Staff Security Researcher

At BeyondTrust, we empower our employees to make a meaningful impact through their work, enhancing the security landscape with our innovative cybersecurity SaaS solutions. Our culture fosters flexibility, trust, and continuous learning, ensuring that your achievements are recognized and your contributions play a vital role in our collective success. You'll be part of a team that challenges, supports, and motivates you to reach your full potential. Your Role As a Staff Security Researcher, you will be at the forefront of advancing our identity security platform. By merging state-of-the-art security research with strong engineering methodologies, you will transform groundbreaking research into operational systems that safeguard our clients against intricate identity-based threats. This position offers a unique chance to influence the future of identity security through innovative research, scalable engineering solutions, and thought leadership within the cybersecurity community. For insights into our recent projects, visit our page on X: https://x.com/btphantomlabs. This will help you assess our mutual fit.

Join Our Team as a Senior Security Researcher!At Geotab, we are a pioneering force in the Internet of Things (IoT) and connected transportation, recognized as a certified “Great Place to Work™.” Our diverse team is committed to helping businesses thrive while enhancing the safety and sustainability of our communities.We are at the forefront of security innovation, linking commercial vehicles to the internet and delivering web-based analytics that empower our customers to optimize fleet management. With billions of data points processed daily, Geotab utilizes data analytics and machine learning to boost productivity, reduce fuel consumption, enhance driver safety, and ensure compliance with regulatory standards.As our team expands, we seek passionate individuals who are innovative thinkers ready to make a significant impact. In our dynamic and fast-paced environment, Geotabbers embrace challenges and are eager to take on new responsibilities, even those not listed in the original job description. Join us for a rewarding career filled with opportunities for innovation, excellent benefits, and a vibrant, inclusive workplace culture. Discover what it means to be a Geotabber by visiting our blog and follow us on Instagram. Join our talent network for more insights into job opportunities!

Huawei Canada is excited to announce a permanent opening for an AI Security Researcher.About Our Team:At the forefront of technology, the AnShi Lab is dedicated to pioneering next-generation gateway software architecture with an emphasis on file security and innovative software development. Our team engages in mid- to long-term research aimed at generating high-value patents and directing the evolution of datacom gateways. Our mission is to set industry benchmarks through advanced, cloud-based intelligent software engineering, while nurturing local talent and building a dynamic team of technical experts to enhance both organizational performance and individual capabilities.Position Overview: Collaborate with malware analysts and security stakeholders to delineate problem scopes, establish labeling strategies, and devise evaluation methodologies.Conduct thorough industry and academic research, producing succinct surveys and technical reports.Design and implement advanced machine learning methods (LLM/GNN/ML) for malware and threat classification (e.g., family/behavior classification, malicious vs. benign).Develop scalable data pipelines for effective data ingestion, preprocessing, deduplication, and dataset management.Drive the end-to-end experimentation process: model training, calibration, benchmarking, error analysis, and iterative improvements.Contribute to patents and publications; optional travel for conferences may be required.The target annual compensation for this role ranges from $106,000 to $156,000, depending on educational background, experience, and demonstrated expertise.

Why Choose Mozilla?At Mozilla Corporation, a technology leader backed by a non-profit organization, we have dedicated over 25 years to enhancing the internet. Our flagship product, Firefox, is a web browser that prioritizes user privacy and security. With a community of over 225 million users globally, we are committed to shaping the future of technology while championing a user-centric internet. Our diverse initiatives span AI, social media, and security, all aligned with our mission to improve the online experience for individuals.As a subsidiary of the Mozilla Foundation, we operate without the pressures of shareholders, allowing us to focus solely on our mission. Together with thousands of volunteers and collaborators worldwide, we create and distribute open-source software that empowers users to navigate the internet on their own terms.Team Overview and Role:The Firefox User Research team is dedicated to exploring complex challenges through a human-centered lens. We leverage both quantitative and qualitative research methodologies to inform product strategies and enhance user experiences.In the role of Senior Staff Quantitative User Researcher, you will spearhead strategic quantitative research initiatives in collaboration with product managers, designers, engineers, marketers, and data scientists. Your expertise in quantitative analysis will help us understand user experiences and behaviors on a large scale, translating your findings into actionable insights that guide product development and strategic planning.Your Responsibilities:Lead strategic quantitative research efforts, from defining business objectives and designing surveys to analyzing data and presenting actionable recommendations that impact product decisions.Employ diverse research methodologies to integrate quantitative insights throughout the product development lifecycle, facilitating a user-centered approach.

