Vulnerability Assessment Specialist - Infra Security

About AnthropicAt Anthropic, we are dedicated to developing trustworthy, interpretable, and controllable AI systems. Our vision is to ensure that AI remains safe and beneficial for our users and society. Our rapidly expanding team consists of passionate researchers, engineers, policy specialists, and business leaders collaborating to create forward-thinking AI solutions.About the RoleIn the position of Technical Program Manager for Security, focusing on Coordinated Vulnerability Disclosure (CVD), you will establish and steer the initiatives that dictate how Anthropic responsibly reveals software vulnerabilities identified by our AI-driven tools, such as Claude, Patchy, and Claude Code. These advanced tools have already uncovered genuine zero-day vulnerabilities in critical software including Firefox and the Linux kernel. The challenge now extends beyond merely identifying vulnerabilities; it encompasses managing the fallout of these discoveries at an unprecedented scale and speed.Conventional coordinated disclosure frameworks were designed for a time when a researcher might uncover a significant vulnerability every few weeks. The AI-powered discovery landscape has dramatically transformed this paradigm; for instance, Claude can identify hundreds of issues within a single codebase in just one day. Your role is crucial in guaranteeing that every finding is communicated to the appropriate maintainer, at the right speed, with the necessary context, while ensuring Anthropic adheres to its Responsible Scaling Policy (RSP) commitments.You will oversee the complete CVD lifecycle: from internal assessment and human validation of AI-generated findings to tiered disclosure timelines and external coordination with vendors, open-source maintainers, and relevant organizations. This role necessitates extensive collaboration across Security Engineering, Legal, Communications, Product, and Frontier Red Team to ensure Anthropic serves as a responsible steward of the vulnerabilities its tools reveal.Responsibilities:Lead the CVD program strategy and implementation: Define and steer the roadmap for coordinated vulnerability disclosure, from AI-generated findings to maintainer notifications, remediation tracking, and public disclosure. Ensure alignment with Anthropic’s security posture and RSP compliance requirements.Oversee internal triage and quality assurance: Establish and manage a human review process to validate all AI-generated findings before external disclosure. Set minimum confidence thresholds and deduplicate against known CVEs.

Figma is seeking a Technical Program Manager to focus on security across its products and data. This position plays a key role in organizing and driving security projects, ensuring that teams work together to address risks and maintain high standards. Key responsibilities Coordinate security initiatives with multiple teams to help safeguard Figma’s products and data. Apply technical expertise to guide projects that improve security protocols. Collaborate with engineering, product, and other groups to address and solve security challenges. Location This role is based in San Francisco, CA, New York, NY, or can be located elsewhere within the United States.

Join Sonsoft Inc. as an Infrastructure Security Vulnerability Analyst, where you'll play a crucial role in identifying and mitigating security risks within our infrastructure. As part of our dynamic security team, you will work with cutting-edge technologies to enhance our security posture and ensure the integrity of our systems.

Join Cloudflare as a Vulnerability Management Engineer, where you will play a critical role in identifying, assessing, and mitigating vulnerabilities across our systems. You will work closely with security teams to implement robust vulnerability management processes, ensuring our infrastructure remains secure. This is an exciting opportunity to enhance your skills in a dynamic and fast-paced environment.

Join Sonsoft Inc., a leading technology solutions provider, as a Vulnerability Analyst focusing on Infrastructure Security. In this role, you will be responsible for identifying and mitigating security vulnerabilities in our infrastructure systems. You will work closely with cross-functional teams to ensure that our security measures are robust and effective. Your expertise will help shape our security strategy and safeguard our systems against potential threats.

