Security Lead

Carvana

Pay Range: $50-62k annually  Schedule: Monday through Friday, 3:00 PM to 12:00 AM About Carvana If you like disrupting the norm and are looking to join a company revolutionizing an industry then you will LOVE what Carvana has done for the car buying experience. Buying a car the old fashioned way sucks and we are working hard to make it NOT suck. I mean, have you seen our vending machine?! We are looking for people who are excited to thrive in an environment of impactful change. Team spirit is evident at Carvana and everyday we let our passions and creativity foster innovation. We take big swings, set ambitious goals, and challenge each other to make data- and process-driven decisions in everything we do. Here are a few of our stories! We’ve been changing the game since 2013, and we’re not taking our foot off the gas now. Want more of the story? Check out our background here.  About the team and position As a Functional Lead, you will be an integral part of the Safe and Secure Team executing programs and processes at our Headquarter facilities to ensure our team members and assets are protected. At our front desks, our Safe & Secure Associates are the face of Carvana to our employees, vendors, and visitors. As a Functional Lead, you’ll be the direct supervisor of these Associates which includes supervising their day-to-day activities as a team, providing training and coaching on proper protocols/procedures, and continuously upholding a high level of performance. You will be a leader in Safe & Secure and act as a representative of Carvana to both internal and external partners in routine meetings and day-to-day activities.  The ideal candidate for this role is passionate about developing and maintaining effective security and safety policies. This role requires the ability to articulate and demonstrate desired behavior, provide timely, effective, and actionable feedback, and to motivate others to balance urgency and quality.   What you’ll be doing * Oversee day-to-day activities of assigned team; identify team’s strengths and weaknesses; determine areas of opportunity and the appropriate steps to improve. * Identify and evaluate trends, evaluate outcomes, and develop plans to accomplish team tasks and objectives.   * Engage assigned team, provide appropriate coaching, development and performance management; offer feedback and demonstrate desired skills.   * Create a work and team environment that inspires positive communication, team cohesion, and adherence to Carvana’s Values. * Proactively communicate information to team members, providing clear understanding of expectations, performance measures, and goals. * Prevent and resolve conflict among team members. * Monitor and ensure adherence to systems, policies, procedures, and performance standards. * Maintain staff by recruiting, selecting, orienting, and training employees. * Positively reinforce and monitor progress toward team goals. * Timely and effectively communicate information to other relevant teams and stakeholders. * Support leadership and participate in implementation and execution of team/department initiatives, and strategies. * Escalate significant high risk issues to senior-level management as necessary and provide recommendations to ensure our teams are safe and our business operations are maintained. * Ensure the safety of our associates by monitoring and developing solutions that meet all local, state and federal requirements. * Implement, execute, and directly lead our Incident Management program at our HQ locations. * Plan and Lead the Incident Management Program for the site, focusing on sustainable awareness and effective preparedness. Key facilitator in an emergency situation for the site.  * Directly lead the processes related to our Safe & Secure Technology that supports our HQ locations Ensure equipment is properly functioning, that issues are addressed, and that our processes relating to badge access, server room controls, monitoring alerts, and overall health of the program are running like a well oiled machine.  * Ensure the team properly records all incidents, ensures system information is accurate and actionable. Complete after action reviews to determine root causes of reported safety incidents and make improvement recommendations to the Manager, Corporate Security. * Implement and monitor visitor and vendor check-in processes, providing regular team member training and coaching.  * Implement and conduct risk assessments of our HQ facilities. * Work with the Safe and Secure Operations Center leadership to provide support when business needs require. * Assign work and hold team members accountable to expectations and deliverables. * Ensure the team always has appropriate staffing that meet relevant KPIs and goals. * Be available and onsite during business hours that could occasionally exceed 40 hours in a week.  * Occasionally be available outside of traditional business hours, as needed.  * Perform other duties as assigned. What you should know/have * High School Diploma or equivalent. * 3+ years experience in physical security operations and/or loss prevention. * 1+ years experience directly supervising/managing a team. * Demonstrated ability to coach team members to deliver a consistent, top-notch customer service experience.  * Experience working closely and communicating effectively with a diverse set of stakeholders in an ever-changing, rapid growth environment with tight deadlines.  * Demonstrated ability to take initiative in a constantly-changing work environment while maintaining flexibility and a collaborative attitude.  * Excellent verbal and written communication skills.  * Able to help create, develop and implement process improvement(s). * Crisis Management Leadership experience. * Valid driver’s license and insurable DMV required. We’d love it if you also have * A Bachelor’s degree (or higher) from an accredited college or university, ideally in business, criminal justice, crisis management, security operations. * Experience with project management software. Proficiency in Microsoft Excel/Google Sheets. What we’ll offer in return * Full-Time Salaried position. * Medical, Dental, and Vision benefits. * 401K with company match. * A multitude of perks including student loan payments, discounts on vehicles, benefits for your pets, and much more.. * A great wellness program to keep you healthy and happy both physically and mentally. * Access to opportunities to expand your skill set and share your knowledge with others across the organization. * A company culture focused on high performance and bar-raising, with vast opportunity to learn and grow. Other requirements To be able to do your job at Carvana, there are some basic requirements we want to share with you. * Must be able to read, write, speak and understand English. Of course, we’ll make any reasonable accommodations for those with disabilities to perform the essential functions of their jobs.  Legal stuff Hiring is contingent on passing a complete background check.  This role is not eligible for visa sponsorship. Carvana is an equal employment opportunity employer.  All applicants receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, marital status, national origin, age, mental or physical disability, protected veteran status, or genetic information, or any other basis protected by applicable law.  Carvana also prohibits harassment of applicants or employees based on any of these protected categories. Please note this job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Alan

HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 800+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. THE TEAM AND YOUR MISSIONS You will lead Alan's Security team, a highly technical group operating across 10+ countries in a regulated health insurance environment. As Security Lead, your missions span four core areas: * Lead and grow the security team: Coach, structure, and elevate a team of security experts. Set clear priorities, define ownership, and create conditions for genuine professional growth. * Own security in the AI era: Define Alan's posture on AI-driven threats and opportunities. Build frameworks that let product and engineering teams ship AI-powered features safely and at speed. * Scale security across 10+ countries: Own the ISMS and certification programme (ISO 27001), navigate a complex multi-regulatory environment (DORA, HDS, RGPD, NIS2, PGSSI-S), and ensure Alan's security programme keeps pace with its geographic expansion. * Build and evolve Alan's security strategy: Position security as a long-term business asset and trust-builder for members, regulators, and partners. Align Legal, DPO, Risk, Engineering, and Product on security requirements, and build a security culture that empowers rather than restricts.   THE CHALLENGE Alan is a fast-growing health insurer operating in a uniquely complex environment. The challenges you will navigate include: * A shifting threat landscape: AI is reshaping both attack vectors and defensive possibilities. You will need a clear point of view on LLM security, agent risks, and AI governance, and the ability to translate that into concrete, actionable priorities. * Multi-country regulatory complexity: Operating across 10+ countries means managing a dense, evolving regulatory stack (DORA, HDS, RGPD, NIS2, PGSSI-S) while keeping the business moving. You will need to translate regulatory requirements into technical controls without creating bottlenecks. * Health sector specifics: Alan handles sensitive health data at scale. This comes with sector-specific requirements (ANS framework, CERT Santé, HDS) that demand both technical precision and operational rigor. * Influencing at scale without direct authority: Security touches every function. Your ability to align Legal, DPO, Risk, Engineering, Product, and Operations, and make them come to you early, will be as important as your technical depth. * Running security as a living programme, not a compliance exercise: The goal is not to pass audits. It is to build a programme that feeds real decisions, scales with the company, and earns genuine trust. WHO WE ARE LOOKING FOR * Proven experience leading a security (or security-adjacent) team, with concrete examples of people development and growth * At least one full ISO 27001 certification or recertification cycle led end-to-end * Solid understanding of the regulatory stack relevant to Alan's context: DORA, HDS, RGPD, NIS2, PGSSI-S * Experience running security risk cartography, ideally with EBIOS RM- Experience conducting vendor security assessments and defining contractual security requirements * Clear understanding of AI security: LLM threats, agent risks, AI governance frameworks (OWASP LLM Top 10, MITRE ATLAS, EU AI Act) * Full professional fluency in English required; French is a plus * Bonus: experience in a regulated health sector environment (ANS framework, CERT Santé, HDS)   This position targets level F+ on our level grid.   HOW WE WORK Location: You must be legally eligible to work from France. We offer remote work flexibility, but we value in-person collaboration   🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. If you identify yourself as a woman: Did you know that research shows women often apply only when meeting 100% of requirements? Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application!   🔖 Check out our About Alan and Career pages, as well as our Medium, blog and Glassdoor page for more info.   YOU WANT TO KNOW MORE ABOUT ALAN? 🙌 Perks & Benefits: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