About League Established in 2014, League Inc. stands at the forefront of healthcare consumer experience (CX) platforms, leveraging cutting-edge artificial intelligence (AI) to connect with over 63 million individuals globally. Our platform enables payers, providers, and health partners to deliver engaging healthcare solutions that enhance health outcomes. With over $285 million in venture funding, League powers the digital experiences of some of healthcare's most reputable brands, including Highmark Health, Manulife, Medibank, and Shoppers Drug Mart.Position SummaryAs a Senior Staff Security Engineer, you will play a pivotal role in shaping the long-term security architecture and strategy for our platform and engineering organization. Our security engineering teams are vital in integrating security measures throughout the development lifecycle and managing vulnerabilities. We believe in a 'security by design' approach, creating or acquiring tools that seamlessly integrate into our platform, empowering engineers to consistently produce high-quality, secure code.Your responsibilities will extend beyond incremental improvements as you tackle significant and complex security challenges. You will design foundational security components, frameworks, and reference architectures, establishing a 'paved road' that minimizes the risk of insecure code deployment. This role is crucial in embedding security and compliance controls into the foundational fabric of League's technology.About the RoleArchitectural Leadership: Define and advocate for the long-term technical security roadmap, architectural patterns, and standards across League's applications, infrastructure, and multi-cloud environments.Cross-Functional Strategy: Serve as the primary security technical advisor to platform, product, and executive leadership, aligning on multi-quarter security initiatives.Security Design Governance: Lead high-stakes, complex security design initiatives to ensure best practices are followed.

Join Huawei Canada as a Security Researcher specializing in Authentication and Authorization!About the Team:At the Digital Trust Lab, we are committed to safeguarding user data while prioritizing privacy. Our research team delves into critical areas such as user identity authentication, data integrity, privacy protection, extensive model privacy assessments, multi-modal data identification, differential privacy, and federated learning. We foster an environment of advanced research and encourage publishing in prestigious journals. Our findings significantly impact various Huawei product lines, including mobile devices, smart technologies, and communication systems.About the Role:Engage in research focused on authentication and authorization mechanisms for endpoint devices.Contribute to the design, proposal, and prototyping of innovative authentication and authorization technologies for Huawei's endpoint products.Generate insights into technological advancements in both academic and industry contexts.Collaborate closely with global research labs and product teams to enhance solutions and create tangible impacts on real-world products.

Join Our Innovative Team!Sanctuary, a global frontrunner in developing AI-driven control systems for humanoid robotics, is on the lookout for a Staff Research Scientist specializing in dexterous manipulation to enhance our groundbreaking projects.In this pivotal role, you will leverage state-of-the-art methodologies to design robust training and data collection systems. You will manage the assessment of these algorithms in simulated environments and deploy them on our advanced robots in real-world applications. This is a unique opportunity to contribute to pioneering advancements in haptic and proprioceptive sensing techniques, utilizing our in-house robot equipped with dexterous hands.

Join Huawei Canada as a Senior Researcher in our innovative Digital Trust Lab, where you will play a pivotal role in shaping the future of data security.Team Overview:Our Digital Trust Lab is at the forefront of ensuring secure data flows while prioritizing user privacy. Our researchers delve into critical domains such as user identity verification, data integrity, privacy preservation, comprehensive model privacy evaluation, multi-modal data recognition, differential privacy, and federated learning. We foster an environment of profound research, encouraging contributions to prestigious journals and applying findings across various Huawei products, including smartphones, smart devices, and advanced communication technologies.Position Responsibilities:Engage in advanced security research to identify and mitigate threats, vulnerabilities, and defense strategies pertinent to data infrastructure from endpoints to cloud environments.Contribute to the ideation, design, and prototyping of cutting-edge data foundation security techniques, encompassing secure computation, access control, and cryptographic methodologies.Generate insights into technology advancements across academia and industry.Collaborate closely with global research teams and product divisions to refine solutions and yield tangible impacts on real-world products.