About StravaStrava is the premier application for active individuals. With a vibrant community of over 180 million athletes across more than 185 countries, Strava goes beyond mere workout tracking; it fosters collective progress, helping users form new habits and achieve personal bests. Regardless of your chosen sport or tracking method, Strava is your complete companion. Connect with your peers, surpass your goals, and ensure every effort counts. Embark on your journey with Strava today.Our mission is straightforward: to inspire individuals to embrace their best active lives. We harness the transformative power of movement to forge connections and propel people forward.Role OverviewWe are on the lookout for a Senior Technical Program Manager to spearhead intricate, high-priority security initiatives that intersect with Engineering, Infrastructure Product, Legal, Operations, and other cross-functional teams. This position will deliver dedicated program management support for security endeavors, ensuring transparent communication, efficient processes, and structured execution throughout the organization.The successful candidate will possess a robust background in managing complex technical programs, a thorough grasp of security principles, and the capacity to collaborate effectively with engineering and product teams to deliver secure, scalable solutions. You will excel in a dynamic, sophisticated atmosphere, overseeing programs from conception to delivery, mitigating risks, and ensuring alignment among various stakeholders.We embrace a flexible hybrid work model, which typically requires you to spend more than half your time on-site at our SF office — three days each week.Your ResponsibilitiesLead the end-to-end execution of multi-quarter security initiatives—including IAM upgrades, vulnerability management enhancements, compliance readiness projects, and security architecture modifications—from proposal to launch, operational rollout, and post-launch refinement.Facilitate collaboration among Engineering, IT, Product, Legal, and GRC, acting as the central point of alignment across time zones to eliminate ambiguity, streamline decision-making, and sustain progress.Manage program communications, creating clear status updates, designing and pulling key metrics, executive briefings, risk logs, and decision records to provide stakeholders at all levels with timely, actionable insights.Proactively identify and mitigate risks by executing structured assessments of dependencies, resources, and requirements.

Founded in 2007, Airbnb has transformed the way people travel, connecting over 5 million hosts with more than 2 billion guests worldwide. Our platform offers unique stays and experiences, allowing travelers to immerse themselves in local cultures and communities.The Community You Will Join:At Airbnb, we prioritize trust. The Information Security team is crucial in nurturing and fortifying the confidence our users place in our platform, which enables millions to discover the world and feel at home anywhere. This team operates as a vital cross-functional entity within Airbnb, ensuring the security of our expansive ecosystem.The Impact You'll Make:As the Senior Program Manager for Information Security, you will spearhead operational initiatives, strategic planning, and efficiency enhancements within our InfoSec organization. You will collaborate with senior leadership across InfoSec and the broader company to scale security operations in alignment with our growth trajectory.A Day in Your Role:Strategic Planning: Lead biannual planning cycles, focusing on goal setting, cross-departmental collaboration, resource allocation, and budget oversight. Innovate frameworks to prioritize and distribute workloads across teams.OKR Performance Measurement: Establish and monitor Objective Key Results (OKRs) to assess the impact of strategic projects and operational processes.Project Execution: Oversee the implementation of significant organizational projects, ensuring timely delivery and fulfillment of objectives.Operational Optimization: Refine workflows to enhance efficiency, productivity, and scalability within InfoSec. Implement automation, process enhancements, and self-service solutions while leading change management efforts.Communication: Craft comprehensive InfoSec communications for the entire company, including reports and updates tailored for engineering teams.Budget Management: Manage budgetary requirements and ensure alignment with organizational goals.

Join Sonsoft Inc. as a Vulnerability Assessment Specialist and play a crucial role in safeguarding our organization's digital assets. You will conduct thorough assessments of our systems and applications to identify vulnerabilities and recommend remediation strategies. This position requires a keen eye for detail and a solid understanding of cybersecurity best practices.

Role overview Decagon seeks a Technical Program Manager based in San Francisco to coordinate work across multiple teams and deliver new technical solutions. This position guides projects from initial planning through completion, ensuring schedules stay on track and technical milestones are achieved. What you will do Lead cross-functional teams to meet project goals Track project progress and adjust plans when necessary Share updates and collect feedback from stakeholders Clarify and verify technical requirements throughout each project Help advance Decagon’s strategic programs through strong program management

Cogent Security seeks a Technical Account Manager based in San Francisco, CA. The focus of this position is to develop and maintain strong relationships with clients, ensuring their technical needs are met with care and attention. Key responsibilities Serve as the primary point of contact for assigned clients, addressing technical questions and concerns as they arise. Guide new customers through the onboarding process, helping them become familiar with Cogent Security’s solutions. Provide ongoing support, troubleshooting, and tailored advice to meet each client’s unique requirements. Work to maintain customer satisfaction and foster long-term partnerships.

