Clario is a healthcare technology company headquartered in Philadelphia, Pennsylvania, with a history dating back to 1972. The organization provides clinical trial endpoint technology and services, including electronic clinical outcome assessments, medical imaging, cardiac safety monitoring, and respiratory solutions. It operates on a global scale, supporting pharmaceutical and biotechnology firms through all phases of clinical research to generate high-quality evidence for regulatory submissions.
HQ: Philadelphia, United States • Medical AI • Artificial Intelligence • Biotechnology • Digital Health • Medical Imaging • CRO & CDMO Services • Health Care • Clinical Research • 1001-5000 employees • Est. 1972
≈ $27k – $61k per year (Estimated) • Senior • 5+ years exp • India • Remote (India) • Bachelor's Degree • Full-Time • Senior
PowerShell
Python
DevOps
Azure
Azure DevOps
GitLab
Grafana
Rest API
Cybersecurity
ISO 27001
OWASP SAMM
Threat Modeling
Analytics
Power BI
Tableau
Management
Jira
ServiceNow
Booz Allen Hamilton is a major American management and technology consulting firm that provides strategic, engineering, and cybersecurity services primarily to the U.S. government, defense agencies, and commercial clients. Founded in 1914 and headquartered in McLean, Virginia, the company is known for its deep expertise in defense, intelligence, and civil infrastructure. Today, it plays a central role in national security and government modernization by deploying advanced capabilities in artificial intelligence, digital transformation, and cyber defense.
HQ: McLean, United States • Military • Information Technology • IT Consulting • Government • Cybersecurity • Homeland Security • National Security • 5000+ employees • Est. 1914
$87k – $198k per year • Senior • 5+ years exp • In office (Annapolis, United States) • Bachelor's Degree • Full-Time • Senior
NIST AI RMF
DevOps
Kubernetes
Cybersecurity
Threat Modeling
ISO 27001
MITRE ATT&CK
NIST CSF
OWASP SAMM
Aras is a product lifecycle management software company headquartered in Andover, Massachusetts, and founded in 2000. The company develops the Aras Innovator platform, a low code environment for managing product data, requirements, configuration, quality, and digital twins across engineering and manufacturing. It licenses the platform on an open subscription model and serves industrial customers in aerospace, automotive, defense, and electronics.
HQ: Andover, United States • Industrial Automation • Manufacturing • Simulation & Digital Twin • CAD & PLM • Software • Information Technology • 501-1000 employees • Est. 2000
Middle • 4+ years exp • In office • Bachelor's Degree • Full-Time • Middle
Groovy
PowerShell
Python
DevOps
AWS
Azure
CI/CD
Jenkins
Kubernetes
Azure DevOps
Bicep
CloudFormation
Terraform
Cybersecurity
Threat Modeling
CIS Benchmarks
OWASP ASVS
OWASP SAMM
SBOM
Sigstore
SLSA
Benevity's mission (we call it our Moonshot!) is to act as a catalyst to infuse a culture of Goodness into the world.
Toronto • Calgary • Vancouver • Victoria • Atlanta • Data & Analytics • Cybersecurity • Professional Services • Est. 2008
$109k – $140k per year • Senior • 10+ years exp • In office (Toronto, Canada) • Bachelor's Degree • Full-Time • Senior
Node JS
JavaScript
Node JS
Commander.js
AI/ML
LLM
RAG
AI Agents
DevOps
AWS
CI/CD
Cybersecurity
ISO 27001
NIST CSF
OWASP SAMM
OWASP Top 10
SOC 2
Threat Modeling
≈ $87k – $178k per year (Estimated) • Senior • 10+ years exp • In office (Calgary, Vancouver, Canada) • Bachelor's Degree • Full-Time • Senior
Node JS
JavaScript
Node JS
Commander.js
AI/ML
LLM
RAG
AI Agents
DevOps
AWS
CI/CD
Cybersecurity
ISO 27001
NIST CSF
OWASP SAMM
OWASP Top 10
SOC 2
Threat Modeling
Black Duck Software is an application security company that specializes in automated solutions for securing and managing software code. The platform automates Software Composition Analysis (SCA), helping development and security teams detect security vulnerabilities, license compliance risks, and operational defects across open-source and third-party software components.
Toronto • Bengaluru • New York • Washington • Calgary • DevSecOps • Cybersecurity • Application Security • Est. 2002
≈ $104k – $256k per year (Estimated) • Lead • 8+ years exp • Burlington • Remote (Morocco) • Staff
Python
DevOps
AWS
CI/CD
GitLab CI
Grafana
GitLab
Cybersecurity
OWASP SAMM
≈ $90k – $221k per year (Estimated) • Lead • 8+ years exp • Remote (Canada) • Bachelor's Degree • Staff
LLM
DevOps
AWS
Azure
GCP
Cybersecurity
CVSS
GitGuardian
OWASP SAMM
OWASP Top 10
SBOM
Threat Modeling
Management
Jira
SLI HRMS is a specialized cloud-based human resource management platform designed to streamline core HR operations, payroll, and workforce administration. The software provides tools for employee attendance tracking, leave management, performance evaluations, and automated payroll processing to reduce administrative burden. By centralizing employee data into a single portal, it enables organizations to increase operational efficiency and foster seamless employee self-service capabilities.
