Hey — Let's find your next opportunity 🚀

Spin.AI is a global SaaS cybersecurity company that protects mission-critical data across Google Workspace, Microsoft 365, Salesforce, Slack & more. Our product — SpinOne — unifies SSPM, ransomware protection, DLP, backup & recovery in one platform trusted by enterprise customers worldwide.

We are looking for a Junior/Middle UI/UX Designer to help us design clear, scalable, and trustworthy user experiences for our cybersecurity SaaS platform and AI-powered product features.

This role is a great fit for someone who is curious, proactive, comfortable using AI tools, and interested in complex B2B products. For Middle-level candidates, experience with cybersecurity, enterprise SaaS, or security-related products will be a strong advantage.

You will work closely with Product, Engineering, and other stakeholders to turn complex product logic into simple, intuitive, and visually consistent user experiences.

You’ll design web application interfaces, dashboards, user flows, prototypes, and reusable components while supporting and evolving our design system.

This role is based in our Malaga office in a hybrid format. If you are not currently in Malaga, we are open to remote work during the trial period, with relocation to Lisbon afterward.

🧰 Day-to-Day Responsibilities

• Design UX/UI solutions for a complex cybersecurity SaaS product
• Create wireframes, user flows, prototypes, and high-fidelity UI designs
• Work with AI-powered product features and enterprise workflows
• Maintain and scale reusable components and design system patterns
• Collaborate with Product and Engineering to clarify requirements and improve UX
• Use AI tools such as Claude, Figma AI, or similar to support design workflows
• Ensure consistency, usability, responsive behavior, and visual quality across the product
  

📌 Requirements

• 1+ year of experience in UX/UI Design, Product Design, or similar
• Experience designing web applications, SaaS products, dashboards, or complex interfaces
• Experience working with design systems and component-based design
• Strong proficiency in Figma
• Hands-on experience using AI tools in design workflows
• Ability to create wireframes, user flows, prototypes, and high-fidelity UI designs
• Good understanding of UX principles, interaction design, visual hierarchy, and user-centered design
• Understanding of responsive design and modern web application patterns
• Familiarity with design systems and component-based design
• Basic understanding of usability testing and iterative design process
• English: Intermediate+
  

Nice-to-have

• Experience with cybersecurity, security products, or enterprise SaaS
• Experience designing AI-powered product features
• Understanding of trust-centered design for AI-powered or security-related products
• Experience with complex data, dashboards, admin panels, permissions, alerts, or monitoring systems
• Interest in AI, cybersecurity, SaaS, or enterprise software
  

🌍 Why Spin.AI

• Work in a fast-moving, high-impact cybersecurity company recognized by Gartner, Forrester, and G2.
• Work on a real product with real users and visible business impact
• Work on an interesting and large-scale product
• Solve complex, non-trivial security and engineering challenges
• Opportunity to influence technical and product decisions
• Trust from management and autonomy in day-to-day work
• Strong, professional team with deep expertise
  

🎁 What we offer

• Annual performance-based salary review
• Annual performance-based bonus
• Referral bonuses
• Educational budget
• Sport & hobby compensation
• Medical insurance compensation
• Company presents (birthdays, anniversaries, weddings, etc.)
• Corporate travel parties twice a year

Position Summary:

The Information System Security Officer (ISSO) provides senior-level cybersecurity engineering and compliance support to the Defense Information Systems Agency (DISA) Internet Enterprise (IE) under the CTAS Task Order. This role is responsible for ensuring mission systems achieve and sustain Authorization to Operate (ATO) through implementation of the Risk Management Framework (RMF) and transition from legacy DIACAP requirements. The ISSO – Level 3 acts as both a technical and compliance leader, bridging vulnerability management, STIG/SRG application, and documentation development to create complete and accurate accreditation packages. This position serves as a senior-level resource, providing mentorship to mid-level and junior ISSOs, while interfacing with Government stakeholders, Information System Security Managers (ISSMs), and Authorizing Officials (AOs).