About FullscriptFullscript is a pioneering health technology company dedicated to enhancing patient care through innovative solutions. Founded in 2011, we aimed to simplify access for practitioners to trusted products, thereby improving the quality of care.Our platform now supports over 125,000 practitioners, providing them with clinical insights, lab interpretations, patient analytics, educational resources, and access to premium supplements. With more than 10 million patients relying on Fullscript, we help ensure that care plans remain accessible and actionable.We create tools that enhance the quality and humanity of care, optimizing time and decision-making for practitioners. By centralizing essential resources, we empower healthcare providers to focus on their core mission: helping people get better.Your Invitation to Join UsWe invite you to bring your innovative ideas, determination, and compassion for people to our team.Join us in transforming the future of healthcare.Fullscript is on the lookout for a highly skilled Senior Staff Security Engineer to take a pivotal role in our security team. In this senior technical position, you will define the technical strategy for product and AI security across our organization, while mentoring team members and making a significant impact through your extensive technical knowledge and collaborative efforts.

Join Mila, a leading research institute in artificial intelligence, as an Applied Research Scientist specializing in AI Security. In this role, you will contribute to cutting-edge research and develop innovative solutions to enhance the security of artificial intelligence systems. Collaborate with a talented team of scientists and engineers to tackle complex challenges and drive advancements in AI technology.

Empower Every Identity, from AI to HumanityAt Okta, we believe identity is the gateway to unlocking the full potential of AI. Our mission is to secure AI by establishing a trusted and neutral infrastructure that enables organizations to safely navigate this transformative era. We seek passionate builders and proactive problem solvers who thrive in a fast-paced environment and are committed to excellence.This is your chance to engage in career-defining work. If you share our mission, we want to hear from you!The Okta Security team is dedicated to reinforcing Okta’s role as the premier Identity-as-a-Service provider by identifying and mitigating risks to our employees, products, and most importantly, our customers.As part of the Security Trust & Culture team, we focus on bolstering customer confidence in Okta’s identity services. We collaborate closely with Okta’s go-to-market teams, serving as a key resource. The Customer Assurance team acts as the central repository for security information, offering extensive guidance and resources to enable our customers to effectively manage their risks.As a Staff Security Analyst in Customer Assurance, you will prioritize and respond efficiently to inquiries regarding our security program and related due diligence requests. You will serve as an essential link between our customers and internal engineering teams, ensuring clear communication regarding Okta’s security posture. Your responsibilities will include training local sales teams, managing complex escalations, and driving technological innovations to globally enhance Customer Assurance efforts.This role demands a unique skill set: the ability to analyze technical issues, communicate security-related topics effectively to both internal and external stakeholders, collaborate with internal business units for timely project execution, and present information to upper management as necessary. The ideal candidate will possess experience in SaaS cloud security risk assessment and a robust understanding of identity management core principles. If you aspire to make a significant impact on the security program of a leading global cloud provider, we invite you to join us.

