Take end-to-end ownership of security across a platform serving 50 million users, spanning application security, GRC, and AI security.
Collaborate closely with engineering leadership and development teams to identify vulnerabilities, strengthen controls, and drive remediation.
Protect AI-powered systems against evolving threats like prompt injection, jailbreaks, and third-party provider vulnerabilities.
They are a rapidly growing AI-powered technology platform serving over 50 million users worldwide. As a scale-up with more than 50 employees, they foster a high-autonomy, execution-focused culture with direct access to leadership.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Operate and maintain application security scanning tools including SAST, SCA, secrets scanning, and container scanning throughout the SDLC.
Review and triage security findings, validate true positives, and collaborate with engineering teams to prioritize remediation activities.
Support onboarding of new repositories, maintain documentation, and assist with scripting and automation to improve security workflows.
This company is a partner organization with a collaborative security team focused on strengthening application security across a diverse portfolio of digital products and services. It fosters an inclusive, collaborative culture with employee communities and emphasizes learning and development.
Partner with engineering and product teams to review architecture, assess security risks, and drive secure-by-default practices.
Build and maintain security tooling, automate workflows, and strengthen application security across the SDLC.
Lead cross-functional security projects, promote security awareness, and support bug bounty and vulnerability research.
They are a remote-first security company that helps organizations identify and address vulnerabilities before they become serious threats. The team is collaborative and fast-paced, valuing initiative, continuous learning, and diverse perspectives.
Design guardrails for AI-powered products and build automated security tooling for an AI-first workforce.
Implement preventive, default-on security controls across cloud and enterprise environments using policy-as-code.
Manage identity and access controls for AI systems and non-human agents, and integrate security tooling with LLM layers.
Rithum is the world's most trusted commerce network, accelerating how brands, suppliers, and retailers deliver seamless e-commerce experiences. More than 40,000 companies trust Rithum, representing over $50 billion in annual GMV, and the culture is remote-first, collaborative, and focused on AI-driven innovation.
Investigate and remediate application security vulnerabilities directly in code, implementing fixes and submitting pull requests.
Deploy, configure, and optimize SAST and SCA tools across repositories and CI/CD pipelines, reducing false positives.
Triage and prioritize security findings while collaborating with engineering teams to embed secure coding practices.
Partner company is a technology firm delivering large-scale international projects with a focus on integrating application security into the software development lifecycle. They foster a collaborative, globally distributed engineering culture with an informal environment, open-door policy, and continuous learning opportunities.
Lead and mature Affirm's Security Third Party Program, designing and implementing scalable processes and controls.
Own pre-launch security due diligence for third parties supporting international expansion and M&A.
Drive automation with Python and agentic coding tools to replace manual GRC work with code-defined workflows.
Affirm provides clear, predictable buy now, pay later financial products with no hidden fees. It is a remote-first company that values security, transparency, and care, offering flexible benefits and an inclusive culture.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Build AI-first SaaS products, including LLM-powered workflows, retrieval over compliance content, and in-product agents.
Develop and optimize agentic, pipeline-driven development systems where AI coding agents plan, write, test, and review code under strong engineering oversight.
Maintain high engineering standards with secure, tested, scalable solutions and participate in on-call rotation.
Mitratech builds world-class software products that simplify operations in Legal, Risk, Compliance, and HR functions. With over 35 years of expertise, the company serves 20,000 client companies globally, including 30% of the Fortune 500, and fosters a diverse, inclusive culture that blends entrepreneurial spirit with enterprise investment.
Manage vulnerability triage from SCA, container scanning, and external reports, collaborating with engineering on remediation.
Conduct threat modeling and security reviews with R&D teams, turning findings into prioritized actions.
Build internal security tooling, including a CVE registry and LLM-assisted code analysis workflows.
Camunda provides an enterprise platform for agentic orchestration, enabling organizations to coordinate AI agents, people, and systems across business processes. Trusted by over 700 organizations, including 9 of the top 10 US banks, Camunda is a fully remote, AI-first company named one of GP Bullhound's Top 100 Next Unicorns and a Great Place to Work.
