Own the product security research agenda and turn emerging threats into strategy.
Partner with Product, Engineering, and Security leadership to shape roadmap decisions.
Represent Chainguard externally through talks and thought leadership to advance the industry.
Chainguard delivers hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. They are a venture-backed, remote-first company serving Fortune 500 enterprises and global leaders, with a culture focused on customer obsession and intentional action.
Review cybersecurity prompts submitted to an AI system that cannot be confidently classified as benign or malicious.
Determine the underlying intent behind each prompt and assess whether the user is pursuing a legitimate purpose or intent to cause harm.
Annotate each prompt with an intent label and a clear rationale, escalating ambiguous cases to a reviewer.
This company builds specialized evaluation infrastructure for AI safety and robustness testing. Their platform simulates adversarial conditions to validate AI agent behavior before deployment, and they are currently expanding their contributor network.
Own and run bug bounty programs and external audit engagements, triaging and validating fixes.
Secure code and software supply chain, including CI/CD defenses, dependency controls, and signing.
Build anti-scam, anti-abuse, and security tooling with static/dynamic analysis and LLM-driven agents.
Mysten Labs builds foundational blockchain infrastructure and products, including Sui and Move, to advance the internet and enable the agent economy. It is a remote-first, world-class team backed by a $300M Series B from leading venture funds.
Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, and cloud environments.
Turn vulnerability research and attacker tradecraft into safe, repeatable automated attack capabilities.
Validate remediation and collaborate with research, product, and engineering teams.
Horizon3 is a fast-growing remote cybersecurity company that helps organizations proactively find, fix, and verify exploitable attack vectors. Its NodeZero platform delivers autonomous pentests, and the team is a collaborative culture committed to respect, ownership, and results.
Set product security direction across major products and platforms, leading cross-functional initiatives.
Embed security by design into roadmaps and engineering work, with high autonomy.
Drive security assurance programs and mentor engineers across the organization.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.
Design and build red team agents, architecting harnesses, tools, and MCP servers to encode offensive tradecraft.
Drive full-chain attack operations across Windows, Active Directory, on-prem, cloud, and network surfaces.
Build detection-evasion capabilities, cyber ranges, and benchmarks to verify agent improvements against real defenses.
Cogent is an applied AI lab building AI agents for cybersecurity, using its AI Taskforce to assess petabytes of enterprise data and prevent breaches. Backed by Greylock and Bain Capital Ventures, the team includes experts from top universities, leading tech companies, and world-class cybersecurity firms.
Lead technical initiatives to strengthen engineering security across Aiwyn's SaaS platform, CI/CD pipelines, and software delivery systems.
Own vulnerability management, threat modeling, and product security, partnering with engineering teams to build secure-by-default practices.
Drive supply chain security, AI security, and security strategy to make security a shared responsibility across engineering.
Aiwyn builds the first complete platform for modern accounting firms, replacing legacy practice management systems with software firms can trust. Backed by top-tier investors, it works with the majority of the Top 500 accounting firms and fosters a culture of ownership, trust, and relentless innovation.
Design and ship code security analyzers blending deterministic detection with AI-driven analysis for vulnerabilities in code and dependencies.
Own initiatives end-to-end as the directly responsible individual, from design to delivery, while mentoring intermediate engineers through review.
Extend dependency parsing, SBOM handling, and automated remediation across GitLab's security analysis platform.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to improve developer productivity and accelerate digital transformation. Trusted by over 50 million users and more than half of the Fortune 100, it fosters a high-performance culture driven by values, AI adoption, and continuous knowledge exchange.
Lead the technical direction of a vulnerability intelligence practice, setting standards for validation and communication.
Research and validate newly disclosed vulnerabilities, including testing proof-of-concept exploits in isolated environments.
Build honeypots, detection methods, and automation to monitor real-world exploitation and deliver actionable intelligence.
They are a cybersecurity intelligence company focused on vulnerability research and real-world risk assessment. They are a remote-friendly international team with a collaborative culture built on openness, inclusion, integrity, and continuous learning.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Design and implement software supply chain security controls across build and release pipelines.
Secure GitHub and GitLab environments, implement SBOM generation, and integrate vulnerability scanning into CI/CD.
Align security practices with SLSA, NIST SSDF, and NIST SP 800-218 while collaborating with security and engineering teams.
New Era Technology securely connects people, places, and information with end-to-end technology solutions at scale. With a global team of over 3,000 professionals, it fosters a team-oriented culture focused on personal and professional development.
Plan and execute hands-on penetration tests on IoT, ICS/OT, and automotive targets, owning engagements end-to-end.
Perform hardware exploitation, firmware reverse engineering, and wireless/vehicle protocol assessments using industry tools.
Collaborate with platform and research teams to improve detection capabilities and represent Finite State externally.
Finite State provides product security teams with a platform to detect vulnerabilities and manage software supply chain risks across connected devices and embedded systems. They are a fast-growing, fully distributed series-B company with a mission-driven, remote-first culture.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Own and scale the vulnerability management program, including triage, prioritization, and remediation.
Embed security into the SDLC by integrating automated gates, threat modeling, and design reviews.
Drive cross-team security initiatives and mentor engineers to improve overall posture.
Figure is a blockchain-native capital marketplace for the origination, funding, and trading of tokenized assets. It has over 480 partners, has originated $30 billion in loans, and is recognized as a top fintech company.
Work on client consulting projects to design and implement cloud native security architectures across AWS, GCP, and Azure.
Contribute to internal labs and open source projects, with a focus on threat modelling, supply chain security, and DevSecOps practices.
Collaborate with a team of SANS authors and engineers to deliver pragmatic security solutions for highly regulated industries.
ControlPlane is a London-based consultancy specialising in cloud-native, Kubernetes, and open source solutions, helping organisations secure complex cloud infrastructures with secure-by-design principles. As a successful start-up, we are a dynamic, cutting-edge, and passionate team that values employee wellbeing, progression, and open source community engagement.
Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.
n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.
Conduct original offensive research against Dia, including prompt injection, sandbox escape, and cross-profile data access.
Threat model new surfaces with engineering teams and review features before they ship.
Build automated vulnerability discovery systems, including fuzzing and AI-assisted hunting pipelines.
The Browser Company is building a better way to use the internet, with a focus on an AI-powered browser called Dia. They are a remote-first team of nearly 100 people who value diversity and craft.
Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
Partner with DevOps on paved roads for secure-by-default development and lead incident response.
Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.
Investigate and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information.
Translate technical findings into clear attack paths, business impact, and actionable remediation, and drive durable fixes through verified closure.
Build and operate security tools and integrations using code, APIs, automation, and AI agents, and design controls for agent access and execution.
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. They value diverse perspectives and are an equal opportunity employer.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.