HQ: Bengaluru, India • Human Resources • Software • 5000+ employees
≈ $24k – $60k per year (Estimated) • Lead • Remote/Hybrid (Bengaluru, India) • Relocation • Full-Time • Staff
Azure
Azure DevOps
CI/CD
Cybersecurity
CVE
OWASP SAMM
SBOM
Druva is a cloud-native SaaS platform providing automated data protection, cyber resilience, and governance across enterprise IT environments. Built natively on AWS microservices, the company operates a "Data Resiliency Cloud" that protects enterprise data across endpoints, cloud applications (like Microsoft 365 and Salesforce), hybrid servers, and virtualized workloads without requiring physical hardware or complex infrastructure management.
Santa Clara • Pune • London • Boston • Washington • Information Technology • Cloud Computing • Cybersecurity • Artificial Intelligence • Est. 1999
≈ $43k – $92k per year (Estimated) • Staff+ • 3+ years exp • In office (Pune, India) • Bachelor's Degree • Staff
Go
JavaScript
Python
C
C
SDL
AI/ML
LLM
AI Agents
Model Context Protocol
DevOps
CI/CD
Shift-Left
Cybersecurity
CWE
OWASP SAMM
OWASP Top 10
OWASP ZAP
Shift-Left Security
Snyk
Threat Modeling
Thomson Reuters is a global provider of business information services and technology solutions, headquartered in Toronto, Canada. The company specializes in delivering specialized news, workflow software, and AI-powered intelligence to professionals in the legal, tax, accounting, and compliance sectors. It is also well-known for operating Reuters, one of the world's largest and most trusted news agencies.
HQ: Toronto, Canada • Professional Services • Media & Entertainment • Data & Analytics • News Agencies • Legal Services • 5000+ employees • Est. 2008
≈ $57k – $144k per year (Estimated) • Junior • 7+ years exp • Remote/Hybrid (Toronto, Canada) • Full-Time • Architect
Java
Python
AI/ML
LLM
RAG
LLM Guardrails
Model Context Protocol
AWS Bedrock
Vertex AI
Amazon SageMaker
Red Teaming
DevOps
AWS
Azure
CI/CD
GCP
Kubernetes
Platform Engineering
Terraform
IAM
Cybersecurity
NIST CSF
OWASP ASVS
Threat Modeling
OWASP SAMM
SBOM
SLSA
SGS is an inspection, verification, testing, and certification company. The company inspects agricultural products, minerals, petroleum and petrochemicals, motor vehicles, and consumer goods. SGS is headquartered in Geneva, Switzerland.
HQ: Geneva, Switzerland • Professional Services • Biotechnology • Transportation & Logistics • 5000+ employees
In office (Shah Alam, Malaysia) • Bachelor's Degree • Full-Time • Principal • English • Chinese: C1 (Optional)
ClickHouse is an open-source, column-oriented DBMS (Database Management System) designed for Online Analytical Processing (OLAP). Originally created by Yandex in 2009 and spun out into an independent company in 2021, it is engineered for real-time reporting, fast query execution, and high-performance data analytics at petabyte scale.
HQ: San Francisco, United States • Information Technology • Data & Analytics • Big Data • Database Management • 1001-5000 employees
≈ $73k – $166k per year (Estimated) • Equity • Senior • 7+ years exp • Remote (United States) • Bachelor's Degree • Senior
ClickHouse
AI/ML
Cursor
LLM
AI Agents
Lovable
Red Teaming
DevOps
AWS
Azure
Cilium
GCP
Kubernetes
GitHub
Cybersecurity
OWASP SAMM
SBOM
≈ $73k – $165k per year (Estimated) • Equity • Senior • Remote (United States) • Bachelor's Degree • Senior
C++
Databases
ClickHouse
AI/ML
Cursor
Lovable
DevOps
AWS
Azure
Cilium
GCP
Kubernetes
GitHub
Cybersecurity
CodeQL
OWASP SAMM
SBOM
Semgrep
Snyk
Threat Modeling
$191k per year • Equity • Senior • Remote (United States) • Bachelor's Degree • Senior
C++
Databases
ClickHouse
AI/ML
Cursor
Lovable
DevOps
AWS
Azure
Cilium
Crossplane
GCP
Kubernetes
GitHub
Cybersecurity
CodeQL
OWASP SAMM
SBOM
Semgrep
Snyk
Threat Modeling
Genius Sports is a global sports data and technology provider headquartered in London, United Kingdom, established in its current form in 2016. The company develops software for data collection, provides real-time sports statistics to media and betting industries, and offers fan engagement platforms including augmented reality broadcasts. It maintains official partnerships with major sports leagues such as the NFL and Premier League, operates across more than 15 countries, and is publicly traded on the New York Stock Exchange.