Key Responsibilities:

The ISSO is expected to perform duties that span both hands-on technical tasks and high-level compliance oversight. Core responsibilities include:

• Leading the development, maintenance, and validation of RMF and A&A artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), configuration management records, and testing documentation.
• Implementing and validating compliance with DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) to maintain technical baselines across supported systems.
• Managing and analyzing results from vulnerability scanning and compliance tools such as ACAS, HBSS, and CMRS, and ensuring timely remediation of findings in accordance with IAVM directives.
• Preparing and submitting comprehensive accreditation packages in eMASS, ensuring accuracy, completeness, and timeliness of submissions to meet contract and PWS requirements.
• Conducting and documenting Security Test and Evaluation (ST&E) activities, ensuring objective assessment of control implementation and risk posture.
• Supporting and preparing for Command Cyber Readiness Inspections (CCRI), Security Assessment Visits (SAV), and Cooperative Vulnerability Penetration Assessments (CVPA) by creating corrective action plans, briefing results, and tracking closure of findings.
• Providing mentorship and guidance to junior ISSOs, ensuring proper interpretation of DoD cybersecurity policy and consistent application of standards across the team.
• Contributing to recurring deliverables such as Policy Compliance Reports, Risk Assessment Reports, and Directorate-level cybersecurity briefings, ensuring all outputs meet QASP Acceptable Quality Levels (AQLs).

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field.
• Must hold and maintain an appropriate DoD 8140.03 / 8570.01-M certification baseline for this labor category (e.g., Security+, CISSP, CISM, or equivalent as required).
• At least 7 years of experience in cybersecurity engineering, RMF/DIACAP accreditation, and compliance documentation in DoD environments.
• Expertise in the application of DISA STIGs/SRGs, ACAS/HBSS vulnerability analysis, and eMASS package preparation.
• Strong written and verbal communication skills, with demonstrated experience producing accreditation documentation and presenting risk findings to senior stakeholders.

Desired Qualifications:

• Master’s degree in Cybersecurity or related discipline.
• Experience supporting DISA programs and preparing for CCRI inspections.
• Advanced certifications such as CISSP-ISSAP or CISM.

Clearance Requirement:

Active Top Secret

Job Summary:

As a Forescout Cyber Security Engineer at Cinteot, you will play a critical role in safeguarding our information technology infrastructure. Your expertise will be essential in managing cybersecurity controls and enhancing our detection capabilities within a collaborative team environment.

Key Responsibilities:

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Contribute to risk and vulnerability assessments in network, system, and application areas, leveraging big data analytics to identify advanced threats or indicators of compromise.

Required Qualifications:

• 5+ years of experience performing systems administration for Windows or Linux, including troubleshooting, installation, configuration, and security upgrades.
• Experience architecting and designing IP networks, with the ability to develop and document network topologies.
• Knowledge of multi-domain architectures, including data center, WAN, and LAN in virtualized environments.
• TS/SCI clearance with the ability to obtain a counterintelligence (CI) polygraph.
• Associate’s degree with 5+ years of experience, Bachelor’s degree with 3+ years, or Master’s degree with 1+ year of experience supporting IT projects. Experience may be accepted in lieu of a degree.
• DoD 8570 IAT Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification.
• Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS) prior to the start date.

Additional Qualifications:

• Experience with deployment or daily maintenance of Forescout CounterACT appliances.
• Knowledge of federal information security policies, standards, and risk management processes for enterprise systems.
• Ability to install and deploy Forescout in customer environments.
• Ability to integrate Cybersecurity data using enterprise or custom data aggregation and analysis tools, including Splunk.
• Ability to provide support in a Tier II IT operations and maintenance role.
• Self-starter with excellent verbal and written communication skills.

Company Culture:

At Cinteot, we foster a culture of collaboration, innovation, and continuous learning. We believe in empowering our employees to grow both personally and professionally in a supportive environment.

