Design and build production-grade Python reconnaissance workflows to discover and enumerate external-facing assets at scale.
Research and parse messy external data sources to turn unstructured information into actionable attack intelligence.
Automate multi-step attack paths from initial access to post-exploitation, and mentor engineers to raise the bar.
Horizon3 is a fast-growing, remote cybersecurity company that builds NodeZero, an autonomous pentesting platform. The team is a fusion of former special operations cyber operators and startup engineers, committed to a culture of respect, collaboration, and results.
Lead advanced security assessments across web applications, APIs, cloud platforms, and enterprise networks.
Conduct red team activities, vulnerability research, and custom tool development to simulate real-world attacks.
Collaborate with cross-functional teams to assess risks, support remediation, and mentor colleagues.
Hitachi Vantara provides data infrastructure for global innovators across industries. As a diverse, global team, they foster an inclusive culture focused on making a real-world impact with data.
Support incident management and improve secure development lifecycle.
Streamline customer security questionnaires and develop disaster recovery plans.
Automate and optimize cloud infrastructure with GCP, Kubernetes, and observability tools.
Federato is an AI-native platform bringing agentic AI to the insurance policy lifecycle. The company has raised $180M, with powerful product-market fit, and is growing fast globally with an advanced AI team.
Validate vulnerabilities and configuration weaknesses to determine practical exploitability and develop realistic attack paths across web, cloud, identity, and infrastructure.
Conduct purple-team exercises and translate offensive findings into actionable improvements for detection and response.
Backblaze is the object storage leader in the open cloud movement, providing cloud storage services to businesses, developers, and individuals. Founded in 2007 and publicly traded since 2021, the company generates over $136M in annual recurring revenue, manages over three billion gigabytes of data for 500K+ customers in 175+ countries, and fosters a culture centered on diversity, equity, and inclusion.
Manage vulnerability scanning and monitoring across GCP and applications.
Lead remediation efforts and partner with engineering on larger fixes.
Maintain security logging, monitoring, and incident response readiness.
Blueberry turns every family's living room into a personal pediatric urgent care using home exam kits, concierge access, and AI-enabled pediatricians. They are a mission-driven company focused on improving healthcare access for children.
Own and strengthen security across the product stack, partnering with engineering throughout development.
Build security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
Lead security reviews, threat modeling, and drive security compliance programs and incident response.
Early-stage B2B identity and access management company focused on building secure product systems. Small, collaborative team seeking its first dedicated security engineer to help grow the security function.
Lead, coach, and grow a team of Attack Engineers focused on internal network attacks, from Active Directory to Linux, databases, and network infrastructure.
Define and execute the internal attack strategy and roadmap, driving production-safe autonomous attacks across large enterprise networks.
Partner with Product and other engineering teams to set engineering standards, own hiring, and serve as the escalation point for customer issues.
Horizon3 is a fast-growing remote cybersecurity company that develops the NodeZero platform for autonomous pentesting and attack path verification. The team includes former U.S. Special Operations cyber operators and engineers, with a culture of respect, collaboration, ownership, and results.
The Senior Architect leads offensive security engagements focusing on cloud and AI testing, uncovering vulnerabilities in modern environments.
They serve as technical lead, define testing approach, produce high-quality reports, and present findings to stakeholders.
They develop testing methodologies, research emerging attack techniques, and mentor team members.
Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. We employ more than 1,200 people across the United States and our culture embodies the spirit of a startup with the advantage of a scalable business.
Design, deploy, and manage secure GCP infrastructure using Terraform and CI/CD pipelines.
Architect cloud networking, IAM, and observability solutions while mentoring engineers.
Automate operations with Python/Bash and leverage AI assistants to accelerate delivery.
Valtech is an experience innovation company that helps brands unlock new value through data, AI, creativity, and technology. It fosters a values-driven, global culture focused on collaboration, continuous learning, and professional growth.
Plan and run authorized red team operations across cloud, Kubernetes, networks, identity systems, SaaS, and internal applications.
Build and maintain AI-assisted testing harnesses for automated offensive security testing.
Work collaboratively with Whatnot’s Blue Team on Purple Team engagements to strengthen security posture.
Whatnot is the largest live shopping platform in North America and Europe. They are one of the fastest growing marketplaces and were named the #1 Best Startup Employer in America, with a culture emphasizing low ego, growth mindset, and high impact.
Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
Partner with security engineering to turn findings into actionable defense improvements.
Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.
Partner with Fortune 500 customers to address security concerns and accelerate platform adoption.
Develop security reference architectures and perform threat modeling for ServiceNow products and AI services.
Lead security deep dives covering cloud-native architectures, identity, encryption, and AI security controls.
ServiceNow is an AI platform that helps enterprises automate workflows and reinvent business processes. The company serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent work together.
Provide security support for infrastructure and end-user systems, including macOS endpoints and cloud environments.
Manage AI governance, vulnerability management, and endpoint security across a global remote team.
Handle vendor security assessments, audit observations, and third-party app reviews.
Gurobi Optimization empowers customers to expand their use of mathematical optimization technology for smarter decision-making. They are a small company with employees across 16 countries, fostering a collaborative and innovative culture.
Implement and improve security controls across corporate infrastructure and AI solutions.
Develop SIEM/XDR monitoring, vulnerability management, and secure CI/CD baselines.
Validate security weaknesses and automate tasks with Python, PowerShell, and AI tools.
Toogeza is a Ukrainian recruiting company that hires talent and builds teams for tech startups worldwide. The culture values practical engineering skills, independent problem-solving, and translating governance requirements into technical implementation.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.
symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.
Design and build red team agents, architecting harnesses, tools, and MCP servers to encode offensive tradecraft.
Drive full-chain attack operations across Windows, Active Directory, on-prem, cloud, and network surfaces.
Build detection-evasion capabilities, cyber ranges, and benchmarks to verify agent improvements against real defenses.
Cogent is an applied AI lab building AI agents for cybersecurity, using its AI Taskforce to assess petabytes of enterprise data and prevent breaches. Backed by Greylock and Bain Capital Ventures, the team includes experts from top universities, leading tech companies, and world-class cybersecurity firms.
Plan, scope, execute, and report on penetration tests across cloud, endpoint, web, and API environments.
Partner with development teams to embed security testing into their release cycles and mature SDLC practices.
Lead quarterly red and purple team operations simulating real-world adversaries to test detection and response.
Group 1001 is a consumer-centric, technology-driven family of insurance companies that delivers value by combining financial strength with deep insurance expertise. The culture emphasizes collaboration, communication, risk management, and striving for outcomes, fostering a supportive work environment.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.