Discover OktaAt Okta, we are revolutionizing identity management. Our mission is to enable individuals to securely utilize any technology, anytime, on any device or application. Through our versatile Okta Platform and Auth0 Platform, we deliver secure access, authentication, and automation, placing identity at the forefront of business security and growth.We value diverse perspectives and experiences at Okta. We're not just seeking candidates who meet every requirement; instead, we are looking for lifelong learners who can enrich our team with their unique insights.Join us in creating a world where identity is in your hands.The TeamOur Workforce Identity Cloud Security Engineering group is at the cutting edge of innovation, turning visionary ideas into top-notch security software solutions that support large-scale, mission-critical applications. Our security engineering team possesses a unique skill set that merges security expertise with the ability to design, implement, and deploy security features seamlessly, enhancing product functionality without hindrance. We are committed to elevating customer safety and privacy through robust security services integrated with the Okta core product.The RoleWe are in search of a seasoned and enthusiastic Staff Software Security Engineer to join our Workforce Identity Cloud Security Engineering group. This role focuses on architecting and developing security solutions that strengthen our frameworks and infrastructure. You will be encouraged to implement defense-in-depth strategies, adhere to industry security standards, and uphold the principle of least privilege, thereby enhancing our security posture.This high-impact position is set within a security-focused, dynamic organization that is on the brink of significant growth and achievement. You will serve as a key liaison between the Security and Engineering teams, forging technical synergies and shaping the security roadmap. Your efforts will concentrate on enhancing security and privacy aspects across our services, executing on a weekly release schedule. You will have the autonomy to propose exciting new projects for our roadmap and engage in initiatives utilizing cutting-edge technologies. Join us and contribute to transforming the cloud computing landscape.What You Will DoCollaborate with engineering and security teams to define innovative security roadmap requirements.Advocate security best practices and promote secure coding methodologies.

About FaireFaire is a dynamic online wholesale marketplace driven by the belief that the future lies in local commerce. Independent retailers worldwide are achieving greater revenue than giants like Walmart and Amazon combined, yet remain relatively small in stature. At Faire, we harness the power of technology, data, and machine learning to connect this vibrant community of entrepreneurs around the globe. Imagine your favorite local boutique—we empower them to discover the finest products globally to stock their shelves. With the right tools and insights, we aim to level the playing field, enabling small businesses everywhere to compete against large box stores and e-commerce behemoths.By championing the growth of independent enterprises, Faire fosters positive economic impacts within local communities on a global scale. We are on the lookout for intelligent, resourceful, and passionate individuals to join us as we drive the shop-local movement. If you believe in the power of community, we invite you to be a part of ours.Role Description:Our Engineering organization is the backbone of our marketplace, responsible for the software that enables it to function seamlessly. The Product Security team empowers product engineering teams to create and deploy secure software solutions. We prioritize best engineering practices, striving to deliver software that is secure, thoroughly tested, easy to maintain, and capable of scaling to millions of users. We develop scalable, reusable frameworks, consult with product teams, leverage data-driven insights, and continually iterate on our practices.As a Senior Staff Software Engineer in Product Security, you will take on the role of technical lead for the Product Security domain. You will establish the long-term technical vision for integrating security within Faire’s application framework. Collaborating closely with Platform and Product Engineering teams, you will identify and mitigate security vulnerabilities, spearhead significant security initiatives, and mentor engineers across the organization to enhance secure engineering practices.Additionally, you will lead cross-functional programs to embed security deeply within our architecture, pipelines, and developer experience, effectively minimizing risk while maintaining development velocity.In this role, you will:Define the long-term technical strategy for application security at Faire, establishing scalable and developer-friendly frameworks and principles that facilitate secure development across all product areas.

Join Homebase as a Staff Security Engineer specializing in Application Security in a hybrid work environment. In this pivotal role, you will be responsible for enhancing our security posture while ensuring that our applications remain safe and secure. You will collaborate with cross-functional teams to identify vulnerabilities, implement security controls, and promote best practices in application development.We seek a proactive individual who is passionate about cybersecurity and eager to contribute to building robust security solutions. You will play a key role in shaping the security framework of our applications.