Astranis Space Technologies Corp. is at the forefront of satellite innovation, crafting advanced satellites designed for high orbits that extend humanity's reach into the cosmos. Our satellites deliver dedicated and secure communications networks to a diverse clientele, including large enterprises, sovereign governments, and the U.S. military. With five satellites successfully in orbit and numerous launches on the horizon, we are addressing a backlog of over $1 billion in commercial contracts.As a trusted partner in satellite communications, we cater to clients with rigorous demands for reliability, data security, network visibility, and tailored solutions. Backed by over $750 million in funding from leading investors such as Andreessen Horowitz, Blackrock, and Fidelity, our team of 450 engineers and entrepreneurs operates from a 153,000 sq. ft. state-of-the-art headquarters in Northern California.Technical Program Manager, USG ProgramsAs a Technical Program Manager focused on U.S. Government programs, you will be pivotal in steering the execution of Astranis's satellite initiatives from initial concept to final delivery. Reporting directly to the Director of USG Programs, you will be responsible for program outcomes related to schedule, budget, risk management, and customer engagement. This role demands a combination of programmatic leadership and technical expertise, engaging in hands-on problem solving while maintaining strategic oversight. You will conduct trade studies to enhance mission system architectures, facilitate coordination across spacecraft and ground segments, and ensure all technical, contractual, and mission requirements are fulfilled. Additionally, you will help refine and scale our USG program execution frameworks and cross-functional processes as our portfolio grows.Key ResponsibilitiesOversee government-related program execution from inception to completion, encompassing small internal R&D projects to comprehensive multi-spacecraft missions.Establish, manage, and communicate program schedules, budgets, and resource allocations to guarantee successful project delivery.Lead the risk management process, including documentation, tracking of mitigation strategies, and approval of risk closures.Ensure that programs meet all technical and programmatic specifications by monitoring and reporting key performance indicators.Conduct regular internal and external program reviews, emphasizing schedule trends, risks, and progress against significant milestones.Act as the primary liaison for government programs, leading design reviews, reporting, and milestone readiness assessments.Collaborate with engineering, operations, and mission assurance teams to ensure alignment on requirements, interfaces, and design development.

About SemgrepSemgrep is at the forefront of code security for developers, enabling innovative work without compromising safety. Our platform allows teams to identify, report, and rectify genuine issues before deployment, supported by an intelligent security system that evolves alongside development. Semgrep enhances code security as it is authored, providing essential guardrails that allow developers to operate swiftly while maintaining security. Built for creators and endorsed by security professionals, our solution integrates seamlessly into developers' workflows, delivering solutions that preserve productivity while granting security teams enhanced oversight, control, and assurance. As Semgrep evolves, our AI adapts to your context, minimizing false positives and prioritizing actionable vulnerabilities, a claim validated by 95% of security reviewers across over 6 million findings. We are committed to making zero false positives a reality, enabling AppSec teams to manage 80% fewer false alarms across Code and Supply Chain, significantly reducing backlog.Founded in San Francisco and supported by investors such as Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep has been acknowledged by Gartner in Application Security Testing and is trusted by top-tier organizations like Snowflake, Dropbox, and Figma. Discover more at semgrep.dev.About the RoleAs the Security Research Manager for the Coverage Team, you will spearhead a group of Security Researchers dedicated to enhancing detection rules for Secrets, Code, and Supply Chain across all Semgrep products. Your responsibilities will include:Crafting high-quality detection rulesInnovating research and automation techniques to expedite and enhance rule creationEvaluating and elevating the overall quality and scope of detectionsIn this managerial role, you will report directly to the Head of Security Research. You will define the strategic roadmap, collaborate with Product Management to concentrate on the most impactful detection areas, and drive ongoing enhancements in both detection accuracy and coverage breadth. Achieving success in this position means leading a team that produces exceptional detections, scales rule generation through automation and AI, and expands the limits of contemporary vulnerability research.Your Responsibilities:Recruit, mentor, and nurture your team, fostering a productive, engaging, diverse, and inclusive workplace that aligns with Semgrep's core valuesCollaborate closely with product management, sales, and development teams across all product linesAnalyze, measure, and enhance the velocity and quality of Semgrep detections

Sigma Computing builds cloud-scale analytics and business intelligence tools that keep the familiar feel of a spreadsheet. The platform helps business professionals, non-technical users, and data teams explore, analyze, visualize, and collaborate on data throughout their organizations. About the Temp-to-Hire Program This program is designed for early-career Technical Program Managers interested in the operational side of engineering, with a focus on Infrastructure and Data Services. The role combines technical knowledge with project management skills. Success in this position relies on a proactive approach and the ability to work with cross-functional teams to improve execution and meet goals. A strong interest in building quality products and supporting customer satisfaction is important. Note: This is a temp-to-hire position. The initial engagement lasts three months as a temporary employee. Full-time conversion is possible, depending on performance during that period.

