Assist customers with application security testing tool configurations and triage support.
Lead AppSec Program maturity assessments using frameworks like BSIMM and SSDF.
Develop Strategic Roadmaps and deliver presentations to executive leadership.
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. It is a recognized pioneer in application security, providing SAST, SCA, and DAST solutions.
Lead technical discovery, demonstrations, and validation to showcase how GitLab's AI-powered DevSecOps platform meets customer requirements across the software development lifecycle.
Own the technical evaluation process, including solution design, proofs of concept, workshops, and tenders, while collaborating with Account Executives on enterprise account strategies.
Build trusted relationships with technical practitioners and business leaders, guiding them through GitLab-supported transformation and representing the voice of the customer to product management.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity and accelerate digital transformation. With over 50 million registered users and trusted by more than 50% of the Fortune 100, GitLab fosters a high-performance, remote-first culture driven by values and continuous knowledge exchange.
Architect and automate security workflows across CI/CD and compliance operations.
Integrate and monitor security tooling within automated pipelines.
Build automation for compliance and ATO artifacts.
Our partner is a technology company that builds secure, automated cloud environments for mission-critical programs. They offer a fully remote work model with a focus on autonomy and work-life balance.
You will own end-to-end data protection: architecting security infrastructure, managing PCI/SOC2 programs, and setting the security roadmap.
You will integrate security scanning (SAST, DAST, SCA) into CI/CD pipelines and harden containerized and cloud-native environments.
You will configure IAM and SSO platforms, manage EDR/DLP/SIEM tooling, and run security awareness training.
Campminder builds software for summer camps, enabling meaningful experiences for kids. With over 100 employees, they are stable, profitable, and have a values-led culture committed to work/life balance.
Lead technical direction of customer engagements from scoping through delivery, designing architectures and implementation plans for GitLab infrastructure.
Coordinate implementation work across GitLab Professional Services and partner consultants, supporting deployments in cloud and on-premises using Terraform, Ansible, and the GitLab Environment Toolkit.
Provide DevOps and DevSecOps consulting, create reusable delivery kits and documentation, and share product release updates to ensure consistent outcomes.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity and accelerate digital transformation. With over 50 million registered users and more than 50% of the Fortune 100 trusting GitLab, the company fosters a high-performance, values-driven culture focused on innovation and collaboration.
Build, deploy, and maintain cloud-based IAM systems using DevSecOps practices and cloud-native architecture.
Ensure rapid and reliable delivery of code changes through CI/CD, automated testing, and deployment into production.
Lead evergreening activities, environment support, and compliance with federal requirements.
PingWind delivers services to the federal government in cybersecurity, development, IT infrastructure, and supply chain management. They are an SBA certified Service-Disabled Veteran-Owned Small Business with offices in Northern Virginia and Huntsville AL.
Design and implement secure CI/CD pipelines and DevSecOps processes for the VA COSE program.
Integrate security controls and automated testing throughout the software development lifecycle.
Collaborate with cybersecurity and development teams to ensure secure, compliant, and repeatable deployments.
9th Way Insignia is a service-disabled, veteran-owned small business that brings transformative technology to government customers. The company specializes in cybersecurity, cloud modernization, software development, and data analytics, and fosters a culture of innovation and mission-driven work.
Collaborate with DevOps and engineering teams to embed security throughout the software development lifecycle.
Implement automated security testing, including SAST, DAST, SCA, and container security, and strengthen cloud-native security controls.
Support compliance with PCI-DSS, GDPR, CCPA, and SOC 2, and evaluate secure adoption of AI-assisted coding tools.
Our partner is a technology company in the travel and hospitality industry. They have a collaborative remote culture and value employee development and diversity.
Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization.
Partner with DevOps and CI/CD engineers to embed shift-left security practices throughout the software development lifecycle.
Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.
LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials straight from the browser. Trusted by more than 100,000 businesses and millions of users worldwide, they blend strong security with everyday simplicity in a remote-first, collaborative culture.
Lead technical discovery with prospects to understand their architecture and challenges.
Design solution architectures across SCM, CI/CD, ticketing, registries, and identity systems.
Own proof-of-value engagements end-to-end, connecting platform capabilities to measurable outcomes.
Apiiro is the Agentic AppSec Platform built to transform how development teams design, develop, and deliver secure software. They are a pioneering company in ASPM, focused on deep code analysis and risk context.
Lead secure code reviews, threat modeling, and secure design assessments to translate findings into actionable guidance.
Design and integrate application security controls across CI/CD platforms and developer workflows.
Define secure coding standards, reference architectures, and automated security capabilities scalable to engineering teams.