Jane is hiring a Senior Staff UX Researcher based in Canada. This is the first dedicated UX Researcher role at Jane, making it a foundational position within the Product Design team. Led by Anthony, the team focuses on supporting practitioners, clinic owners, administrators, and patients who depend on Jane’s platform. User research is central to shaping thoughtful, human-centered experiences and guiding product decisions. Role overview Jane’s teams already conduct research, but methods and approaches vary. The Senior Staff UX Researcher will set the standard for how research is done and how findings influence decisions. This role involves leading high-quality studies, helping others across the company build confidence in research, and ensuring insights are applied in daily work. There is a strong focus on scaling research by enabling teams, improving systems, and exploring ways automation and AI can make research more effective. What you will do Build and maintain trusted relationships across Jane, keeping teams connected to real customer needs and fostering empathy and curiosity in decision-making. Deliver clear, actionable insights that guide product direction and highlight what drives user satisfaction. Improve the quality and consistency of research by developing existing methods and supporting colleagues as they conduct their own studies. Create, refine, and scale systems, tools, and practices to make research more accessible and user-friendly throughout the organization. Impact of this role This position offers the chance to define Jane’s research practice from the ground up. The Senior Staff UX Researcher will set standards, empower teams, and ensure that insights translate into meaningful product outcomes. Those interested in building strong research foundations and helping teams turn insights into action will find this role offers the chance to make a lasting impact.

About Pantheon Pantheon WebOps Platform empowers the open web, hosting over 300,000 sites in the cloud for esteemed clients like Google, Princeton, Salesloft, and Doctors Without Borders. Every day, countless developers and marketers design, iterate, and scale WordPress and Drupal websites, reaching billions of users worldwide. Pantheon’s multitenant, container-based platform allows organizations to manage all their websites seamlessly from a single dashboard. Renowned companies, including Clorox and the United Nations, achieve remarkable results through accelerated development and real-time publishing utilizing Pantheon’s collaborative workflows. The Role As part of Pantheon’s Security Engineering team, you will play a crucial role in protecting, auditing, and testing the security of our comprehensive platform. We are dedicated to implementing a robust and multi-faceted approach to application security, emphasizing Security by Design within agile software development and cloud-native environments. We are on the lookout for a motivated and experienced application security engineer to join our expanding team. The Staff Security Engineer will hold a pivotal strategic and technical position within the Application Security team. Our mission is to ensure the security, audit, and testing of the entire cloud hosting platform across several core areas: Security by Design: Integrate “Security by Design” principles into agile software development and cloud-native frameworks. Support and Mentorship: Serve as Subject Matter Experts (SMEs), providing mentorship and guidance to enhance all security engineering initiatives organization-wide. Standard Setting: Establish, organize, and implement application security policies, processes, standards, and guidelines. Application Security Performance: Assist engineering teams in designing and constructing high-performing, secure applications by addressing security issues through risk-based methodologies. What You Will Do Policy Definition: Develop, document, and advocate for processes and practices that ensure a secure Software Development Life Cycle (SDLC). Security Culture: Be a key player in fostering a robust security culture within platform engineering teams. Proactive Security: Lead Threat Modeling initiatives as a fundamental aspect of the Secure by Design strategy. Secure Design Reviews: Conduct thorough Secure Code and Architecture Design assessments.

Join Thumbtack in Transforming Home Care!At Thumbtack, we empower millions of individuals to manage and enhance their homes with confidence. Our app is a comprehensive solution for home maintenance, offering everything from personalized recommendations to cutting-edge AI tools, all designed to create a seamless hiring experience. Every day, homeowners across the U.S. rely on Thumbtack to undertake urgent repairs, seasonal upkeep, and significant renovations. If you are inspired by the prospect of making a meaningful impact, we invite you to be part of our journey. Together, we can shape the future of home care.About the Cybersecurity TeamThe Security Engineering team at Thumbtack is dedicated to driving innovation at scale by integrating security into our core processes. We believe that robust security can enhance operational speed rather than hinder it. By embedding security within our systems, platforms, and developer workflows from the outset, we create a secure environment that fosters rapid innovation.We collaborate closely with Product, Engineering, Platform, and Data teams to design systems, inform architectural choices, and continuously improve Thumbtack’s security posture as we grow. Through effective collaboration, automation, and strategic decision-making, we ensure that Thumbtack can deliver quickly, innovate boldly, and maintain the trust of our customers.The Challenge AheadAs Thumbtack expands its offerings and integrates AI-driven features, our security practices must evolve to keep pace with innovation. The increasing complexity of our services, deployment strategies, and data flows requires a shift from traditional manual reviews to proactive security measures embedded within our systems. Our objective is to create secure defaults and reusable components that engineering teams can implement with ease, allowing them to operate swiftly while significantly mitigating risk.Your Role and ResponsibilitiesLead the long-term technical vision for application security across Thumbtack, while developing prioritized roadmaps to address systemic security vulnerabilities throughout our application stack.Manage large-scale, cross-functional security projects from conception through to execution.Create secure-by-default architectures, standards, and guided paths that facilitate engineering efforts. Develop and implement shared security tools, libraries, and services that empower our engineering teams to deliver efficiently and securely.

