\nAbout the Team:\n\nNetlify’s SRE team is on a mission to scale Netlify’s infrastructure to support our next million users. We focus on ensuring application resiliency and delivering a robust compute and network platform at scale. As a Site Reliability Engineer within the Infrastructure SRE team, you’ll play a key role in designing, developing, and delivering solutions that enhance the scalability, availability, and efficiency of our platform. Whether you're an experienced systems engineer or a software developer eager to dive into systems, we’re excited to hear from you!\n\nWe are a remote-first, globally distributed group, emphasizing asynchronous communication to prioritize execution over meetings. Documentation is at the core of how we operate, and we are deeply committed to our values of transparency, empowerment, and collective ownership. We foster a culture of curiosity, collaboration, and support, where there are no dumb questions. Everyone on our team knows their contributions matter, feels empowered in their role, and can quickly see the impact of their efforts. At Netlify, we believe diversity is key to innovation, and as a remote-first company, we value the unique perspectives that come from our team’s varied backgrounds. Whether you’re launching a new career or growing an established one, Netlify is a place where you can do impactful work while maintaining a healthy work-life balance\n\nWhat You’ll Do: \n\n\n* Manage full infrastructure lifecycle from design to decommission, ensuring systems are reliable and efficient.\n\n* Participate in an on-call rotation for the compute platform and related systems.\n\n* Automate routine tasks and develop tools to improve system efficiency and reduce the human intervention time on any tasks.\n\n* Conduct system performance tuning and troubleshooting, as well as capacity planning, to ensure system reliability and efficiency.\n\n* Participate in the creation and testing of disaster recovery plans.\n\n* Monitor and maintain observability systems to ensure issues are identified and resolved proactively.\n\n* Educate team members on security best practices and emerging threats.\n\n\n\n\nWhat You'll Bring: \n\n\n* Several years of experience in SRE, DevOps, or related roles.\n\n* Proven experience working in hyperscale cloud environments.\n\n* Demonstrated ability to lead infrastructure projects.\n\n* Strong understanding of network protocols and configurations.\n\n* Experience with automation tools (e.g., Ansible, Terraform) and scripting languages (e.g., Python, Bash, Golang).\n\n* Experience automating component deployment across multiple environments using tools like Jenkins, CircleCI, or GitHub Actions.\n\n* Proficient observability and log analysis techniques to detect and resolve system issues.\n\n* Effective communication skills for both technical and non-technical stakeholders.\n\n* Familiarity with compliance requirements and frameworks: PCI, ISO 2701, HIPAA, SOC\n\n\n\n\nApplying\n\nNot sure you meet 100% of our qualifications? Please apply anyway!\n\nWhen applying please include: \n\nA resume or short listing of your job history & skills (link to a LinkedIn profile would be fine). We appreciate a cover letter explaining why you would enjoy working in this role at Netlify to get to know you a bit better, though this is not required and will not impact your application. Our mission is to “build a better web” and that cannot be done without a diversity of skill sets, backgrounds and thoughts. \n\nOf everything we've ever built at Netlify, we are most proud of our team. Netlify is an Equal Opportunity Employer. We are devoted to building a team of people with diverse backgrounds and lifestyles. Driving equality empowers our team, enables us to innovate, and helps us maintain a more inclusive environment. We don’t discriminate against employees or applicants based on gender identity or expression, sexual orientation, religion, age, race, military/veteran status, citizenship, pregnancy status, or any other differences. If we can do anything to provide a better interview, i.e. accommodate a disability, then please let us know by emailing [email protected]. \n\nAbout Netlify\n\nAt Netlify, we’re on a mission to build a better web by making it easier than ever to build, deploy, and scale web applications. By unifying an entire ecosystem of web development tools, content sources, services, and APIs into one simplified workflow, Netlify empowers top brands to ship campaigns faster, reduce risk, and boost productivity and revenue. At the forefront of the composable web movement, with over 4 million web developers and businesses using the platform, with Netlify, you can connect everything and build anything. \n\nWe are a Series D company that has raised over $200M from investors such as Andreessen Horowitz, Kleiner Perkins, EQT, Bessemer, BOND, and Menlo Ventures. As a fully distributed company, we aim to create a company culture where the best idea can come from anywhere and strive to be thoughtful, compassionate, and collaborative in our work. If this sounds like something you’d like to be part of, we’re excited to connect with you!