Build and maintain secure CI/CD pipelines, embedding security testing and controls into software development and deployment.
Strengthen application and cloud-native security across Kubernetes and containerized environments, identifying risks and implementing practical controls.
Manage CVE and vulnerability lifecycles, supporting prioritization and working with application teams on mitigation and remediation.
Bridge security and platform engineering to make infrastructure secure by design and provable at audit.
Own infrastructure vulnerability management and automate security guardrails on Azure and Kubernetes.
Build detection as code, widen SIEM coverage, and eliminate long-lived credentials.
360Learning is a collaborative learning platform for turning internal experts into champions for employee, customer, and partner growth. Founded in 2013, it has 400+ employees across North America and EMEA with an inclusive Convexity culture.
Support DoD cybersecurity requirements by integrating security controls, automation, and compliance into DevSecOps pipelines, tooling, and configurations.
Design, implement, and maintain automated security controls for CI/CD pipelines, including SAST, DAST, SCA, container scanning, and vulnerability management.
Collaborate with engineering teams to ensure secure software supply chain practices, including SBOMs, artifact signing, and automated compliance evidence collection.
Raft is a customer-obsessed non-traditional defense tech company dedicated to empowering U.S. military and government agencies with cutting-edge AI/ML and data solutions. We are a hyper-collaborative team that values innovation, diversity, and a culture of Ubuntu, where each member adds unique value.
Integrate security controls into CI/CD pipelines, including SAST, SCA, and container scanning.
Lead vulnerability management and governance with risk-based prioritization and remediation.
Design and implement security controls across GCP infrastructure using IaC practices.
The company is a technology firm specializing in cloud-native security solutions. It operates with a globally distributed team and emphasizes a flexible, autonomous working culture.
Lead and grow a team of security engineers focused on protecting cloud-native environments and CI/CD pipelines.
Drive technical strategy, threat modeling, and security automation across multi-cloud infrastructure.
Partner with engineering and DevOps teams to embed secure-by-design principles and manage vulnerability and supply chain security.
Wiz is a cybersecurity company that provides a cloud security platform connecting code, cloud, and runtime to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and now powered by Google, with a culture that values world-class talent.
Design and operate secure, scalable cloud infrastructure on AWS/EKS.
Develop and maintain CI/CD pipelines and automated deployment processes.
Champion observability and SRE practices, including monitoring and performance improvements.
Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, they deliver future-ready solutions.
Design and implement security-focused tooling and guardrails for infrastructure.
Collaborate with security, SRE, and platform teams to integrate trust principles.
Build internal automation to reduce developer cognitive load while enforcing security standards.
BlueCloud is a Snowflake Elite Partner that helps enterprises migrate to AI-ready data platforms. With 450+ consultants and 200+ successful transformations, they combine expertise with AI accelerators to deliver results 40-50% faster.
Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.
Wiz is redefining security for the AI era, enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups ever, we are trusted by over 65% of the Fortune 100 and scan over 230 billion files daily, with a culture that values world-class talent and is now powered by Google.
Develop and evolve the Internal Developer Platform (IDP), creating tools and Golden Paths for self-service infrastructure consumption.
Design and maintain deployment solutions using GitOps, including promotion strategies and reusable Helm Charts.
Build and evolve CI/CD pipelines with GitHub Actions, integrating security, quality, and SRE practices.
CI&T helps large companies transform AI potential into real business impact with AI deployment, AI-native execution, and tech-integrated business solutions. With 30 years of experience, we are 8,000 CI&Ters across 25+ countries, fostering a collaborative and innovative culture.
Lead cloud security, compliance, and infrastructure automation across AWS, Kubernetes, and CI/CD pipelines.
Translate HIPAA and SOC 2 requirements into practical technical controls and support audits.
Collaborate with Engineering and Data teams to automate workflows and maintain reliable system monitoring.
Synapticure is the largest specialty care and life sciences company for neurodegenerative diseases like Alzheimer's, Parkinson's, and ALS, operating in all 50 states. Founded by patients and caregivers, it is a remote-first company with a team across the US, driven by a mission to transform care and research.
Architect and oversee advanced security monitoring and threat detection frameworks across diverse systems and log sources.
Lead the integration of security into the software development lifecycle, including Security-as-Code and automated SAST, DAST, and SCA capabilities within CI/CD pipelines.
Own the end-to-end vulnerability management strategy across infrastructure and applications, prioritizing remediation according to business risk.
The partner company operates a large-scale digital platform and a globally distributed technology ecosystem connected to gaming and esports communities. They maintain a flexible, distributed, and inclusive work environment focused on equal opportunity and technical ownership.