As Mercury continues to expand, our revenue platforms increasingly operate at the nexus of product launches, data systems, go-to-market strategies, and external partnerships. In a landscape where every task holds significance, the greatest threat is not a lack of effort, but rather a stagnation in momentum. We are seeking a Senior Technical Program Manager for our Revenue Technology team, who will ensure that intricate, multi-team projects not only progress but do so efficiently: in the right order, with clear dependencies highlighted, and tangible advancements visible on a weekly basis. This role transcends mere status updates; we need a hands-on technical TPM adept enough to directly resolve issues — whether that involves Linear, Salesforce, data workflows, or collaboration across Product, Engineering, Data, and Revenue teams. In this position, you will report to the Head of Platforms & Infrastructure and play a pivotal role in maintaining execution focus, allowing specialized technical roles to function at their highest capacity. *Mercury is a fintech company and not an FDIC-insured bank. Banking services are provided through Choice Financial Group and Column N.A., Members FDIC.

Anthropic is seeking a Technical Program Manager for Research Initiatives to coordinate and deliver advanced projects in artificial intelligence. This position is based in San Francisco, CA or New York City, NY. Role overview This role centers on managing research projects that push the boundaries of AI. The Technical Program Manager will oversee cross-functional teams, keeping projects on track and ensuring research goals are met. What you will do Lead and organize research initiatives focused on artificial intelligence Coordinate teams from different disciplines to achieve project objectives Track project timelines and deliverables, ensuring milestones are reached Requirements Experience managing technical or research-focused projects Ability to work with cross-functional teams Strong organizational and communication skills

Astranis Space Technologies Corp. is seeking a dedicated Vulnerability Management Analyst to join our growing team in San Francisco. In this role, you will be instrumental in identifying and mitigating vulnerabilities across our systems and applications. You will collaborate with various teams to enhance our security posture and ensure the integrity of our operations.Key responsibilities include conducting vulnerability assessments, managing remediation efforts, and providing insights on security best practices. Your analytical mindset and attention to detail will contribute significantly to our mission of delivering innovative satellite technology to improve global connectivity.

Join DoorDash as a Manager of Technical Program Management where you will play a pivotal role in shaping the foundational elements of our technology initiatives. Your leadership will be crucial in guiding cross-functional teams, ensuring projects align with our strategic goals, and driving innovation within our technical landscape.In this role, you will oversee the planning, execution, and delivery of technical projects, while fostering collaboration across various departments. Your expertise will help us navigate challenges and enhance our operational efficiency, ultimately contributing to our mission of connecting customers with the best local restaurants.

Mapbox is looking for a Technical Program Manager, Enterprise to manage high-impact programs within the enterprise group. This role centers on keeping projects on track and aligning teams across the organization. Key Responsibilities Oversee enterprise programs from initial planning to final delivery, collaborating with engineering, product, and design teams. Set clear program goals and monitor progress toward milestones. Facilitate communication and manage expectations among stakeholders from different teams. Spot and address issues that could slow down or hinder project success. Requirements Strong interest in technology and comfort working in complex organizations. Experience coordinating across teams and managing large-scale programs or initiatives.

Role overview Pano AI seeks a Senior Technical Program Manager - Operations to join the team in San Francisco, California. This position plays a key role in shaping operational strategies and guiding cross-functional teams to deliver impactful projects. The focus is on refining processes and driving greater efficiency across the organization. What you will do Coordinate and lead teams from different departments to achieve project objectives Manage operational projects from initial planning stages through to completion Spot opportunities to streamline workflows and enhance efficiency Use technical program management skills to address operational challenges Requirements Background in managing technical programs within operational settings Strong collaboration skills with diverse stakeholders Demonstrated success in delivering projects and improving processes