Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Own the security program end-to-end, covering CorpSec, SecOps, compliance, and tooling.
Drive SOC 2 audits, manage identity and access, and build detection and observability with Datadog and SentinelOne.
Operate as a hands-on zero-to-one operator on a small team with high autonomy and real ownership.
Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors, Kodex supports over 15,000 government agencies in 190 countries and operates as a fast-growing Series A company with a small, high-autonomy team.
Implement and maintain AWS security configurations across development, staging, and production environments.
Operate SAST, DAST, and SCA tools integrated into CI/CD pipelines to remediate vulnerabilities.
Support compliance efforts such as SOC 2 Type II and ISO 27001 audits and improve security processes.
Pacvue is a leading software suite for eCommerce advertising, sales, and intelligence, helping brands grow on Amazon, Walmart, Instacart, and other marketplaces. The team is energetic, passionate, and focused on innovation, with a mission to help brands and sellers succeed.
Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audits from a technical perspective.
Translate security, compliance, and privacy requirements into scalable, enforceable, and auditable technical controls.
Develop internal security tooling using Python and implement cloud security controls across AWS and GCP.
Yuno builds payment infrastructure that enables companies to participate in the global market through seamless integrations and over 1,000 payment methods. Founded by payments and tech industry experts, it empowers high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus.
Own corporate security and identity infrastructure, including Google Workspace, SSO/SCIM, MDM/EDR, and access reviews.
Lead security compliance programs like SOC 2, manage customer security reviews, and maintain incident response.
Collaborate with managed IT partners, vendors, and auditors to keep security priorities working and risks managed.
Sofar Ocean is building the world's largest real-time ocean sensor network, using Spotter buoys and software like Wayfinder to turn ocean data into decisions for shipping, government, and defense customers. The company is a team of about 100 based in San Francisco and is growing fast.
Establish and enforce a unified security posture across GCP and OCI, including guardrails, IAM policies, and centralized monitoring.
Validate cloud deployments meet FedRAMP High, FISMA, and NIST 800-53 requirements, working with governance and audit teams.
Identify vulnerabilities, policy deviations, and architectural risks, and drive remediation.
Latitude is a growing Service-Disabled Veteran Owned company within the Federal Sector, working with various federal clients across multiple agencies. They foster a remote work-from-home culture, invest in employee growth, and strive for innovation to break through technology and government barriers.
Implement and configure security applications and infrastructure to support corporate policies and federal and state regulations.
Serve as an information security subject matter expert, including familiarity with cloud implementations.
Lead infrastructure security assessments and incident response efforts across networking, servers, databases, and applications.
KnitWell Group is a specialty retail operating company comprising iconic American brands such as Ann Taylor, Chico's, LOFT, and Talbots. Our associates are innovators who thrive through collaboration and are dedicated to excellence, creating fashion that makes customers feel good.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Lead and mature cybersecurity compliance programs including SOC 2 Type 2 and ISO 27001 readiness.
Drive cloud and application security across AWS and Azure, integrating secure SDLC and DevSecOps practices.
Manage corporate IT operations, identity and access, and build the cybersecurity team as the organization grows.
Genea is a leader in property technology, providing cloud-based physical security, submeter billing, and on-demand HVAC solutions to over 1 million users across 39 countries. It has been recognized as a Top Workplace from 2021-2025 with a 4.3 Glassdoor rating, fostering a team-oriented and transparent culture.
Act as part vCISO and account manager, guiding clients through security and compliance programs.
Assess security posture, provide recommendations, and design programs using NIST, SOC 2, and ISO 27001.
Liaise with auditors and internal teams to translate programs into policies, procedures, and configurations.
Oneleet provides a platform for companies to build, manage, and monitor cybersecurity programs and achieve SOC 2 and ISO 27001. It raised a $33M Series A and is a fast-growing, remote-first team with an opinionated culture.
Own identity and endpoint security, including access management, device standards, and risk assessments.
Administer SSO, enforce MFA, manage MDM/EDR, and automate security workflows.
Act as a first responder for incidents, conduct vendor reviews, and build scalable security processes.
Squads is a financial technology company building products and APIs for the stablecoin economy. More than 450 teams use Squads Multisig to secure over $10 billion in value.
Improve cloud security posture through practical, scalable policy engineering.
Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.
UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.
Monitor security systems, logs, and alerts to detect and respond to threats.
Run vulnerability scans and coordinate remediation with IT and engineering.
Maintain compliance with SOC 2 and support security awareness programs.
Power Digital is an AI-native growth firm combining talent and proprietary technology to help brands drive measurable business outcomes. With a people-first culture, the company values diversity and collaboration, using its AI operating system Omega to amplify capacity for strategy, creativity, and analysis.
Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.
Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.
Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.
Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.
Fix vulnerabilities across the stack by writing pull requests in application repositories and Terraform.
Build and tune SIEM detections, mapping coverage to MITRE ATT&CK and reducing false positives.
Lead incident response, harden AWS estate, and automate security workflows with code.
Cloudbeds is a hospitality management platform powering hotels across 150 countries, processing billions in bookings annually. The company is a remote-first team of 650+ across 40+ countries, recognized for innovation and an inclusive culture.
Own and mature security, privacy, and compliance programs across HIPAA, SOC 2, and HITRUST.
Lead HITRUST certification end to end, including scoping, evidence collection, and assessor coordination.
Partner with Engineering, Product, SRE, and IT to integrate security into architecture, SDLC, and cloud infrastructure.
IntusCare is an end-to-end ecosystem built specifically to help PACE programs deliver exceptional care, strengthen financial performance, and stay compliant. It is a growing healthcare SaaS organization that empowers teams to improve outcomes for dual-eligible seniors.
Own and mature preventative security capabilities across cloud, SaaS, endpoint, identity, network, and data environments.
Translate broad security objectives into concrete technical requirements, controls, tooling, and implementation plans.
Partner across Engineering, Platforms, Product, and business teams to continuously strengthen security posture as we scale.
Backstory is the leading AI answers platform for sales teams, helping modern sales teams ask questions and get the right answer in real time. Backed by top investors like Andreessen Horowitz and ICONIQ Capital, Backstory is based in San Francisco and has been recognized by Gartner, Forrester, and the Forbes AI 50.
Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.
symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.
Drive implementation and continuous improvement of ISO 27001 ISMS and SOC 2 Type II compliance.
Own risk management, internal audits, security policies, and vendor security assessments.
Collaborate with engineering and DevOps on AWS security governance, incident response, and AI/LLM risk governance.
Insider One is an AI-powered marketing and customer engagement platform that unifies data, personalization, and journey orchestration across channels. With 1,500+ employees from 50+ nationalities and offices in over 30 countries, it is a diverse, socially progressive B2B SaaS unicorn backed by major investors.
Implement and validate OCI security posture across IAM policies, network security groups, data encryption, and monitoring.
Design, build, and automate OCI-native security controls including Cloud Guard, Security Zones, and Security Advisor.
Integrate OCI logs into SIEM and build key management for encryption at rest.
Latitude is a growing Service-Disabled Veteran Owned (SDVOSB) Company serving federal clients across multiple agencies. They foster a remote work-from-home culture and invest in employee growth, focusing on innovation and automation.