As an Information Systems Security Engineer (ISSE), you'll:

-Facilitate sub-projects as they go through the Risk Management Framework (RMF) accreditation life cycle.
-Support the periodic system security scans as required by policy and the RMF.
-Validate and verify system security requirement definitions and analyze system security designs.
-Perform technical security assessments of computing environments to identify points of vulnerability, and then recommend mitigation strategies for those that do not comply with established Information Assurance (IA) standards.
-Experience manually reviewing network diagrams, network device configurations, termination points for VPNs, and a working knowledge of software TLS security.
-Able to maintain a flexible and non-traditional RMF review of secure networks to assess and prescribe countermeasures for secure communications e.g. analog radio, mobile cellular, remote kits, software/hardware-based VPN solutions and VDI technologies.
-Familiar with applying different standards and security frameworks to include CIS benchmarks, FIPS 140-2, DISA Stigs, CNSA cryptographic suite compliance, etc.
-Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments.
-Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components.
-Supported the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
-Applied knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments
-Supported security planning, assessment, risk analysis, and risk management.
-Identified overall security requirements for the proper handling of Government data.

Required Qualifications
-Bachelor’s degree in Cybersecurity, Information Technology, or related field.
-Must hold and maintain an appropriate DoD 8140.03 / 8570.01-M certification baseline for this labor category (e.g., Security+, CISSP, CISM, or equivalent as required).
-At least 7 years of experience in cybersecurity engineering, RMF/DIACAP accreditation, and compliance documentation in DoD environments.
-Expertise in the application of DISA STIGs/SRGs, ACAS/HBSS vulnerability analysis, and eMASS package preparation.
-Strong written and verbal communication skills, with demonstrated experience producing accreditation documentation and presenting risk findings to senior stakeholders.

Desired Qualifications
-Master’s degree in Cybersecurity or related discipline.
-Experience supporting DISA programs and preparing for CCRI inspections.
-Advanced certifications such as CISSP-ISSAP or CISM.

Clearance Requirement
-Active Top Secret clearance

The Opportunity:

Are you seeking an opportunity to enhance your expertise in satellite communications systems, including devices, implementing security systems, and identifying tools, that will support our country and safeguard our nation? As a Satellite Communications Systems Security Engineer, you will identify the necessary tools, security systems, devices, and applications required to assess vulnerabilities and recommend optimal solutions and security strategies. Your experience is needed to develop and implement security solutions that protect our military and infrastructure.

Join a team of communications and systems engineers supporting engineering, sustainment, and management of communications systems. You’ll perform ongoing system analyst activities for programs, perform risk assessments of systems and equipment, assist engineers with identifying solutions for vulnerabilities, create and map Security Technical Implementation Guides (STIGs), submit change requests for system components, develop a Plan of Action and Milestones (POA&M), create documentation supporting Risk Management Framework (RMF) accreditations, perform vulnerability management using automated systems, and create and submit RMF packages. You’ll brief the technical security posture to client leadership, prepare brief slides and summaries of vulnerabilities, and advise on how to prevent and mitigate future security threats.

In this role, you’ll closely impact a national security level communications system that provides vital information to strategic and tactical users of the DoD Teleport communications systems. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers.

What You’ll Work On:

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Perform risk and vulnerability assessments in network, system, and application areas and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
• Participate in the development of test strategies and conduct of testing, validating, and implementing applicable STIG requirements for current or new systems.
• Conduct periodic self-assessments of systems to ensure STIG compliance and create STIG checklists to support periodic self-assessments.
• Perform Information Assurance Vulnerability Management (IAVM) activities such as IA vulnerability alerts, bulletins, and tasking orders and develop a systematic approach for responses to IAVM related issues to maintain system compliance.

You Have:

• 7+ years of experience implementing, testing, and validating STIGs, performing system self‑assessments, and creating STIG checklists
• 7+ years of experience executing IAVM actions, such as IAVA alerts, bulletins, or tasking orders, and developing compliant engineering responses
• 7+ years of experience deploying and validating ESS, ACAS, and CMRS, analyzing ACAS scans, developing remediation strategies, and implementing patches and upgrades
• 7+ years of experience reviewing cybersecurity and engineering change requests to ensure operational availability and compliance
• Knowledge of RMF and its application to networks and IT systems, such as Cisco routers, switches, Active Directory, or access control
• Ability to manage users in Windows or Linux and administer VMs in VMware or Hyper‑V
• Ability to accredit and secure DoD systems using RMF, perform IAVA analysis, document POA&Ms, and prepare security assessment artifacts
• Secret clearance
• HS diploma or GED
• Security+ Certification

Nice If You Have:

• Possession of excellent verbal and written communication skills
• Top Secret Clearance
• Cybersecurity Certification, such as CISSP or Certified Ethical Hacker Certification, or Networking Certification, such as Network+ or Cisco Certification

About Spin.AI

Spin.AI is a SaaS Security company based in Palo Alto, CA and Los Angeles, CA, protecting enterprises against SaaS ransomware, Shadow IT, non-compliance, data loss and data leak disasters in the cloud.