\n\nAt Netlify, we are committed to a compensation philosophy that prioritizes fairness and equity, positions our employee compensation competitively in the market, recognizes and rewards performance, and takes a comprehensive approach to our rewards package. We anchor our compensation philosophy on a market-based approach, therefore salary ranges may differ depending on the labor cost in a particular location. The salary provided is in addition to robust benefits and participation in Netlify’s equity plan. Our base compensation for this role is targeted at $136,000 - $184,000  for most US-based locations. Candidates outside the US or in premium markets should consult with their Talent Acquisition partner regarding location-based ranges, as they may be higher or lower than the average US range listed. The starting pay will be determined based on multiple factors, including expertise and skills, market demands, experience, internal equity, and applicable geographic location. These compensation packages and ranges are subject to change and may be modified in the future. \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to Design, Testing, Cloud, Senior and Engineer jobs that are similar:\n\n $60,000 — $110,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n
\n\n#Location\nToronto, Ontario, Canada

What to Expect \n\nWild Alaskan Company is a data-driven, tech-enabled marketing and cold chain logistics company that sells seafood. Our mission is to accelerate humanity’s transition to sustainable food systems by fostering meaningful, interconnected relationships between human beings, wild seafood, and the planet. To meet this goal, WAC is constantly striving to innovate technology that facilitates (a) a more connected and vertically integrated supply chain via a proprietary end-to-end logistics platform, (b) a seamless buying experience via best-in-class ecommerce and POS solutions, and (c) human-to-human connectivity via proprietary CRM, content platform and member portal. To that end, WAC is seeking a hardworking and passionate Senior Software Engineer to join the team.\nWhat You'll Do\n\nAs a Senior Software Engineer, you will be joining a growing team of talented, driven engineers who are passionate about their work and the mission. You will have an opportunity to make an important difference in the future of sustainable food systems by building technology that enables the efficient production, access, and distribution of food to individuals across the globe. You’ll be bringing your expertise to the technology stack of Wild Alaskan’s proprietary order and inventory management systems, as well as our ecommerce and content platforms.\n\nYou will work as an individual contributor in collaboration with the VP of Software Architecture, Digital Product leadership, Product Managers, Principal Engineer, other Senior Engineers, and the Data Science and Analytics Team to fully support and expand our home-grown technology stack in Laravel and Vue.js.\nYour Day-to-Day\n\n\n* Develop robust, scalable, and efficient web applications using Laravel and Vue.js, ensuring high performance and optimal user experience.\n\n* Collaborate with product managers, designers, and other stakeholders to gather requirements and translate them into technical specifications.\n\n* Design and implement database structures and queries to support application functionality and performance.\n\n* Write clean, maintainable, and well-documented code following coding standards and best practices.\n\n* Conduct code reviews and provide constructive feedback to your peers to ensure code quality and adherence to standards.\n\n* Optimize application performance through performance profiling, code optimization, and caching techniques.\n\n* Troubleshoot and debug complex issues, identify root causes and implement effective solutions.\n\n* Stay up-to-date with industry trends and emerging technologies and apply them to improve our development processes and methodologies.\n\n* Share your knowledge and expertise to foster team growth.\n\n* Collaborate with the QA team to develop comprehensive test plans and ensure high-quality software delivery.\n\n* Participate in Agile development methodologies, including sprint planning, task estimation, and progress tracking.\n\n* Continuously monitor and improve application security, identifying and mitigating potential vulnerabilities.