Own application and product security, including threat modeling, secure code review, and access-control and secrets-exposure flaws.
Design and implement security architecture for an agentic AI software development lifecycle with out-of-band controls.
Secure AWS environment, manage non-human identities, and enforce security tooling across GitHub and SaaS estate.
Oshi Health is a fully remote, cloud-native healthcare platform dedicated to helping people manage chronic GI conditions. It is a growing company with a small cross-functional team, emphasizing a remote-first culture and equity-based compensation.
Lead technical security design and review for security-critical systems, ensuring data protection and resilience.
Master complex technical security domains like Cloud Security, AppSec, or Data to solve business and technical challenges.
Architect automated defenses and translate broad security objectives into clear deliverables for the engineering team.
Garner partners with employers to transform U.S. healthcare by using proprietary clinical metrics to connect members with top-performing doctors, improving care while reducing costs. A mission-driven team that has helped over 2.5 million people and saved $1B, doubling five years running.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Integrate and automate application security tools (SAST, DAST, SCA) into CI/CD pipelines.
Conduct threat modeling, secure code reviews, and manage the bug bounty program.
Build a Security Champions network and deliver secure coding training to empower developers.
They are a payment technology platform supporting modern commerce and financial innovation. They operate as a remote-first, globally distributed company with a strong focus on security, collaboration, and developer enablement.
Shape application security practices by integrating automated safeguards throughout the software development lifecycle.
Collaborate with Security and Engineering teams to identify vulnerabilities early and manage bug bounty programs.
Conduct threat modeling and secure code reviews for Java and Python microservices while fostering developer security ownership.
This partner company protects payment infrastructure and enables secure, scalable digital commerce. It operates as a remote-first, security-focused fintech organization with a fast-moving culture and globally distributed teams.
Define and drive the security strategy for a global fintech platform.
Lead incident response, threat detection, and compliance across cloud and application environments.
Build and scale a security team and embed security into the software development lifecycle.
This company operates a global financial technology platform supporting cross-border payments and digital financial services. It is a fast-growing organization with a fully remote culture and a focus on security as a strategic business enabler.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Lead technical discovery and design solutions for customer CI/CD and security programs.
Own proof-of-value engagements from success criteria to configuration and outcomes.
Partner with account executives and communicate technical differentiation to stakeholders.
A cybersecurity company focused on application security, offering a platform that helps teams integrate security into developer workflows and CI/CD pipelines. The team is seeking a technical lead for pre-sales engagements, indicating an engineering-driven and customer-focused culture.
Become an expert in the application security platform and integrate it into customer CI/CD pipelines, developer workflows, and security programs.
Lead technical discovery, diagnose customer issues, and advise on solution design.
Own proof-of-value cycles from success criteria through environment configuration and technical validation.
The company operates in the application security space, serving digital native and mid-market customers. The team size and specific culture are not mentioned in the posting.
Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.
Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.
Define and own a risk-based security strategy for a financial platform, prioritizing by real threat and business impact.
Lead incident response, application security, cloud and infrastructure hardening, and compliance programs like SOC 2.
Build and mentor a security team and security champions network, embedding security as an enabler across engineering.
Airtm is a financial-infrastructure company building the future of the online-work economy with stablecoin-based cross-border payment solutions. It is a fast-growing, mission-driven engineering organization focused on empowering digital entrepreneurs in the Global South.
Lead hands-on security assessments for cloud, application, and infrastructure environments.
Manage technical projects end-to-end and deliver practical security solutions.
Work directly with clients and engineering teams to communicate findings and drive improvements.
Jobgether is an AI-powered job platform that matches candidates with hiring companies using objective review processes. It supports fully remote recruitment and emphasizes autonomy, technical excellence, and human-led final hiring decisions.
Lead application security protocols throughout the SDLC.
Partner with engineering teams to embed security into architecture and development.
Perform hands-on security testing of web apps, APIs, and cloud-native services.
K Health is an AI-powered virtual care engine that modernizes the primary care loop using clinical AI and virtual clinics. Founded in 2016 and headquartered in New York City, the company is backed by over $443.5M and aims to build diverse, collaborative teams.
Lead technical discovery and advise on solution design for application security.
Own proof-of-value engagements from defining success criteria through technical validation.
Partner with account executives on complex sales and travel up to 20% for customer meetings.
We are an application security SaaS company at Series C/D stage, helping organizations build effective application security programs. Our collaborative team supports mid-market sales cycles and values engineering depth in customer conversations.
Lead cloud security architecture and posture management across large multi-subscription Azure and AWS environments.
Design policy-as-code guardrails and automated controls to prevent misconfigured infrastructure from reaching production.
Partner with engineering teams to integrate security into CI/CD, threat modeling, and vulnerability management.
HealthEquity empowers healthcare consumers by providing health savings accounts and related financial solutions. They are a large, mission-driven company focused on connecting health and wealth, with a culture that values belonging and innovation.
Build central security systems and automation the whole company relies on.
Secure cloud infrastructure, identity and access across Rain's growing footprint.
Lead external security assessments and drive findings to verified fixes.
Rain is a global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Backed by top investors and valued at $1.95B, Rain is a hypergrowth company with a flat, open culture trusted by over 100 organizations worldwide.
Embed security into every stage of the SDLC ensuring secure-by-design systems.
Lead secure code reviews across TypeScript/Node.js services and modern frontend stacks.
Drive threat modeling and own the vulnerability management lifecycle.
SpinQuest is a social casino platform that blends social gaming with innovative currency mechanics. Founded in 2025, we have grown into a recognized name in social gaming with a community-first approach and original content.
Embed security practices into the SDLC, implementing SAST, SCA, and secret scanning controls in CI/CD pipelines.
Harden AWS infrastructure and infrastructure-as-code, including IAM, Terraform, VPCs, and KMS.
Lead a Security Champions program, conduct threat modeling, and define security standards for APIs and critical features.
The company is a fast-growing technology organization focused on application and cloud security. It fosters a collaborative, remote-first culture with technical autonomy and a focus on developer empowerment.
Partner with product and engineering teams to embed security across application design and development.
Lead threat modeling, secure code reviews, and vulnerability analysis to protect complex systems.
Build automated security guardrails and promote secure coding practices throughout the SDLC.
Quanata is building an AI-native insurance technology platform for the State Farm family of companies. It is a remote-first organization that values veteran hiring, professional growth, and a collaborative culture across the U.S.
Build and improve vulnerability management tooling and workflows across applications, dependencies, containers, and infrastructure.
Integrate security checks and policy controls into CI/CD and developer workflows.
Partner with engineers to design secure-by-default patterns and translate security risks into remediation plans.
ITHAKA is a nonprofit that expands access to knowledge and education through services like JSTOR, Portico, and Ithaka S+R. It values belonging, evidence, speed, teamwork, and trust, with staff across the United States.