebuyers, sellers, lenders, title and escrow agents, and real estate professionals—onto a unified digital closing platform, enhancing clarity and transparency in real estate transactions. Millions of consumers leverage Qualia through our business partners nationwide to successfully close on homes each year. YOUR ROLE As a key member of our team, you will contribute to the development of payment solutions designed to streamline financial transactions in real estate closings. You will play a vital role in our Compliance and Payment Operations department, managing daily payment processes, transaction oversight, and issue resolution while scaling compliant and repeatable procedures as our business expands. Collaborating with Compliance, Operations, Product, Engineering, Customer Support, and our banking partners, you will ensure all payment activities align with regulatory standards, network rules, and internal controls. Additionally, you will assist in establishing a robust Compliance and Payment Operations function in partnership with the Director of Compliance. KEY RESPONSIBILITIES Compliance & Risk Management Support our Compliance Management System (CMS) for embedded payments, focusing on governance, oversight, and operational excellence. Assist in building and managing a future team of Payment Operations Analysts. Monitor payment activities across various channels for ACH returns, transaction irregularities, and potential fraud, escalating issues as per established protocols. Address escalations related to customer onboarding, coordinating with the sponsor bank to resolve matters within SLA. Own and manage daily payment operations workflows, including exception handling, returns management, and issue tracking. Facilitate internal and external audits by collecting evidence, validating controls, and ensuring compliance with documented policies and procedures. Ensure adherence to NACHA Operating Rules, Reg E, BSA/AML requirements, consumer protection obligations, and sponsor bank standards. Resolve Level 2 and Level 3 customer complaints in collaboration with Customer Support. Oversee onboarding workflows and address any escalations. Process Improvement & Growth Track and analyze key operational and risk metrics, including ACH return rates and exception volumes, to inform decision-making.

Join Anchorage Digital, the forefront of digital asset innovation for institutions in the crypto space.At Anchorage Digital, we empower institutions to engage with digital assets through a comprehensive platform that includes custody, staking, trading, governance, settlement, and unparalleled security infrastructure. As the first federally chartered crypto bank in the U.S., Anchorage Digital stands out with its diverse offerings, including Anchorage Digital Singapore and Porto by Anchorage Digital.Backed by prestigious investors such as Andreessen Horowitz, GIC, Goldman Sachs, KKR, and Visa, our Series D valuation exceeds $3 billion. Founded in 2017 in San Francisco, we have expanded our offices to New York, Porto, Singapore, and Sioux Falls. Discover more at anchorage.com, follow us on X @Anchorage, and connect with us on LinkedIn.We are on the lookout for a driven and inquisitive Compliance Data Analyst specializing in Financial Crimes Compliance Data Analytics. In this key role, you will contribute to the development, execution, and enhancement of compliance programs across all Anchorage Digital legal entities.Your collaboration with various compliance functions, particularly in Financial Crimes Compliance, will be instrumental in enhancing the efficiency and effectiveness of our compliance initiatives. By transforming raw data into actionable insights, you will drive process improvements and harness technology to bolster our compliance framework.This position is perfect for a proactive technology enthusiast eager to tackle intricate issues within a dynamic regulatory landscape. You will gain extensive exposure to various compliance domains and have the opportunity to utilize your data expertise to fortify Anchorage Digital’s global compliance operations through analytics, automation, and strategic AI integration.Successful candidates will be highly organized, possess strong analytical skills, and effectively balance multiple priorities while adapting to a fast-paced environment. If you excel in uncertainty and are motivated to thrive in a dynamic setting, we encourage you to apply. Anchorage Digital values proactive, detail-oriented, and innovative individuals.

Nium: A Global Leader in Payments Innovation Nium is at the forefront of revolutionizing real-time, cross-border payments, dedicated to building the global payments infrastructure of the future. Our advanced payment solutions are transforming how banks, fintechs, and businesses globally manage their finances, enabling them to collect, convert, and disburse funds instantly across borders.Our extensive payout network supports transactions in 100 currencies across over 220 markets, with real-time processing in 100 of those. We facilitate fund disbursements to accounts, wallets, and cards, and enable local collections in 35 markets. Nium's burgeoning card issuance service is operational in 34 countries, and we hold regulatory licenses in over 40 countries, ensuring seamless onboarding, swift integration, and comprehensive compliance regardless of geography. Our dual headquarters are located in San Francisco and Singapore.Position Overview We are seeking a detail-oriented and proactive Senior Analyst for Licensing and Reporting in our Regulatory Compliance team. This role is crucial for maintaining and overseeing regulatory licenses across the United States, including Money Transmitter Licenses, as well as various jurisdictions in the Americas such as Canada, Brazil, and Mexico. The Senior Analyst will also be responsible for managing ongoing regulatory reporting requirements and supporting the Ongoing Due Diligence (ODD) Program within the Americas Regulatory Compliance framework.The ideal candidate will possess a strong organizational aptitude, comprehensive regulatory knowledge, and the ability to collaborate effectively across functions including Compliance, Legal, Finance, HR, and other internal teams to ensure strict adherence to regulatory obligations.Key Responsibilities

