Partner with engineering teams on architecture reviews, threat modeling, and secure design to translate risks into practical recommendations.
Improve security tooling, strengthen SDLC and CI/CD controls, and serve as a GCP security subject matter expert.
Drive vulnerability management, coordinate penetration testing, and enable engineers through documentation and mentorship.
Doppel builds an AI-native platform for social engineering defense, protecting executives, employees, customers, and brands from phishing, impersonation, and fraud across digital channels. Backed by Andreessen Horowitz and Bessemer Venture Partners, it is a rapidly growing Series C startup with a team focused on cybersecurity expertise and startup velocity.
Conduct hands-on application security reviews threat modeling and code audits across the entire stack (backend frontend APIs infrastructure).
Build and improve security automation for vulnerability management including SAST DAST container scanning and secrets detection.
Drive remediation of findings from bug bounty scanners and audits partnering with engineering teams to prioritize and fix.
Close builds a communication-first AI-powered CRM that helps sales teams sell more and faster. With a 120-person 100% remote team they are bootstrapped profitable and focused on eliminating manual data entry for scaling businesses.
Work with engineering teams to run security assessments and threat models for cloud-native and SaaS products.
Review cloud application architectures, build automation for security controls, and participate in incident response.
Communicate security risks to technical and non-technical audiences and champion improvements to security processes.
Atlassian provides collaboration software solutions designed to help teams work better together. The company has a global, inclusive culture where the unique contributions of all employees create success.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Lead and execute Delinea's Product Security Program, including secure design reviews, threat modeling, and security consulting.
Collaborate with Enterprise Architecture, Development, DevOps, and Cloud engineering teams to balance security with business objectives.
Define baseline cloud, container, application, and infrastructure security standards and integrate them into CI/CD pipelines.
Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, with a cloud-native Identity Security Platform that applies AI-powered context across the entire identity lifecycle. We are a passionate, global team driven by world-class product leadership, outstanding engineers, and strategic investment from TPG, valuing diversity, innovation, and a culture of respect and fairness.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Contribute to secure-by-design practices and maturing SAST, SCA, and DAST programs.
Develop Secure AI Development Lifecycle and AI-assisted threat modeling framework.
Mentor engineers on secure coding and foster cross-functional collaboration.
Spring Health is a global mental health company using an AI-native platform to deliver personalized mental health support. The company reaches over 170 million people worldwide and fosters a culture of innovation, collaboration, and commitment to eliminating barriers to mental health.
Perform security design reviews and threat modeling for new products and features, including AI-enabled services.
Conduct manual penetration testing of web, API, mobile, and cloud-native applications, and validate third-party findings.
Drive adoption of secure coding practices and improve security automation in CI/CD pipelines.
Iru is an AI-powered security & IT platform that unifies identity and access, endpoint security, and compliance automation for fast-growing companies. Backed by top investors and valued at $850 million, it serves customers like Cursor and Vercel, and is recognized for employee engagement.
Lead the Application Security program across all products, embedding security throughout the SDLC.
Integrate AppSec findings into centralized vulnerability workflows, correlating them with asset and exploit intelligence.
Automate security testing pipelines and mentor engineers on secure coding and threat modeling.
ServiceNow is the AI control tower for business reinvention, helping 85% of the Fortune 500 work smarter with its AI platform. The company is building an AI-native culture where technology and talent are unstoppable together.
Partner with product portfolios to manage product security, emphasizing AI/ML security and cross-functional collaboration.
Lead security design reviews, threat modeling, and secure code reviews across web, backend, and API stacks.
Integrate AppSec tooling into CI/CD, support secure development practices, and participate in incident response.
Quanata is an insurance technology company building advanced risk prediction and prevention solutions and a full-stack, AI-native insurance platform for State Farm and HiRoad. It is wholly owned by State Farm and fosters an inclusive, positive culture focused on hiring talented people across disciplines.
Secure BJAK's AI-enabled products and agent workflows using third-party models.
Assess customer data shared with model vendors and design least-privilege controls for AI agents.
Threat model prompt injection and support SC TRM/BNM RMiT compliance for AI risks.
BJAK is a mobile-first insurance platform that makes insurance accessible online and is the leading insurtech in Southeast Asia. With over 20 nationalities working from offices and remotely worldwide, the company values passionate builders who love creating next-generation financial products.
Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
Partner with DevOps on paved roads for secure-by-default development and lead incident response.
Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.
Own the configuration, tuning, and management of our SIEM solution to diagnose unusual threats.
Perform architecture reviews, code reviews, and penetration testing on web and mobile apps.
Build and maintain vulnerability management CI/CD pipeline and collaborate with engineering teams.
Engine is the AI-native platform for intelligent travel, serving over 38,000 customers and nearly 2 million travelers. Recognized as one of Fast Company's Best Workplaces for Innovators (2025) and Built In's Best Places to Work (2020–2026), we have a culture of exponential growth and high-caliber colleagues.
Partner with product teams on security early to identify security requirements and threat-model implications before designs are locked.
Align Security Engineering with product strategy by translating feature-team needs into prioritized security work.
Own an independent security roadmap focusing on platform-level security investments like key management and post-quantum cryptography.
1Password is a cybersecurity company building enterprise password manager and Unified Access Management solutions to secure digital identities and employee productivity. With over $400M ARR and trusted by over 180,000 businesses, we maintain a remote-first culture with a team of curious, driven individuals.
Lead security assessments of AI/ML models, data pipelines, and AI-enabled applications, identifying vulnerabilities such as prompt injection, model inversion, data poisoning, and adversarial inputs.
Partner with Data & Analytics and Engineering to embed security requirements and threat modeling into the AI development lifecycle, from data collection through model deployment.
Build and maintain guardrails, monitoring, and detection controls for AI systems in production, flagging anomalous model behavior and unauthorized data access.
Interra Health is a healthcare technology company that helps providers and patients navigate the prescription journey. It is a fast-growing, mission-driven team of about 100 employees, formed through the merger of DoseSpot, Arrive Health, and pVerify, and focused on reducing friction and improving access to medications.
Lead and manage the Product Security team, shaping a risk-driven security program in partnership with the Director of Security.
Guide engineering teams to own their security health, with automation handling first-pass findings and Security validating rather than fixing.
Act as incident manager of record, delegated approver, and drive monthly and quarterly security posture reporting.
LaunchDarkly provides a feature management platform that helps developers release software safely and efficiently through gradual rollouts and targeted experiences. The company values high trust, transparency, and a humble, collaborative team culture.
Investigate and remediate application security vulnerabilities directly in code, implementing fixes and submitting pull requests.
Deploy, configure, and optimize SAST and SCA tools across repositories and CI/CD pipelines, reducing false positives.
Triage and prioritize security findings while collaborating with engineering teams to embed secure coding practices.
Partner company is a technology firm delivering large-scale international projects with a focus on integrating application security into the software development lifecycle. They foster a collaborative, globally distributed engineering culture with an informal environment, open-door policy, and continuous learning opportunities.
Design, build, and operate services powering the Exposure Management platform across the full production lifecycle.
Work with large volumes of security data to improve scanning, asset discovery, and vulnerability prioritization.
Collaborate with product, threat research, and client-facing teams to turn security requirements into production-ready features.
They build an external attack-surface and Exposure Management platform that helps organizations discover internet-facing assets and prioritize vulnerabilities. They foster a collaborative, curious engineering culture with an AI-first approach to security and scale.
Deliver Application Security services including assessments, threat modeling, and source code reviews for web, mobile, AI, and thick client applications.
Perform AI/LLM and agentic security assessments, including prompt injection, model bypass, and tool-calling exploitation, mapped to OWASP Top 10 for LLM and Agentic Applications.
Build and extend AI-driven tooling and automation harnesses to improve testing coverage, consistency, and efficiency.
GuidePoint Security provides trusted cybersecurity expertise, solutions, and services to help organizations make better decisions and minimize risk. With over 1,300 employees, it is a rapidly growing, profitable, privately-held value added reseller focused exclusively on information security.
Define the product vision, strategy, and roadmap for security-focused features.
Conduct market research and customer feedback to identify product opportunities.
Collaborate with engineering, design, sales, and marketing on secure product delivery.
ClickHouse develops an open-source database platform for real-time analytics, with a focus on secure data infrastructure. The company is a rapidly scaling, remote-friendly startup spanning over 25 countries and an employee-driven culture.