Integrate security into the SDLC through automation, testing, and continuous improvement.
Identify, investigate, and remediate application and infrastructure vulnerabilities.
Develop tools and automation in Python, Go, or Terraform to improve security and developer productivity.
Corbalt is a technology company that partners with federal agencies to modernize and operate complex technology ecosystems, building shared platforms and reusable services. They are a remote-first team that values curiosity, kindness, ownership, and continuous learning, with roots in the Healthcare.gov recovery effort.
Lead secure code reviews, threat modeling, and secure design assessments to translate findings into actionable guidance.
Design and integrate application security controls across CI/CD platforms and developer workflows.
Define secure coding standards, reference architectures, and automated security capabilities scalable to engineering teams.
Jobgether is a platform that uses AI-powered matching to connect candidates with job opportunities, ensuring rapid and fair application reviews. They focus on leveraging technology to streamline hiring processes and are committed to data privacy and professional growth.
Lead the end-to-end vulnerability management lifecycle across the technology stack.
Harden base operating system images and secure the software supply chain.
Integrate security controls into CI/CD pipelines and establish secure-development practices.
Partner company is a technology organization focused on application security and cloud-native environments. They foster a collaborative, remote-first culture with a focus on continuous improvement and employee wellbeing.
Design and implement secure CI/CD pipelines and DevSecOps processes for the VA COSE program.
Integrate security controls and automated testing throughout the software development lifecycle.
Collaborate with cybersecurity and development teams to ensure secure, compliant, and repeatable deployments.
9th Way Insignia is a service-disabled, veteran-owned small business that brings transformative technology to government customers. The company specializes in cybersecurity, cloud modernization, software development, and data analytics, and fosters a culture of innovation and mission-driven work.
Strengthen application security across modern software environments, including AI-enabled applications and services.
Embed security throughout the development lifecycle through code reviews, automated testing, and secure design practices.
Partner with engineering, product, DevOps, compliance, and incident response teams to identify and reduce risk.
Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. It operates as a remote-first organization with a focus on integrity, collaboration, and continuous learning.
Architect and automate security workflows across CI/CD and compliance operations.
Integrate and monitor security tooling within automated pipelines.
Build automation for compliance and ATO artifacts.
Our partner is a technology company that builds secure, automated cloud environments for mission-critical programs. They offer a fully remote work model with a focus on autonomy and work-life balance.
Translate security policy into practical, deployable solutions across applications, data environments, and AI systems.
Design, build, and deploy security controls for web applications, data pipelines, APIs, and Agentic AI systems.
Implement secure-by-design practices throughout the software development lifecycle, including code-level remediations and configuration hardening.
EnableComp provides Specialty Revenue Cycle Management solutions for healthcare organizations, leveraging over 24 years of industry-leading expertise. A multi-year recipient of the Top Workplaces award, they have been recognized as Black Book's #1 Specialty RCM Solution provider in 2024 and are among the top one percent of the Inc. 5000 fastest-growing private companies in the US for eleven years.
Assist customers with application security testing tool configurations and triage support.
Lead AppSec Program maturity assessments using frameworks like BSIMM and SSDF.
Develop Strategic Roadmaps and deliver presentations to executive leadership.
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. It is a recognized pioneer in application security, providing SAST, SCA, and DAST solutions.
Act as an Application Security SME, partnering with Engineering and Product teams to embed security throughout the SDLC.
Lead application security reviews, threat modeling, code reviews, and penetration testing to identify and mitigate risks.
Design and automate security controls across CI/CD pipelines, including SAST, SCA, and other AppSec tooling.
Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries. Headquartered in Madrid, the company operates in 10 countries across Europe, the US, and Latin America, backed by leading investors, and places millions of workers.
Design, build, and maintain CI/CD pipelines for application and infrastructure delivery.
Automate infrastructure provisioning and configuration using Terraform and Ansible.
Integrate security scanning, vulnerability detection, and automated testing into software delivery pipelines.
This company delivers secure, reliable technology for critical federal acquisition systems. They offer a remote work environment and support mission-critical government technology initiatives.
