Source Job

• Design and implement layered AI guardrails and sandboxing to constrain AI behavior and secure enterprise workflows.
• Partner with users to bake secure-by-default patterns into AI-assisted workflows and maintain an inventory of AI-to-service connections.
• Continuously test guardrails through red-teaming and evaluate new AI tools to find secure ways to enable adoption.

Waabi, founded by AI visionary Raquel Urtasun, is the leader in Physical AI, developing autonomous transportation technology for commercial trucks and robotaxis. Backed by world leaders in AI and automotive, the company has offices in Toronto, San Francisco, Dallas, and Pittsburgh and is growing quickly with a diverse, innovative team.

• Lead security assessments of AI/ML models, data pipelines, and AI-enabled applications, identifying vulnerabilities such as prompt injection, model inversion, data poisoning, and adversarial inputs.
• Partner with Data & Analytics and Engineering to embed security requirements and threat modeling into the AI development lifecycle, from data collection through model deployment.
• Build and maintain guardrails, monitoring, and detection controls for AI systems in production, flagging anomalous model behavior and unauthorized data access.

Interra Health is a healthcare technology company that helps providers and patients navigate the prescription journey. It is a fast-growing, mission-driven team of about 100 employees, formed through the merger of DoseSpot, Arrive Health, and pVerify, and focused on reducing friction and improving access to medications.

• Lead threat modeling and security architecture for AI-enabled systems, including LLM applications and cloud-native platforms.
• Define and implement secure engineering patterns and guardrails across AWS infrastructure, CI/CD pipelines, and third-party integrations.
• Partner with engineering and security teams to embed security throughout the AI product lifecycle and drive cross-functional security initiatives.

Quanata is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions for State Farm and HiRoad. We are a wholly owned subsidiary of State Farm with a remote-first culture that values inclusion and positive team dynamics.

• Conduct manual penetration tests against core systems and AI systems, and build AI-assisted tooling to extend testing coverage.
• Help define how we pentest AI, including LLM applications, agents, and agent-generated code.
• Triage findings from SAST tools, fix vulnerabilities, and tune rules to reduce false positives.

Forward Financing is a fintech company that unlocks capital for small businesses across America. Since 2012, they have provided over $4.8 billion in funding to more than 92,000 small businesses and are recognized as a Best Place to Work.

• Shape AI security at the edge by turning new threats into protections customers can use.
• Think like an attacker to find new ways AI systems can be exploited and stop them.
• Build for real time, catching threats without slowing down the applications we protect.

bunny.net is a content delivery network and edge computing company that accelerates the internet. Founded in 2015, the company has 95+ employees and fosters a culture of ownership, improvement, and challenging what's possible.

• Act as the bridge between architectural intent and operational reality, mediating conflicts between security requirements and feasible implementation.
• Implement preventive, default-on security controls across cloud and enterprise environments, codified as policy- and infrastructure-as-code.
• Define and enforce security requirements for AI-powered features, including model access controls, prompt-injection mitigations, and output validation.

Rithum is the world's most trusted commerce network, accelerating how brands, suppliers, and retailers work together to deliver seamless e-commerce experiences. More than 40,000 companies trust Rithum to grow their business across hundreds of channels, representing over $50 billion in annual GMV.

• Lead Affirm's enterprise AI security review process, evaluating architecture, data flows, and design of AI tools and agentic systems.
• Threat model AI/LLM systems for risks like prompt injection, insecure output handling, and data poisoning, and drive remediation.
• Build security guardrails, tooling, and policy-as-code to automate AI security and support cross-functional initiatives.

Affirm is a financial technology company that offers clear, predictable point-of-sale installment loans with no hidden fees. The company is remote-first and values transparency, care, and flexibility, with a focus on building a diverse and inclusive team.

• Embed security into the software development lifecycle through threat modeling, secure design reviews, and secure-coding guidance that engineers actually adopt.
• Own application security testing (code review, SAST/DAST, and triage) and drive issues to remediation, not just filing them.
• Harden the software supply chain, build and automate security tooling, and serve as the internal security SME on product and workflow decisions.

Cogent is an Applied AI Lab building the next generation of AI agents for cybersecurity, using AI to assess petabytes of enterprise data and remediate critical breaches. We're backed by Greylock, have experienced rapid growth, and our team includes top minds from Stanford, Deepmind, and leading tech companies.

• Deliver Application Security services including assessments, threat modeling, and source code reviews for web, mobile, AI, and thick client applications.
• Perform AI/LLM and agentic security assessments, including prompt injection, model bypass, and tool-calling exploitation, mapped to OWASP Top 10 for LLM and Agentic Applications.
• Build and extend AI-driven tooling and automation harnesses to improve testing coverage, consistency, and efficiency.

GuidePoint Security provides trusted cybersecurity expertise, solutions, and services to help organizations make better decisions and minimize risk. With over 1,300 employees, it is a rapidly growing, profitable, privately-held value added reseller focused exclusively on information security.

