Design, implement, and govern identity and access controls across cloud and hybrid environments.
Partner with technology teams to turn security standards into practical IAM solutions that can be implemented, monitored, and maintained.
Support identity governance and access control improvements, document control designs, and help ensure cloud environments meet security and compliance expectations.
Requirements
Nice to have: Experience in regulated environments
Nice to have: Experience automating cloud security controls
Shape and deliver Duolingo’s security strategy, safeguarding learners, employees, systems, and services.
Compensation
Salary Range: $204,000—$306,000 USD
Responsibilities
Set technical direction for security across Duolingo’s applications, cloud infrastructure, and engineering systems.
Lead complex, multi-team security initiatives from problem definition and design through implementation, measurement, and ongoing ownership.
Design and build scalable security services, controls, and automation that prevent, detect, and remediate risks with minimal manual effort.
Partner with engineering teams to threat model systems, review architecture and code, prioritize risks, and deliver practical mitigations.
Strengthen security across the software-development lifecycle, including secrets management, dependency security, vulnerability management, and CI/CD controls.
Cybersecurity Analyst – SOC Operations responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the enterprise environment.
Compensation
$110,000 - $120,000
Responsibilities
Monitor enterprise security tools and alerts for suspicious activity
Analyze and triage security events from SIEM, EDR, email, network, identity, and cloud platforms
Correlate logs and events across multiple security systems to identify threats
Escalate high-risk incidents according to playbooks
Participate in incident response activities including detection, triage, containment, eradication, recovery, and post-incident review
Lead AI research to advance cybersecurity capabilities of large language models and autonomous agents.
Compensation
$163,200.00 - $264,000.00/yr
Responsibilities
Develop high-quality security data, realistic training and evaluation environments, reliable graders, and post-training methods for complex cybersecurity tasks spanning vulnerability research, threat analysis, detection, investigation, remediation, secure coding, and autonomous security workflows.
Design reproducible training and evaluation environments for complex cybersecurity tasks.
Transform source-code repositories, vulnerabilities, security incidents, malware samples, threat intelligence, detection logic, patches, test harnesses, and security tools into structured tasks for LLMs and AI agents.
Build reliable graders, verifiers, and reward signals using tests, compilation, runtime behavior, security-tool outputs, detection results, vulnerability reproduction, and other domain-specific validation methods.
Design evaluations for security reasoning, code understanding, threat analysis, root-cause analysis, tool use, long-horizon execution, and autonomous task completion.
Requirements
BS/MS degree in Computer Science, Machine Learning, Artificial Intelligence, Cybersecurity, or a related field, or equivalent practical experience.
Experienced Customer Success Engineer to serve as technical backbone for critical customer accounts, advising stakeholders, resolving escalations, and driving technical enablement.
Compensation
$142,200.00 - $229,900.00/yr
Responsibilities
Guide customers through advanced platform optimization, workflow maturation, and continuous value realization to scale adoption and maximize ROI.
Resolve critical account escalations by aligning Engineering, Product Management, and Support stakeholders to deliver prompt, transparent outcomes.
Turn complex troubleshooting patterns and product nuances into repeatable playbooks, reference guides, and best-practice documentation for the broader organization.
Act as the customer’s advocate internally, partnering directly with Product and Engineering teams to feed field insights back into product strategy.
Mentor team members, lead technical enablement sessions, and foster a culture of operational excellence across the organization.
Lead AI-assisted vulnerability research, designing and building secure AI harnesses to discover, validate, and report high-impact software vulnerabilities.
Compensation
$172,100.00 - $278,300.00/yr
Responsibilities
Design, build, and improve AI/security harnesses for vulnerability research
Produce high-quality research artifacts and technical reports
Conduct deep technical analysis across real-world software and open-source projects
Build reusable research infrastructure and automation pipelines
Analyze large-scale harness outputs to identify new research opportunities
Requirements
Master's degree in Computer Science, Cybersecurity, or related field
Nice to have: PhD in Computer Science, Cybersecurity, AI/ML, Systems, Programming Languages
Nice to have: experience building AI agent harnesses
Nice to have: experience handling real vulnerabilities end-to-end
Nice to have: knowledge of Web Security, OS & Kernel Security, Browser Security, Software Supply Chain Security, OT/IoT Security, Network/Protocol Security, Cloud Security, Application Security
Lead and manage the firm’s infrastructure security strategy, roadmap, and operating model across on‑premises, cloud, and hybrid environments.
Compensation
NY Only: The estimated base salary range for this position is $190,000 to $220,000 at the time of posting.
Responsibilities
Define and execute the Firm's infrastructure security strategy, roadmap, and operating model.
Develop and maintain plans to mature infrastructure security capabilities aligned with business objectives and enterprise risk priorities.
Establish security standards, architectural patterns, engineering principles, and technical guardrails across infrastructure platforms.
Lead the design, implementation, and management of security controls across Windows and Linux server environments, Endpoint platforms, Cloud environments, Storage and data protection platforms, Network security technologies, Virtualization and container platforms, Remote access technologies.
Partner with cloud and infrastructure engineering teams to ensure secure deployment patterns for compute, storage, identity integration, and networking.
Requirements
Bachelor’s degree in information security, IT, risk management, related discipline, or equivalent experience
Build AI‑powered detection and response capabilities, continuously red team defenses, and drive measurable outcomes in a high‑impact threat engineering role.
Compensation
Pay range: $137,000 – 190,600 depending on experience and skill set. Annual bonus target 10% subject to terms and conditions of plan.
Responsibilities
Engineer high‑fidelity detections across identity, endpoint, network, cloud, and SaaS with automated response paths
Apply AI and machine learning to triage, correlate, and enrich alerts at machine speed
Build autonomous and semi‑autonomous response playbooks that isolate hosts, revoke sessions and tokens, disable credentials, block infrastructure, and quarantine content
Implement guardrails for safe autonomy, including confidence thresholds, blast‑radius controls, human‑in‑the‑loop escalation, and rollback
Instrument detection and response for measurable outcomes such as mean time to detect, mean time to contain, false‑positive rate, and ATT&CK coverage
Senior Cyber Security Manager leading CSIRT and SOC operations, driving cyber defense capabilities, incident response, and security automation.
Compensation
The expected starting base pay range for this position is $156,000 - $195,000, with full potential base salary range over a successful candidate’s tenure in the position of $156,000 - $234,000. This position may also be eligible for bonus, commission, or other incentive compensation in accordance with the terms of the applicable plan of up to a 20% Bonus Target.
Responsibilities
Lead daily SOC/ARC monitoring, alert triage, investigations, and incident response
Manage analysts, shift leads, and incident handlers across all tiers
Define Tier 1/2/3 responsibilities and escalation criteria
Establish sustainable coverage model using follow-the-sun, dedicated shifts, or hybrid on-call rotations
Ensure qualified staffing and service coverage
Requirements
Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field
Cloud IAM Security EngineerNewOmegaHires · Washington, US
Staff Security EngineerDuolingo · New York, US
Senior Cyber Security Manager- CSIRT & SOCOnTrac · Remote