Devtech

Security Engineer

• We're building a platform in the software supply chain security space.
• Our mission is to catch malicious packages, compromised CI/CD pipelines, and supply chain attacks before they reach our customers' production systems, servers, or developer desktops.
• We're looking for a Senior Security Researcher to own the detection pipeline end-to-end, which include the systems that ingest packages, surface malicious findings, identify suspicious behavior, triage findings, and publish the research that both protects our customers and establishes our voice in the community.
• This is a hands-on role.
• You'll be designing detection pipelines, reviewing flagged packages, writing code, hunting threats, disclosing vulnerabilities, and publishing your work.
• Design the systems that scan open-source packages (npm, PyPI, RubyGems, Maven, crates.io, Go modules, GitHub Actions, container images, and more) for malicious behavior at scale.
• Tune signals, reduce false positives, and add new detection techniques as attackers evolve.
• Actively find novel malicious packages, typosquats, dependency confusion attempts, compromised maintainers, and CI/CD abuse patterns.
• Coordinate with maintainers, foundations, and registries, file CVEs, work with GitHub Security Advisories, the OSV schema, and platform security teams.
• Turn every significant finding into a blog post that's fast, clear, and technically rigorous that gets shared in security newsletters and lands on places like Hacker News.
• Build internal tooling that uses static analysis and AI models to triage findings, summarize package diffs, and cluster related campaigns.
• Your findings feed directly into what we build. Expect to sit in on roadmap discussions and push back when detection logic in the product doesn't match what you see in the wild.
• Stay up-to-date with the latest sandbox evasion and detection measures and create countermeasures and red-teaming exercises.
• Keeping a tight line between false positives and false negatives in our detection pipeline to ensure a well-curated and trusted set of threat intelligence.

Senior Security Researcher

Engineer

• Cryptography Analysis & Validation: Review, annotate, and validate cryptographic findings produced by static code analysis, automated tooling, and LLM/agentic systems.
• Remediation Engineering: Evaluate AI‑generated remediation outputs and experiment results, ensuring they meet cryptographic and systems‑security quality standards.
• Systems & Migration Support: Assist engineering teams with encryption migration tasks involving databases, filesystems, networks, or multi‑system upgrades.
• Customer-Facing & Cross‑Team Collaboration: Meet with customer engineering teams and technical leaders to assess cryptographic posture using Threat Point and related tools.
• Code & System Evaluation: Analyze complex, multi‑language codebases to understand cryptographic usage patterns, build processes, and test suites.
• Documentation & Continuous Improvement: Document findings, insights, assumptions, and edge cases with high clarity and precision.

Cryptography Engineer

Backend Engineer

• As a member of the Professional Services Unit, you will be a part of a creative team responsible for all aspects of the ongoing software development from the initial specification to developing, testing, and launching.
• Your focus will be to write C# to a high standard, in a timely and scalable way that improves the code in meaningful ways.
• Applying best practices, design patterns, and cutting-edge technologies of web development;
• Writing testable, well-designed, efficient code by using best software development practices;
• Executing full lifecycle software development with a focus on security, quality, and knowledge sharing;
• Participating in technical design and code reviews;
• Interpreting design requirements and concepts to produce new or enhanced application functionalities;
• Mentoring and guiding junior developers.

Senior .NET Developer

Manager

• Join our team as a Service Delivery Manager and take a leading role in managing our commercial engagements and ensuring our customers are happy with our services.
• Coordinate directly with clients’ stakeholders and our internal teams to make sure projects run smoothly through the entire service delivery lifecycle.
• Managing customer expectations to ensure a high level of satisfaction.
• Through understanding of customer’ complete requirements within the SOW and contract, as well as liabilities related to this project.
• Establish effective and proactive communication and partnership with all project stakeholders’ managers regarding project delivery, status, relevant challenges & risks.
• Tracking Project P&L, effort spent, and financial milestone dates on a daily basis, share weekly reports related to current engagements with the supervisor.
• Organizing project kickoff internally with the team, as well as externally towards the customer.
• Establishing project tasks, deadlines, and phases, based on the SOW/contract.
• Ensuring all necessary tools and environments are available for team members to achieve their goals successfully.
• Supervising work on project tasks to meet deadlines, covering the complete end-to-end cycle.
• Identifying and managing project risks, as well as identifying and applying solutions to achieve productivity and quality.
• Being a primary escalation point for the customer and ensuring timeline resolution of escalation.
• Organizing meetings with customers on a regular basis to provide a regular update and receive necessary feedback.
• Organizing post-mortems and creating reports related to completed engagements.
• Proactively communicating with other managers regarding project status and relevant challenges and risks.
• In performing its work duties, it respects the principles of security, availability, integrity, and confidentiality that are defined in the internal acts of the company.