Own application and product security, including threat modeling, secure code review, and access-control and secrets-exposure flaws.
Design and implement security architecture for an agentic AI software development lifecycle with out-of-band controls.
Secure AWS environment, manage non-human identities, and enforce security tooling across GitHub and SaaS estate.
Oshi Health is a fully remote, cloud-native healthcare platform dedicated to helping people manage chronic GI conditions. It is a growing company with a small cross-functional team, emphasizing a remote-first culture and equity-based compensation.
Collaborate with Product Engineering teams throughout the SDLC to identify vulnerabilities through threat modeling, design reviews, and secure code reviews.
Develop and implement end-to-end security solutions to mitigate risks across the product suite.
Drive improvements across Product Security tooling, automation, and the bug bounty program while experimenting with AI-based tools.
Superhuman is an AI productivity platform that integrates with over 1 million apps, offering writing, docs, inbox, and AI assistant products. Founded in 2009, it powers over 40 million people and 50,000 organizations worldwide.
Implement and improve security controls across corporate infrastructure and AI solutions.
Develop SIEM/XDR monitoring, vulnerability management, and secure CI/CD baselines.
Validate security weaknesses and automate tasks with Python, PowerShell, and AI tools.
Toogeza is a Ukrainian recruiting company that hires talent and builds teams for tech startups worldwide. The culture values practical engineering skills, independent problem-solving, and translating governance requirements into technical implementation.
Design and develop Python-driven security tools, including vulnerability scanners and API security validators.
Build Kubernetes security automation, including RBAC policies and runtime threat detection.
Create self-service security tools that empower engineering teams with infrastructure-as-code validators.
Vultr provides global cloud infrastructure with data centers worldwide. It is a privately-held company valued at $3.5 billion, serving hundreds of thousands of customers across 185 countries.
You will build a recurring product security review program, threat-modeling new features and auditing high-risk areas.
You will improve application security testing by combining static analysis, dependency scanning, and dynamic testing.
You will own vulnerability intake and remediation, triaging findings from HackerOne, scanners, and internal research.
Close builds a communication-first, AI-powered CRM that automates busywork so sales teams can focus on selling. They are a bootstrapped, profitable 130-person company with a 100% remote team, focused on helping small and scaling businesses succeed.
Lead and own security across the company, hardening cloud infrastructure and managing vulnerabilities.
Conduct hands-on penetration testing, code review, and incident response for AI-driven systems.
Build automated security controls into existing workflows without slowing delivery.
Zencoder builds and orchestrates AI agents that ship real work, from code to operations. The company keeps a small, highly capable team with a remote-first culture, prioritizing talent and autonomy.
Design and deliver automation workflows that help security analysts detect, investigate, and remediate threats faster.
Architect deterministic and agentic automation pipelines integrating services, scripting, orchestration, and security data enrichment.
Provide technical leadership, mentor engineers, and improve service reliability through monitoring, observability, and on-call support.
They build and operate Falcon Complete, a managed detection and response platform that protects organizations from cyber threats. They are a globally distributed, remote-first team focused on collaboration, innovation, and engineering excellence.
Own the end-to-end vulnerability response pipeline, from intake and triage to AI-assisted rule generation and public disclosure.
Expand automated WAF protection to ModSecurity and Coraza, validating rules to minimize false positives.
Lead and mentor a small team of security analysts while measuring time-to-protection and coverage metrics.
CloudLinux develops security products, including Imunify360, to protect websites against critical threats. The company operates with a remote-first culture, emphasizing ownership, professional growth, and effective collaboration across distributed teams.
Lead AI-powered automation initiatives across client-facing cybersecurity services.
Combine software engineering, AI, and security expertise to design scalable solutions.
Mentor multidisciplinary teams and collaborate with senior stakeholders on technical strategy.
The company provides client-facing cybersecurity services, leveraging artificial intelligence to automate and enhance security operations. It fosters a collaborative, multidisciplinary culture focused on continuous improvement and service innovation.