• Provide architect-level thought leadership in securing enterprise AI programs, including models, applications, and data.
• Lead complex client engagements as SME across AI security services, from assessment to executive readout.
• Author reference architectures and enable teams to deliver coherent AI security solutions.

Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to clients. With over 1,200 employees across the United States, the company embodies a startup spirit with a scalable business culture focused on innovation and growth.

• Lead and scale the product security program, defining strategy, roadmap, and metrics in alignment with company objectives.
• Build and mentor a high-performing product security team, fostering technical excellence and sustainable execution.
• Partner with engineering and product leaders to embed security throughout the software development lifecycle, leveraging AI and automation.

Tines provides an intelligent workflow platform that applies AI, automation, and integration to drive business results. Founded in 2018 with co-headquarters in Dublin and Boston, the company serves a diverse range of customers and fosters a culture of Simplicity, Speed, and Soundness.

• Shape the Cogent product at the frontier of AI and cybersecurity, working hand-in-hand with ML engineers.
• Build the world's first AI-native cybersecurity organization, extending security posture and incident response.
• Educate the market and elevate the industry through thought leadership and customer partnerships.

Cogent is an applied AI lab building next-generation AI agents for cybersecurity. The company is a rapidly growing startup backed by Greylock, with a team of experts from top universities and companies, fostering a culture of cutting-edge research and real-world execution.

• Lead security reviews of architecture, code, and security-sensitive changes.
• Secure AI-powered products against prompt injection, unsafe tool use, and tenant isolation risks.
• Threat model new capabilities and build scalable guardrails that reduce recurring risks.

Cohere is a security-first enterprise AI company building foundation models and products for business. It is a global team of researchers, engineers, and designers headquartered in Toronto with offices worldwide.

• Own and manage the overall security posture across cloud, applications, and corporate systems.
• Build and maintain AI-powered security agents that aggregate, analyze, and prioritize security threats.
• Lead incident response activities and partner with engineering teams to embed security into development processes.

PartsBase Inc. is the world's largest online Aviation Marketplace and Community. Our global community comprises over 6,500 companies in 140+ countries, and we foster a team-focused, inclusive culture where everyone's contributions are valued.

• Perform weekly code reviews to catch security vulnerabilities before they ship.
• Coordinate external security audits and penetration tests, and track remediation.
• Manage GRC documentation, run phishing simulations, and oversee security monitoring with weekend coverage.

EverAI builds the world's largest AI companionship platform, redefining relationships with AI. With a team of approximately 100 people, we are fully remote, fast-moving, and led by founders with a track record of scaling companies from zero to IPO.

• Drive key strategic initiatives across Samsara’s Security organization.
• Partner with product security, engineering, and compliance teams to execute critical security goals.
• Build and refine scalable processes while leveraging AI tools to streamline workflows.

Samsara is the pioneer of the Connected Operations™ Cloud, enabling organizations to harness IoT data for actionable insights. The company is a public, high-growth organization with a culture that encourages rapid career development and belonging.

• Design, build, deploy, and manage secure and scalable generative AI solutions using AWS services.
• Enable technical users with guidance and support for AI service usage, ensuring security and compliance.
• Collaborate with IT and information security teams to implement robust controls and monitor AI deployments.

GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations make better decisions and minimize risk. With over 1,300 employees and partnerships with leading security vendors, we serve as a trusted advisor to more than 6,200 customers and foster a collaborative culture.

• Design and build production-grade LLM-powered agents and workflows, including architecture decisions on system design and deployment.
• Develop and optimize prompts, RAG pipelines, and agent reasoning patterns, building evaluation frameworks for accuracy and performance.
• Implement and manage end-to-end AI systems on cloud infrastructure (AWS, GCP, or Azure), collaborating with cross-functional teams.

Smartsheet empowers teams to manage work seamlessly and scale solutions smarter with AI-powered agents. The company fosters an inclusive, collaborative culture where diverse perspectives are valued.

• Design, build, and ship AI-powered features end-to-end, from prototype to production.
• Work hands-on with LLMs, embeddings, RAG, and related tooling to solve real product problems.
• Own architecture and technical decisions, balancing quality, cost, and latency across the stack.

Usersnap builds AI-driven capabilities into its product, from automated setup to intelligent surveys and self-generating reporting. It is part of saas.group, a fully remote portfolio of 25 B2B SaaS brands with nearly 380 colleagues in 50+ countries and a high-trust culture.

• Embed across teams to identify where AI can remove operational friction and build internal tools end-to-end.
• Drive adoption through workshops, pairing, and office hours, measuring success by active usage.
• Partner with Security to establish guardrails, access scoping, and audit trails for AI solutions.

LocalStack is a local cloud development platform that provides secure local sandboxes simulating cloud environments for developers and AI agents. They are a Series A startup with $25M funding, globally distributed teams across 25 countries, and a culture focused on ownership, openness, and excellence.