Jobgether is a platform that uses AI-powered matching to connect candidates with job opportunities, ensuring rapid and fair application reviews. They focus on leveraging technology to streamline hiring processes and are committed to data privacy and professional growth.
Design and build secure CI/CD pipelines with integrated security tooling to accelerate product delivery.
Harden cloud infrastructure on AWS and Azure using infrastructure-as-code and enforce policy with OPA or Sentinel.
Lead threat modeling, incident response, and mentor engineers on secure coding and operational security.
PAR Technology provides software and hardware solutions for over 100,000 restaurants in 110+ countries. A publicly traded company with a focus on innovation and collaboration, it fosters a culture of continuous improvement.
Embed security into every phase of the SDLC and champion secure design for Gen AI and agentic AI tools.
Perform secure code reviews, threat modeling, and establish secure API patterns across engineering teams.
Operate the application vulnerability management lifecycle and communicate risk to engineering and business leaders.
GameChanger builds a platform for youth sports, helping families elevate the next generation through community and technology. They are a remote-first, dynamic tech company based in New York City, solving major challenges in youth sports.
Architect and oversee advanced security monitoring and threat detection frameworks across diverse systems and log sources.
Lead the integration of security into the software development lifecycle, including Security-as-Code and automated SAST, DAST, and SCA capabilities within CI/CD pipelines.
Own the end-to-end vulnerability management strategy across infrastructure and applications, prioritizing remediation according to business risk.
The partner company operates a large-scale digital platform and a globally distributed technology ecosystem connected to gaming and esports communities. They maintain a flexible, distributed, and inclusive work environment focused on equal opportunity and technical ownership.
Design, build, and maintain CI/CD pipelines for application and infrastructure delivery.
Automate infrastructure provisioning and configuration using Terraform and Ansible.
Integrate security scanning, vulnerability detection, and automated testing into software delivery pipelines.
This company delivers secure, reliable technology for critical federal acquisition systems. They offer a remote work environment and support mission-critical government technology initiatives.
Translate security policy into practical, deployable solutions across applications, data environments, and AI systems.
Design, build, and deploy security controls for web applications, data pipelines, APIs, and Agentic AI systems.
Implement secure-by-design practices throughout the software development lifecycle, including code-level remediations and configuration hardening.
EnableComp provides Specialty Revenue Cycle Management solutions for healthcare organizations, leveraging over 24 years of industry-leading expertise. A multi-year recipient of the Top Workplaces award, they have been recognized as Black Book's #1 Specialty RCM Solution provider in 2024 and are among the top one percent of the Inc. 5000 fastest-growing private companies in the US for eleven years.
Lead the design and execution of cybersecurity architecture and engineering to ensure compliance with internal and external policies.
Partner with business leaders to identify risks, develop solutions, and embed security into enterprise strategy.
Oversee deployment, integration, and optimization of security tools while driving cloud-native security improvements.
U.S. Financial Technology builds and operates the world's largest mortgage securitization platform, supporting the Uniform Mortgage-Backed Security of Fannie Mae and Freddie Mac. It handles 70% of mortgage-backed securities and fosters a collaborative, remote-first culture.
Design and maintain AWS infrastructure using Terraform and ECS/Fargate, ensuring high availability and security.
Implement and manage CI/CD pipelines with automated deployment and rollback processes.
Collaborate with teams for monitoring, incident response, and security compliance.
Bluelight is a leading software consultancy that designs and develops innovative technology to enhance users' lives. The company is expanding across the United States and Central/South America, fostering a collaborative and enriching work environment where team members can grow and thrive.
Design, build, and optimize secure CI/CD pipelines within GitLab, enforcing DevSecOps principles through automated vulnerability scanning and compliance gates.
Manage and scale AWS infrastructure, optimizing workloads on EKS, EC2, S3, and RDS.
Establish comprehensive monitoring, logging, and alerting systems across EKS and EC2 nodes to ensure maximum uptime.
LMI is a digital solutions provider that accelerates government impact with innovation and speed, offering commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, the company serves defense, space, healthcare, and energy sectors, focusing on agility and collaboration.
Design, implement, and maintain security controls across AWS environments, including IAM, VPC, encryption, and logging.
Integrate security checks into CI/CD pipelines and harden Kubernetes/EKS workloads using Terraform and policy-as-code.
Automate vulnerability management, security monitoring, and incident response to reduce cloud and application risk.
Electric Power Engineers provides consulting expertise and energy intelligence software solutions for power and energy clients, focusing on modern, secure, and resilient grid challenges. They are leaders in the renewables space and emphasize collaboration, innovation, and making an impact on communities and the environment.