SpinOne is an all-in-one SaaS data protection platform for mission-critical SaaS Apps, such as Google Workspace, Microsoft Office 365, Salesforce, and Slack. SpinOne is the ultimate SaaS data protection platform that delivers the most innovative last line of cyber defense, SaaS data management, and protection for more than 1,500 organizations worldwide. For more information, please visit: https://spin.ai/

Spin.AI is hiring its first Sales Operations Manager to lay the foundation for the revenue operations function. If you’re excited by helping sales teams scale and enjoy building in a hyper growth, dynamic environment, then look no further. This role reports directly to the SVP Finance and is based in our Glendale, CA office. 

What You’ll Own:

Revenue & Pipeline Operations

• Apply knowledge of SaaS revenue models (ARR, Upsell, Churn, and Renewals) to ensure Salesforce is capturing the data necessary for executive-level financial reporting
• Analyze funnel conversion metrics and identify opportunities to improve sales efficiency and win rates
• Build and maintain accurate pipeline reporting and dashboards 

Systems & Process Optimization

• Ensure timely and accurate sales order processing (Quote-to-Cash) 
• Liaise with the sales team to manage customer license provisioning 
• Administer CRM workflows, automation and improve data integrity

Cross-Functional Collaboration

• Act as the "boots on the ground" support for the sales team. You will help reps navigate complex deal structures
• Work closely with Sales & Marketing teams to align GTM operations
• Support rollout of new sales motions, pricing strategies, and go-to-market initiatives

Data Governance & Reporting

• Ensure CRM hygiene and reporting accuracy across all systems
• Standardize definitions, reporting methodologies and metrics
• Maintain documentation for key operational processes and policies

Qualifications:

• 3-5+ years of experience in Sales Operations, Revenue Operations, Business Operations, or Strategy roles within SaaS or high-growth technology companies
• Strong proficiency with Salesforce and HubSpot (Bonus: Stripe)
• Advanced analytical skills using spreadsheets, SQL, BI tools
• Strong project management and stakeholder management capabilities
• Excellent communication and executive presentation skills
• Ability to thrive in ambiguous, fast-paced environments
• Experience with sales compensation modeling and incentive design
• Bonus: Passion or interest in cybersecurity

What we offer:

• Competitive compensation (base salary $100k-$130k + 10% bonus)
• 401k plan 
• 100% dental, medical and vision 
• Unlimited PTO and hybrid flexibility (2-3 days in Glendale office)
• Fitness & wellness budget ($1,200 per year)

Why Spin.AI?

• Forbes Named Spin.AI One of America's Best Startup Employers THREE Years in a Row (2024- 2026)
• Work in a fast-moving, high-impact cybersecurity company recognized by Gartner, Forrester, and G2.
• Collaborative, transparent culture – your ideas and experiments matter.
• Direct impact: your work translates into real business growth and visibility.
• Remote flexibility, growth opportunities, and performance-based rewards.

Why join Spin.AI?

This is an incredible opportunity to join a fast-paced team with high growth potential to become a new unicorn or decacorn within the next few years.

Dream team of highly motivated and talented people, ambitious goals and challenges that require high analytical, management and communication skills.

EEO Statement

Equal Opportunity Employer

Spin.AI is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive considerations for employment without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status under federal, state, or local anti-discrimination laws. 

View The EEO is the Law poster and its supplement. 

Disability Accommodation

For individuals with disabilities that need additional assistance at any point in the application and interview process, please contact our HR Manager, Shushan Akopian via shushan@spin.ai.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.