Maze

Summary of the Role: As Security Research Lead at Maze, your research directly shapes our products and how our AI understands real risk. This is a unique opportunity to join a well-funded Series A startup building at the intersection of generative AI and cybersecurity, leading the research function that makes our products sharper than anything else on the market — and gives Maze a credible technical voice in the security community. You'll set the bar for our vulnerability research: defining the methodologies that separate critical risk from noise, validating and contextualising the threats our AI surfaces, and feeding that expertise straight into product and engineering to improve how we detect, prioritise, and remediate. You'll work hand-in-hand with our AI/ML, product, and engineering teams — close to the roadmap and the code, not off to one side — turning what you find into capabilities that crush the competition. Alongside that, you'll amplify the work externally: surfacing novel vulnerabilities and building research narratives that earn real reach, giving Maze technical credibility with practitioners and customers. This role is perfect for a security researcher with real depth in cloud and application security who is ready to step up: someone who wants their research to ship as product, can lead a small research team, and can tell a story that lands with a technical audience. The ideal candidate has done this inside another security vendor and wants to build both great products and a research brand from a strong foundation. What you'll work on: * Make Our Products Brilliant: Feed research directly into product and engineering — work close to the roadmap and the codebase to sharpen how we detect, prioritise, and remediate, building capabilities that outclass the competition * Shape How Our AI Understands Risk: Translate deep threat research into the labels, signals, and product feedback that train our models to prioritise vulnerabilities like a seasoned researcher * Lead Our Security Research Function: Set the direction, standards, and methodologies for how Maze researches, validates, and prioritises cloud and application security threats, scaling a small team of researchers as we grow * Find Novel Vulnerabilities That Get Reach: Surface original research and build narratives — blog posts, technical talks, podcasts, video, conference presentations — that earn real reach and give Maze technical credibility with the security community * Build Authoritative Technical Intelligence: Produce detailed research on exploitation techniques, attack vectors, and remediation across cloud infrastructure and application security, enriched with CVE, advisory, and threat-intel sources * Set the Standard for Research Quality: Establish the frameworks and review processes that keep our vulnerability assessment consistent, defensible, and ahead of the threat landscape * Grow the Bench: Mentor and develop researchers, raising the technical bar of the team and creating a research culture others want to join What You Need to Be Successful: * Proven Security Research Depth:** 6+ years in hands-on security research, with a strong track record investigating complex vulnerabilities, building proof-of-concepts, and validating real-world threats * Cloud & Application Security Expertise: Deep knowledge of cloud (AWS) and application security vulnerabilities, attack vectors, and how they actually get exploited at scale * Research That Ships as Product: A track record of turning research into product and engineering outcomes — working closely with eng, product, and ML teams to translate findings into shipped capabilities, not reports that sit on a shelf * A Public Track Record: Demonstrated ability to be the voice of security research externally — published research, conference talks, well-received technical content, or a recognised presence in the community * Vendor-Grade Perspective: Direct experience inside a security tooling or research organisation, with a view on what good research operations look like and how to build credibility in market * Technical Investigation Skills: Strong coding and scripting (Python, Go, or similar) for automating research, building validation tooling, and creating PoCs * Communication That Lands: Ability to translate complex security research for technical practitioners, customers, and internal AI/ML and product teams without losing rigour * Leadership Instinct: Experience leading or mentoring researchers, setting standards, and owning a domain end-to-end in a fast-moving environment * Startup Readiness: Comfortable operating with ambiguity and limited structure, prioritising ruthlessly, and building the function as you run it * Nice to haves: * Experience with AI/ML security or working with AI-generated security findings * An established personal brand or following in the security research community * Open-source contributions to security tools or research * Experience setting up or scaling a research/labeling operation * Industry certifications (OSCP, AWS Security, CISSP, etc.) Why Join Us: * Ambitious Challenge: We're using generative AI (LLMs and agents) to solve some of the most pressing challenges in cloud and application security. You'll define how AI understands and prioritises vulnerabilities — and how the market talks about it. * Expert Team: We are a team of hands-on leaders with experience in Big Tech and Scale-ups, who have been part of the leadership teams behind multiple acquisitions and an IPO. * Build Products and a Research Brand: A rare chance to build a security research function from a strong foundation where your research ships as product — directly shaping what we build and how Maze is seen in the security community. * Impactful Work: Cybersecurity is a force for good. Your research will directly improve how thousands of organisations understand and respond to threats, scaling expert security knowledge through AI. * Build an AI-native Company: Join early enough to shape everything from the ground up, with significant equity upside and the room to grow into senior security leadership.