Own the vulnerability management lifecycle across Glean's technology stack, from discovery through remediation and reporting.
Harden base OS images and secure open-source dependencies and the broader software supply chain.
Integrate SAST, DAST, dependency scanning, and automated security validation into CI/CD pipelines.
Glean is the Work AI platform that helps everyone work smarter with AI. With over 1,000 employees across more than 25 countries, we foster a diverse, inclusive workplace and are recognized as one of the world's most innovative companies.
Embed security into every phase of the SDLC and champion secure design for Gen AI and agentic AI tools.
Perform secure code reviews, threat modeling, and establish secure API patterns across engineering teams.
Operate the application vulnerability management lifecycle and communicate risk to engineering and business leaders.
GameChanger builds a platform for youth sports, helping families elevate the next generation through community and technology. They are a remote-first, dynamic tech company based in New York City, solving major challenges in youth sports.
Design and enforce cloud security controls and IAM policies across multi-account AWS environments.
Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
Develop automated detection and remediation workflows using Python, Bash, or Go and IaC tools.
The Tripadvisor Group connects people to experiences worth sharing, aiming to be the world's most trusted source for travel and experiences. It is a publicly traded company with a global portfolio of travel brands, fostering a culture of collaboration, agility, and traveler-first mindset.
Perform application security testing and vulnerability assessments on web applications, APIs, and CI/CD pipelines.
Support DevSecOps tool integration and automation, including security scanning and policy enforcement.
Develop proof-of-concept secure reference implementations and utility applications to demonstrate best practices.
Ardent supports the federal government's most critical national security and defense priorities. They offer competitive pay, comprehensive benefits, and a culture that values dedication and flexibility.
Champion secure-by-default culture by embedding defense-in-depth principles into engineering frameworks and development practices.
Conduct hands-on source code reviews, threat modeling, and security assessments across microservice architectures.
Build automation and frameworks to eliminate repetitive security work and create scalable security capabilities.
Jobgether is a company that uses AI-powered matching to streamline job applications. It is a technology platform connecting candidates with hiring companies, with a focus on efficient and objective candidate review.
Build and maintain security infrastructure across AWS and Kubernetes, including telemetry pipelines, cryptographic material lifecycle, and compliance automation.
Engineer agentic AI workflows using tools like Claude Code and MCP integrations to automate security tasks such as code review and drift detection.
Develop threat models and embed security controls into deployment pipelines to prevent vulnerabilities at build time.
Lumin Digital provides cloud-native digital banking solutions for credit unions and banks. The company fosters a culture of trust, respect, and boldness, encouraging innovation and collaboration in a fully remote, async-first environment.
You will own end-to-end data protection: architecting security infrastructure, managing PCI/SOC2 programs, and setting the security roadmap.
You will integrate security scanning (SAST, DAST, SCA) into CI/CD pipelines and harden containerized and cloud-native environments.
You will configure IAM and SSO platforms, manage EDR/DLP/SIEM tooling, and run security awareness training.
Campminder builds software for summer camps, enabling meaningful experiences for kids. With over 100 employees, they are stable, profitable, and have a values-led culture committed to work/life balance.
Lead the development, implementation, and ongoing maintenance of comprehensive security strategies and solutions.
Design and deploy advanced security controls to protect the business across disciplines.
Mentor and galvanize engineers to uphold security process standards.
Aledade PBC empowers independent primary care practices, helping them deliver better care and thrive in value-based care. Founded in 2014, Aledade has become the largest network of independent primary care in the US, with a collaborative, remote-first culture.
Designs, engineers, and automates secure enterprise cloud environments supporting mission-critical government workloads.
Provides technical leadership across AWS GovCloud, cloud architecture, infrastructure automation, container platforms, and CI/CD.
Develops standardized hosting models and integrates AWS IaaS, PaaS, and SaaS capabilities with enterprise applications.
True Zero Technologies is a veteran-owned small business that enables people and technology to drive quality outcomes. With a people-first culture, it has been recognized as a Best Place to Work in 2023 and 2025, and made the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025.