\n\n\n\nWhat You Bring   \n\n\n* Mastery of Laravel and Vue.js with 8+ years of experience.\n\n* Strong OOP and code planning proficiency.\n\n* Strong TDD and testing methodologies (PHPUnit.)\n\n* Mastery of building RESTful APIs and single-page applications.\n\n* Proficiency in front-end web technologies such as HTML5, CSS3, JavaScript, and related frameworks (e.g., Bootstrap, Tailwind CSS).\n\n* Solid understanding of relational databases (e.g., MySQL, PostgreSQL) and ability to write efficient SQL queries.\n\n* Mastery of version control systems (e.g., Git) and familiarity with collaborative development workflows (we use feature branching and rebase).\n\n* Familiarity with deployment and hosting environments, including cloud platforms (e.g., AWS) and containerization (e.g., Docker).\n\n* Strong understanding of best-in-class database design practices.\n\n* Strong understanding of frontend performance to optimize user experience and response times.\n\n* Ability to identify technical debt and develop effective strategies to mitigate it.\n\n* Ability to identify gaps in the technology used and propose suitable solutions for enhancing system functionality.\n\n* Proficiency in automated testing to ensure the reliability and quality of the software system.\n\n* Ability to plan and execute incremental improvements to continuously enhance the software system's performance and functionality. \n\n* Excellent communication skills and ability to collaborate effectively with cross-functional teams.\n\n* Self-sufficient and capable of working independently to complete tasks and troubleshoot issues.\n\n* Self-motivated with a passion for learning and staying updated with the latest technologies and industry trends.\n\n\n\nNice to Haves\n\n\n* Knowledge of server-side rendering (SSR) and modern JavaScript Framework tools (e.g., Nuxt.js)\n\n* Knowledge of Typescript\n\n* Familiarity with DevOps practices and CI/CD pipelines\n\n* Experience with UI/UX\n\n* E-commerce Experience\n\n* Experience using BI Tools such as Looker and Google Analytics\n\n* Food Industry experience\n\n* Experience working in start-up environments\n\n\n\nLocation \n\n100% remote with occasional travel for in-person team and companywide retreats. \n\nThe starting salary range for this position is $130,000 - $170,000, commensurate with skills and experience. Wild Alaskan’s benefits package includes health, vision, and dental insurance, 401k, PTO, safe/sick time, vacation, parental leave and more, as well as a delicious box of free fish every month. \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to Design, DevOps, JavaScript, Laravel, Cloud, Senior, Marketing, Engineer and Ecommerce jobs that are similar:\n\n $50,000 — $100,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n
\n\n#Location\nDenver, Colorado, United States

\nAs a Principal Application Security Engineer at Vimeo, you will engage in a variety of activities, either offensive, defensive, or some combination thereof, ultimately aimed at safeguarding our users who entrust Vimeo with their content every day.\n\nYou’ll plan, carry out, and lead security initiatives to monitor and protect sensitive data and systems from infiltration and cyber-attacks.\n\nYou will likely collaborate frequently with and support developers, as well as members of the infrastructure security team, the compliance team, IT, Product, and other teams throughout the organization.\n\nYou love to solve puzzles, and are a great team player.\n\nThis role is remote. The role requires three hours of overlap with the US Eastern time zone (i.e., New York City) daily.\n\nWhat you’ll do:\n\nDepending on your preferences and the current needs of the team, you may either focus on just one or two of the following areas, or you may choose to become involved with many of them.\n\n\n* Security architecture — create a technical plan for partitioning and consolidating our cookies; draft up a sequence diagram for a new middleware to prevent IDOR attacks; implement a POC for leveraging CAPTCHA challenges in cross-origin embedded iframes; draft some code to modify the expiration behavior of our JWTs then pair with our API team to get feedback\n\n* Penetration testing — either hunt for security issues on our production or staged applications during an open-box internal pen test, or help coordinate an engagement with an external firm\n\n* Writing code for internal automated security tools — write some code, usually in Python, Bash, or Go, to support any of our team's various initiatives. Often we strive to facilitate a culture of “paved roads” for our developers, such that it is easy for any developer to incorporate security into their designs and implementations\n\n* Threat modeling — consider how malicious attackers may compromise our systems, and advise developers and product