Fastly is committed to enhancing connectivity and digital experiences. Our edge cloud platform empowers customers to rapidly develop, secure, and serve applications at the internet's edge, ensuring reliability and speed. We support a diverse range of clients, including industry leaders like GitHub, Yelp, Paramount, and JetBlue, enabling them to deliver exceptional digital services.Join us in our mission to create a more secure and trustworthy Internet.Posting Open Date: 4/9/2026Anticipated Posting Close Date*: 6/9/2026*Note: The job posting may close early due to high applicant volume.CSOC AnalystAs a SOC Analyst in North America at Fastly, you will be an essential part of our Customer Security Operations Centre. Your primary responsibility will be to safeguard our global enterprise clients by utilizing our innovative edge cloud platform and a suite of security tools to monitor network traffic, detect advanced threats, and implement real-time defenses against DDoS, bot, and web application attacks.This impactful position requires you to act as a strategic partner for our Managed Security Service (MSS) clients, ensuring they have expert visibility and rapid responses to threats on an internet-scale.

Merge stands at the forefront of providing innovative agentic tools and seamless customer integrations for cutting-edge LLMs, Fortune 500 firms, and B2B SaaS companies. Our platform features two pivotal products: Merge Unified, which allows businesses to incorporate numerous integrations effortlessly through a single API, and Merge Agent Handler, which grants AI agents secure access to a myriad of third-party tools. With an enterprise-grade platform, Merge expertly manages the entire integration lifecycle, encompassing authentication, security, monitoring, and maintenance. Countless organizations trust Merge to expedite product development, remove sales hurdles, minimize customer attrition, and conserve engineering resources, enabling them to concentrate on their primary offerings. As Merge aims to empower all B2B integrations, we are equally committed to facilitating data movement for some of the most security-conscious companies globally. Collaborating with such esteemed organizations necessitates adherence to industry-leading security standards and a relentless commitment to safeguarding our systems.In your role as the Director of Security, you will oversee our comprehensive security initiatives, which include infrastructure management, compliance adherence, and security automation. While specific experience in every aspect is not mandatory, enthusiasm for learning and tackling challenges is essential.Your Responsibilities:Develop and execute a strategic security roadmap.Lead our compliance automation efforts (e.g., SOC 2, ISO 27001, HIPAA). You will spearhead these initiatives with the aid of your team, utilizing Drata.Instill a culture of security awareness among all Merge engineers and employees.Oversee our Bug Bounty Program.Implement robust security controls across the organization, from infrastructure to continuous integration (CI).Establish both manual and automated security practices to address vulnerabilities.Support security reviews, threat modeling, disaster recovery exercises, and code assessments.

Join Sonsoft Inc., a leading technology solutions provider, as a Vulnerability Analyst focusing on Infrastructure Security. In this role, you will be responsible for identifying and mitigating security vulnerabilities in our infrastructure systems. You will work closely with cross-functional teams to ensure that our security measures are robust and effective. Your expertise will help shape our security strategy and safeguard our systems against potential threats.

Role Overview Crusoe is seeking a Senior Governance, Risk, and Compliance (GRC) Analyst in San Francisco, CA. This role focuses on keeping operations in line with regulatory requirements and internal policies. The analyst leads efforts to identify, assess, and reduce risks, working closely with teams across the company to strengthen the compliance framework. The position shapes risk management strategies and supports the integrity of the organization.

About Extend:At Extend, we are transforming the post-purchase landscape for retailers and their customers through innovative AI-driven solutions that elevate customer satisfaction and drive revenue growth. Our all-encompassing platform delivers automated customer service, streamlined returns and exchange management, comprehensive automated fulfillment, and robust product and shipping protection, all complemented by top-tier fraud detection capabilities. By merging cutting-edge technology with outstanding customer service, Extend enables businesses to cultivate trust and loyalty among consumers while optimizing costs and enhancing profitability.Currently, Extend collaborates with over 1,000 prominent merchant partners across diverse sectors, including fashion, cosmetics, furniture, jewelry, consumer electronics, auto parts, sports and fitness, and more. Backed by renowned technology investors, we are headquartered in the heart of San Francisco.Your Role:Act as a key member of the Security Operations team, monitoring and triaging alerts from platforms such as SentinelOne and Wiz. Conduct comprehensive investigations to detect, contain, and mitigate threats and incidents, ensuring a prompt and appropriate response.Proactively identify and evaluate vulnerabilities in both infrastructure and code, collaborating with development and cross-functional teams to resolve issues effectively.Engage in the complete detection lifecycle: model attacker behaviors (MITRE ATT&CK), write and test detections as code across security tools (SentinelOne, Wiz, Okta, AWS CloudTrail), continuously refining to minimize false positives and enhance Mean Time to Detection (MTTD). Support data quality, onboard telemetry, maintain response playbooks, and assist in threat validation across the organization.Assist teams in implementing secure configuration baselines and best practices according to CIS Benchmarks, NIST guidelines, vendor hardening guides, and relevant compliance standards for all company computing assets.Correlate endpoint and infrastructure telemetry to uncover emerging threats. Curate and operationalize intelligence (IOCs, TTPs) into detections and response playbooks, and maintain trusted intelligence feeds.Support Governance, Risk, and Compliance (GRC) initiatives by aligning controls with internal policies and frameworks (e.g., SOC 2, NIST CSF, NYC DFS 500), identifying gaps, aiding audits and evidence collection, tracking remediation, and updating policies and control documentation.Collaborate with engineering and business teams to advocate for security best practices, enhancing the overall security posture.