HQ: London, United Kingdom • iGaming & Gambling • Gaming • Sports Media • Fan Engagement • Sports Betting • Sports • Sports Analytics • Est. 2016
≈ $97k – $234k per year (Estimated) • Executive • 10+ years exp • Remote/Hybrid (London, United Kingdom) • Architect
C
C
SDL
AI/ML
Red Teaming
DevOps
AWS
Incident Management
Kubernetes
Shift-Left
Cybersecurity
OWASP SAMM
Shift-Left Security
Threat Modeling
Zero Trust
Nedap is a Dutch technology company founded in 1929 and headquartered in Groenlo. It builds identification, security, livestock management and healthcare software combining hardware and cloud services. The company is listed on Euronext Amsterdam and operates without traditional middle management.
HQ: Groenlo, Netherlands • Industrial IoT (IIoT) • Internet of Things • Simulation & Digital Twin • 501-1000 employees • Est. 1929
$70k – $104k per year • Senior • In office (Groenlo, Netherlands) • Senior
Shift-Left
Cybersecurity
OWASP SAMM
Shift-Left Security
Robotics
Digital Twin
METRO is a leading international food wholesaler and cash-and-carry operator that primarily serves independent businesses in the hospitality industry (hotels, restaurants, and caterers) as well as small traders. The company operates a global network of large wholesale stores alongside expanding digital e-commerce platforms and dedicated delivery services. By combining large-scale distribution, digital procurement solutions, and tailored professional products, it helps business owners optimize their supply chains and manage daily operational needs.
Pune • Bucharest • Nanterre • Delft • Munich • Health Care • Manufacturing • 5000+ employees • Est. 1929
In office (Pune, India) • Full-Time • Senior • English
C++
JavaScript
Python
AI/ML
Claude
Claude Code
AI Agents
DevOps
CI/CD
GitHub
Cybersecurity
OWASP ASVS
OWASP SAMM
OWASP Top 10
Threat Modeling
Lux Med is the leading private healthcare provider in Poland, offering a wide range of medical services, diagnostic testing, and occupational health programs. Founded in 1992, the group operates an extensive network of modern outpatient clinics, specialized medical centers, and hospitals across the country. Headquartered in Warsaw, it serves millions of individual patients and corporate clients through comprehensive health insurance plans and subscription-based medical care.
HQ: Warsaw, Poland • Dental Care • Health Care • Hospitals & Clinics
≈ $40k – $80k per year (Estimated) • In office (Warsaw, Poland) • Full-Time • Polish: C1
CI/CD
Grafana
Kubernetes
GitHub
Cybersecurity
Checkmarx
ISO 27001
OWASP ASVS
OWASP SAMM
OWASP ZAP
SonarQube
STRIDE
Threat Modeling
Starfish Holdings is an employee-owned defense holding company headquartered in Huntsville, Alabama, whose operating history traces back to the 2002 founding of its main subsidiary Torch Technologies. The group delivers research, systems engineering, modeling and simulation, and test support services to United States defense and missile defense programs through Torch Technologies, Freedom Real Estate & Capital, and SIMVANA. It is owned entirely by the Starfish Employee Stock Ownership Plan and staffs programs at Redstone Arsenal, Wright-Patterson Air Force Base, and other federal sites.
HQ: Huntsville, United States • Science & Engineering • IT Consulting • Missiles • C4ISR • Military • Information Technology • 1001-5000 employees • Est. 2002
≈ $90k – $181k per year (Estimated) • Senior • 5+ years exp • In office (Redstone Arsenal, United States) • Relocation • Bachelor's Degree • Internship • Senior
Medius provides an AP automation software suite to help midsized businesses gain control and reduce risk of fraud by automating invoice and payment processing.
Manchester • London • Tunis • Kraków • Arnhem • Software • Financial Services • Artificial Intelligence
Senior • 5+ years exp • In office (Tunis, Tunisia) • Bachelor's Degree • Full-Time • Senior
C#
Python
AI/ML
LLM
Cybersecurity
CWE
OWASP Top 10
Threat Modeling
OWASP SAMM
Logitech International is a global technology enterprise specializing in software-enabled hardware solutions for workspace productivity, video collaboration, digital content creation, and gaming. Headquartered in Lausanne, Switzerland, with operational headquarters in California, the company's product ecosystem encompasses personal computer peripherals - such as mice, keyboards, webcams, and audio headsets - alongside enterprise conference room systems and specialized creator tools.