managers on what defenses are needed\n\n* Code reviews — discover weakness in our source code before it reaches production\n\n* Bug bounty program — help triage new incoming reports on a daily basis, plus launch creative initiatives to increase researcher engagement on our programs\n\n* Web Application Firewall and Rate Limiting — expand coverage and tune new rules while coordinating with developers, support team members, and the site reliability team\n\n* Remediation — enable and encourage developers to correctly fix recently discovered security issues in a timely manner, ultimately reducing our Mean Time To Remediate\n\n* Secure Software Development Lifecycle — configure automated tooling (eg. static and dynamic code analysis,, IAST) in our SDLC to detect security issues in our source code before it reaches production\n\n* Developer Education, Security Culture — create fun ways to spread technical security awareness throughout the engineering department\n\n* Incident response — lead or assist in running the various phases of an incident response, including initial detection, triage, containment, recovery, root cause analysis, retrospective, etc.\n\n* Collaboration with the infrastructure security team — pair with members of the infrastructure security team on various projects to secure our cloud instances and employee workstations\n\n* Collaboration with the compliance and privacy team — help ensure that our company complies with industry best practices and standards\n\n* Process improvements — help strengthen our own internal processes and procedures\n\n* A typical day will look like:\n\n\n\n* Engage with one or more product development teams and guide them through a threat model and data flow analysis.\n\n* Review the code for major new functionality to ensure security best practices are followed.  \n\n* Review new tickets in our bug bounty program (http://hackerone.com/vimeo) and use your system design and threat modeling knowledge to reproduce, define risk and mitigating controls and propose a fix., \n\n* A call or two with Development, Product Management teams to discuss security-related issues\n\n* Pen test a new feature in a staging environment with Burp Pro\n\n* Assist the compliance team on a privacy-related project\n\n* Provide technical advice in response to occasional questions from developers and other members of the security team\n\n\n\n\n\n\nSkills and knowledge you should possess:\n\n\n* Required: 5+ years of prior experience in either software development, devops, or site reliability engineering with hands-on coding experience.\n\n* Preferred: prior experience in Application Security\n\n* 7+ total years of relevant experience in Engineering, Application Security, or a similar technical field.\n\n* Strong knowledge of modern web, mobile, and network security\n\n* Strong programming skills with at least one of the following languages, and the ability to read all of them: Python, Go, PHP, Javascript, and Ruby\n\n* Expertise with application pen testing, using tools like Burp or Zap\n\n* Confident working in and across cloud environments like AWS and GCP. Detailed knowledge of at least one cloud environment.\n\n* Confident with shell scripting\n\n* Confident with common SDLC components, like git, Jira, Jenkins, etc\n\n* Confident ability to communicate technical security concepts to developers\n\n* At least an upper-intermediate level of English\n\n\n\n\nBonus points:\n\n\n* Link to a Github repo with security tools/scripts you’ve developed or help maintain\n\n* Full-stack web development experience creating RESTful applications (in any language) is a big plus\n\n* Open source vulnerability research or blog posts is a big plusS\n\n* Experience with system security hardening guidelines and SDLC principles\n\n\n \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to Design, Cloud, API and Engineer jobs that are similar:\n\n $62,500 — $105,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n
\n\n#Location\nTel Aviv, Tel Aviv District, Israel

\nAs a Sr. Application Security Engineer at Vimeo, you will engage in a variety of activities, either offensive, defensive, or some combination thereof, ultimately aimed at safeguarding our users who entrust Vimeo with their content every day.\n\nYou’ll plan, carry out, and lead security initiatives to monitor and protect sensitive data and systems from infiltration and cyber-attacks.\n\nYou will likely collaborate frequently with and support developers, as well as members of the infrastructure security team, the compliance team, IT, Product, and other teams throughout the organization.\n\nYou love to solve puzzles and are a great team player.\n\nThis role is remote.