Join Mozilla: Shape the Future of the InternetAt Mozilla Corporation, a non-profit-backed technology leader for over 25 years, we are dedicated to improving the internet experience for users worldwide. Home to innovative products like Firefox, our mission revolves around creating a web that prioritizes user privacy and security. With over 225 million monthly users, we are at the forefront of technology advancement in areas such as artificial intelligence, social media, and security, committed to building an internet that serves people, not corporations.As a wholly owned subsidiary of the Mozilla Foundation, we focus on our mission without the influence of shareholders. Together with a global community of contributors and collaborators, we design, build, and distribute open-source software, empowering individuals to navigate the internet on their terms.About the Role:We are seeking a dedicated Incident Responder to join our dynamic team, responsible for monitoring and mitigating security threats across Mozilla’s products and services. This role requires extensive practical security experience and an in-depth understanding of modern attack detection and response techniques. You will be a trusted resource for Mozillians company-wide, providing swift and effective incident response while collaborating with diverse stakeholders. As a vital member of our team, you will help safeguard the integrity of Mozilla’s offerings and ensure the safety of our users in our pursuit of a more secure internet.Key Responsibilities:Monitor and respond to security incidents globally.Serve as incident commander, guiding incidents through the entire response lifecycle.Develop and maintain a suite of security alerts, automated responses, playbooks, and escalation workflows, supporting our 24/7 incident response capabilities.

Our MissionAt Safety, we are dedicated to fortifying the software supply chain for global data and development teams. Our goal is to provide seamless security for packages used across various environments—from local developer systems to production setups, and from conventional IDEs to AI-assisted coding tools—without disrupting existing workflows. We strive to ensure that open-source packaging is secure by default, offering comprehensive visibility, governance, and protection throughout Python, Java, and JavaScript ecosystems.We are developing the infrastructure that will safeguard businesses and influence the secure adoption of AI-driven development in enterprises. If you're passionate about protecting critical infrastructure on a large scale and want your contributions to directly shield millions of installations, we invite you to become a part of our team.The RoleAs a Cybersecurity Researcher, you will be instrumental in enhancing Safety's security solutions. Your research will play a crucial role in protecting thousands of developers globally and securing millions of package installations across Python, Java, and JavaScript ecosystems.You will actively hunt for malicious packages in real-time, augment vulnerability data that fuels our renowned database, and validate reachability analyses that inform customers about the vulnerabilities that truly matter in their code. Your research will serve as the intelligence layer behind Safety's Firewall, automatically blocking attacks before they can affect production environments.This position is not about isolated research; you will collaborate at the intersection of security analysis and product development, witnessing your findings delivered to customers in a matter of days. You will craft detection rules that operate against over 70,000 package releases daily, minimize false positives to bolster customer trust, and contribute original research that positions Safety as a thought leader in supply chain security.

2k is seeking a Senior Researcher, Research & Insights, to join the team in Montréal, Quebec. This position plays a central role in shaping business decisions and supporting innovation throughout the company. What you will do Lead research projects that guide company strategy Analyze market trends and shifts within the gaming industry Study consumer behavior to identify patterns and opportunities Monitor the competitive landscape to help strengthen 2k’s market position Role focus This role centers on gathering and interpreting insights that drive key initiatives at 2k. The Senior Researcher works closely with teams across the company to provide findings that support both immediate decisions and long-term planning.