Cork • Vienna • Hsinchu • Shenzhen • Shanghai • Hardware • Peripherals • 201-500 employees
≈ $30k – $76k per year (Estimated) • Staff+ • 6+ years exp • Remote/Hybrid (Chennai, India) • Full-Time • Architect
LLM
Edge AI
LLM Guardrails
DevOps
AWS
Azure
GCP
Cybersecurity
OWASP SAMM
Threat Modeling
Founded in 2018 and headquartered in West Jakarta City, Indonesia, Ajaib is an investing platform to buy and sell stocks, ETFs, and mutual funds.
HQ: Jakarta, Indonesia • FinTech • Financial Services • Capital Markets
Lead • 8+ years exp • In office (Jakarta, Indonesia) • Bachelor's Degree • Full-Time • Staff
Go
Java
Node JS
Python
JavaScript
DevOps
AWS
Bitbucket
CI/CD
Docker
GCP
Kubernetes
GitHub
GitLab
Cybersecurity
Burp Suite
OWASP ASVS
OWASP SAMM
OWASP Top 10
Semgrep
Snyk
SonarQube
STRIDE
Threat Modeling
Supermetrics is a Finnish software company founded in 2013 and based in Helsinki. Its product moves marketing data into spreadsheets, warehouses and reporting tools. The service is used by tens of thousands of companies.
HQ: Helsinki, Finland • Data & Analytics • Est. 2013
Staff+ • 8+ years exp • Helsinki • Remote (Finland) • Full-Time • Staff
PHP
Python
DevOps
AWS
Azure
CI/CD
GCP
Kubernetes
GitHub
GitLab
IAM
Cybersecurity
CIS Benchmarks
ISO 27001
OWASP ASVS
OWASP SAMM
Threat Modeling
Marketing
HubSpot
Solidgate is a financial technology company headquartered in London, United Kingdom, and founded in 2018. The company provides a payment orchestration platform that enables businesses to manage multiple payment service providers, optimize transaction routing, and handle subscription billing, fraud prevention, and tax calculation. It serves global clients in the software-as-a-service and e-commerce sectors, offering infrastructure that supports card acquiring, alternative payment methods, and multi-currency treasury operations.
HQ: London, United Kingdom • Commerce • Fraud Detection • Cybersecurity • Billing & Invoicing • Software • FinTech • Financial Services • Payments • 201-500 employees • Est. 2018
≈ $33k – $84k per year (Estimated) • Junior • 2+ years exp • Warsaw • Nicosia • Lviv • Remote (Cyprus, Poland, Ukraine) • Full-Time • Junior
CI/CD
Shift-Left
Cybersecurity
OWASP ASVS
OWASP SAMM
OWASP Top 10
Threat Modeling
Shift-Left Security
Salary range
| Seniority |
Jobs |
25% |
Median |
75% |
| All levels |
14 |
$60K |
$119K |
$136K |
Few employers in this selection publish pay, so these figures are Alion estimates built from comparable listings by role, level and country. Gross annual, converted to USD.
The market right now
Alion currently lists 25 open OWASP SAMM jobs from 21 companies. 2 of them were posted or refreshed in the last seven days. 17 of the employers have posted something in the last three months, which is the pool worth watching if you are starting a search now. Every listing links straight to the employer, so you apply on their own board rather than through an intermediary.
What these roles pay
Most employers in this selection do not publish a figure, so the range below is Alion's own estimate, derived from 14 comparable listings priced by role, level and country. Across them the middle half of the market sits between $60K and $136K a year, with a median of $119K. Figures are gross annual amounts converted to US dollars, so roles in different currencies stay comparable.
Where the work is
The largest concentrations of these roles are Poland (2), Ukraine (1), Tunisia (1), Cyprus (1), and Finland (1). 32% of the listings are fully remote and a further 16% are hybrid, so a large part of this market is open to you regardless of where you live.
Who is hiring
The employers with the most open OWASP SAMM jobs right now are Clickhouse (3), Benevity (2), Black Duck Software (2), Nedap (1), Booz Allen Hamilton (1), and Aras (1). Each company page on Alion carries its size, funding stage, tech stack and every other position it has open, so you can judge the employer before you spend an evening on the application.
What employers ask for
Reading across the current listings, the tools that come up most often are OWASP SAMM (25), Threat Modeling (19), AWS (14), CI/CD (13), OWASP Top 10 (10), Azure (10), Kubernetes (10), and Python (9). The counts are how many of these openings name each one, which is a better guide to what is actually being hired for than a generic skills list.
Relocation, visas and equity
Of the current OWASP SAMM jobs, 2 offer a relocation package and 4 include equity. These are filters on the list above, so you can narrow it to the ones that make a move possible for you.