\n\nWhat you’ll do:\n\nDepending on your preferences and the current needs of the team, you may either focus on just one or two of the following areas, or you may choose to become involved with many of them.\n\n\n* Penetration testing — either hunt for security issues on our production or staged applications during an open-box internal pen test or help coordinate an engagement with an external firm\n\n* Writing code for internal automated security tools — write some code, usually in Python, Bash, or Go, to support any of our team's various initiatives. Often, we strive to facilitate a culture of “paved roads” for our developers, such that it is easy for any developer to incorporate security into their designs and implementations\n\n* Threat modeling — consider how malicious attackers may compromise our systems, and advise developers and product managers on what defenses are needed\n\n* Code reviews — discover weaknesses in our source code before it reaches production\n\n* Bug bounty program — help triage new incoming reports on a daily basis, plus launch creative initiatives to increase researcher engagement in our programs\n\n* Web Application Firewall and Rate Limiting — expand coverage and tune new rules while coordinating with developers, support team members, and the site reliability team\n\n* Remediation — enable and encourage developers to correctly fix recently discovered security issues in a timely manner, ultimately reducing our Mean Time To Remediate\n\n* Secure Software Development Lifecycle — configure automated tooling (eg. static and dynamic code analysis, IAST) in our SDLC to detect security issues in our source code before it reaches production\n\n* Developer Education, Security Culture — create fun ways to spread technical security awareness throughout the engineering department\n\n* Incident response — lead or assist in running the various phases of incident response, including initial detection, triage, containment, recovery, root cause analysis, retrospective, etc.\n\n* Collaboration with the infrastructure security team — pair with members of the infrastructure security team on various projects to secure our cloud instances and employee workstations\n\n* Collaboration with the compliance and privacy team — help ensure that our company complies with industry best practices and standards\n\n* Process improvements — help strengthen our own internal processes and procedures\n\n* A typical day will look like:\n\n\n\n* Engage with one or more product development teams and guide them through a threat model and data flow analysis.\n\n* Review the code for major new functionality to ensure security best practices are followed.  \n\n* Review new tickets in our bug bounty program (http://hackerone.com/vimeo) and use your system design and threat modeling knowledge to reproduce, define risk and mitigating controls and propose a fix. \n\n* A call or two with Development, Product Management teams to discuss security-related issues\n\n* Pen test a new feature in a staging environment with Burp Pro\n\n* Assist the compliance team on a privacy-related project\n\n* Provide technical advice in response to occasional questions from developers and other members of the security team\n\n\n\n\n\n\nSkills and knowledge you should possess:\n\n\n* Required: 4+ years of prior experience in either software development, devops, or site reliability engineering with hands-on coding experience.\n\n* Preferred: prior experience in Application Security\n\n* 6+ total years of relevant experience in Engineering, Application Security, or a similar technical field.\n\n* Strong knowledge of modern web, mobile, and network security\n\n* Strong programming skills with at least one of the following languages, and the ability to read all of them: Python, Go, PHP, Javascript, and Ruby\n\n* Expertise with application pen testing, using tools like Burp or Zap\n\n* Confident working in and across cloud environments like AWS and GCP. Detailed knowledge of at least one cloud environment.\n\n* Confident with shell scripting\n\n* Confident with common SDLC components, like git, Jira, Jenkins, etc\n\n* Confident ability to communicate technical security concepts to developers\n\n* At least an upper-intermediate level of English\n\n\n\n\nBonus points (nice skills to have, but not needed): \n\n\n* Link to a Github repo with security tools/scripts you’ve developed or help maintain\n\n* Full-stack web development experience creating RESTful applications (in any language) is a big plus\n\n* Open-source vulnerability research or blog posts is a big plus\n\n* Experience with system security hardening guidelines and SDLC principles\n\n\n \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to Design, Cloud and Engineer jobs that are similar:\n\n $65,000 — $125,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n
\n\n#Location\nBengaluru, Karnataka, India