Conduct code and container vulnerability assessments using DoD scanning tools, DISA STIGs, and SRGs.
Apply SAST and DAST methodologies and integrate security controls into CI/CD pipelines.
Serve as GitLab security reviewer and coordinate remediation of security findings across teams.
This partner company supports cybersecurity and secure software delivery within U.S. Department of Defense and Navy environments. The organization offers a fully remote, mission-focused culture with opportunities to collaborate across engineering and program teams.
Lead and expand the security function across application security, security compliance, infrastructure & cloud security, and business application security.
Build and run the AppSec program with AI-assisted code review and integrate security into CI/CD pipelines.
Own ISO 27001 and SOC 2 certification, manage audits, and secure cloud and business applications.
Constructor provides an all-in-one platform for education and research using machine intelligence and data science to address educational challenges like access inequality and low engagement. The company is led by a gender-balanced board and fosters an inclusive culture, though employee size is not specified.
Own security architecture across Azure and AWS, covering tenant design, network segmentation, and workload isolation.
Raise the engineering bar with hardened infrastructure-as-code modules, secure defaults, and policy-as-code signals at commit time.
Own vulnerability and exposure management end to end, delivering findings as pull requests, not tickets.
One Identity enables organizations to secure, manage, monitor, protect, and analyze information and infrastructure to drive innovation. With a globally distributed team, we build enterprise products at scale and foster a collaborative, improvement-driven culture.
Design, build, and maintain automation pipelines for workload packaging, validation, testing, deployment, and monitoring across AWS environments.
Collaborate with data engineers to operationalize workloads within a data lakehouse ecosystem and develop reusable infrastructure-as-code constructs using Terraform, AWS CDK, or CloudFormation.
Ensure pipelines meet enterprise security, compliance, and scalability standards while mentoring junior engineers and contributing to DevSecOps practices.
Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. The company uses AI to review applications and ensure fair, objective candidate evaluation, and operates in a distributed, fully remote environment.
Lead the design and implementation of secure enterprise solutions for Professional Services clients across AMER.
Assess complex security architectures and guide migrations to GitLab security capabilities, including CI/CD and compliance frameworks.
Provide technical leadership throughout the engagement lifecycle, from pre-sales scoping to delivery and enablement.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity, improve operational efficiency, and reduce security risk. With more than 50 million registered users and 50% of the Fortune 100 as customers, GitLab fosters a high-performance, all-remote culture driven by values and continuous learning.
Design, build, and optimize secure CI/CD pipelines within GitLab, enforcing DevSecOps principles through automated vulnerability scanning and compliance gates.
Manage and scale AWS infrastructure, optimizing workloads on EKS, EC2, S3, and RDS.
Establish comprehensive monitoring, logging, and alerting systems across EKS and EC2 nodes to ensure maximum uptime.
LMI is a digital solutions provider that accelerates government impact with innovation and speed, offering commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, the company serves defense, space, healthcare, and energy sectors, focusing on agility and collaboration.
Design and enforce cloud security controls and IAM policies across multi-account AWS environments.
Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
Develop automated detection and remediation workflows using Python, Bash, or Go and IaC tools.
The Tripadvisor Group connects people to experiences worth sharing, aiming to be the world's most trusted source for travel and experiences. It is a publicly traded company with a global portfolio of travel brands, fostering a culture of collaboration, agility, and traveler-first mindset.
Design, implement, and manage cloud infrastructure and deployment pipelines.
Build automation tools for build, test, deployment, and infrastructure provisioning.
Mentor engineers and drive DevOps best practices for security, scalability, and reliability.
Accrete creates advanced AI solutions and autonomous agents that turn complex data into actionable insights for businesses and government organizations. The team is collaborative and innovative, focused on pushing the boundaries of AI technology.
Own and improve the organization's SIEM, including threat detection, alert tuning, and incident response.
Conduct security architecture reviews, code reviews, and infrastructure assessments to identify and remediate risks.
Build scalable security processes and integrate security practices into development workflows across cloud and container environments.
This company is a fast-moving technology organization focused on building secure and scalable software systems. It fosters a high-ownership, remote-first culture where experienced professionals collaborate with high-caliber engineering teams.
Collaborate with Development and Architecture teams to build complex, highly available cloud environments.
Provide Level 3 technical support and act as SME for implementing infrastructure for our core product.
Design and maintain secure, scalable infrastructure while documenting best practices and performing root cause analysis.
Smile Digital Health provides a FHIR-based data liberation platform that helps healthcare stakeholders collect and exchange data, impacting patients in over 20 countries. The company ranked #19 on Deloitte's Technology Fast 50 for 2024 and fosters a culture of respect, inclusion, and authenticity.