Source Job

• Design and build security solutions across application security, infrastructure, and AI agentic systems.
• Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
• Develop AI governance standards and security review agents to protect user trust.

Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.

• Own technical security controls for AI usage, including agent identity, tool access, guardrails, and logging.
• Partner with AI Enablement, Engineering, DevOps, GRC, and Security to integrate security by design.
• Build AI-powered security tooling and lead AI-specific incident response.

Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure, serving financial institutions across 40 countries. With 400+ distributed team members and $400M in funding, we are a diverse, remote-first team opening financial services to everyone.

• Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
• Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
• Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.

Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.

• Secure BJAK's AI-enabled products and agent workflows using third-party models.
• Assess customer data shared with model vendors and design least-privilege controls for AI agents.
• Threat model prompt injection and support SC TRM/BNM RMiT compliance for AI risks.

BJAK is a mobile-first insurance platform that makes insurance accessible online and is the leading insurtech in Southeast Asia. With over 20 nationalities working from offices and remotely worldwide, the company values passionate builders who love creating next-generation financial products.

• Lead security architecture across cloud, platform, and AI systems.
• Drive threat modeling, vulnerability management, and incident response.
• Embed automated security testing into CI/CD and infrastructure-as-code.

Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.

• Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
• Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
• Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.

Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.

• Build AI agents and LLM-assisted workflows to triage, enrich, and resolve security alerts.
• Develop and maintain security data pipelines that collect, normalize, and route telemetry.
• Collaborate with Cyber Operations to automate manual steps and document decision paths.

HealthEquity empowers healthcare consumers by providing HSAs and related financial solutions. The company fosters a collaborative, purpose-driven culture and values authenticity and innovation.

• Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
• Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
• Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.

G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.

• Design and drive the architecture for key AI platform components, ensuring scalability, reliability, and security.
• Own complex initiatives from architecture through production, turning ambiguous goals into clear technical requirements.
• Build systems that unify data and allow AI agents to access sensitive information with strict privacy and security guarantees.

Aura and Qoria are on a mission to create a safer internet for everyone by combining identity theft protection with digital wellbeing tools. The combined company protects over 9 million families and 32,000 schools across 100+ countries, driven by a global team of over 1,000 people.

• Lead technical security design and review for security-critical systems, ensuring data protection and resilience.
• Master complex technical security domains like Cloud Security, AppSec, or Data to solve business and technical challenges.
• Architect automated defenses and translate broad security objectives into clear deliverables for the engineering team.

Garner partners with employers to transform U.S. healthcare by using proprietary clinical metrics to connect members with top-performing doctors, improving care while reducing costs. A mission-driven team that has helped over 2.5 million people and saved $1B, doubling five years running.

• Design and implement security controls for AI agent execution, including policy enforcement and sandboxing.
• Integrate security checks into CI/CD pipelines and supply chain processes to block vulnerable changes.
• Strengthen production access and deliver practical security automation with engineering teams.

• Lead technical discovery and turn ambiguous cyber needs into a tractable plan with clear architecture and acceptance criteria.
• Build and integrate AI-enabled security workflows using production software, APIs, telemetry, and security systems.
• Deploy, operate, and evaluate AI workflows in customer environments, ensuring security, maintainability, and handover.

Eliza is a technology services company and Advanced-tier OpenAI partner that helps organizations build and deploy AI solutions, including generative AI, custom LLM integrations, predictive analytics, and intelligent automation. The company has a collaborative, mission-driven team focused on real-world AI impact and values adaptability, ownership, and hands-on client collaboration.

• Take end-to-end ownership of security across a platform serving 50 million users, spanning application security, GRC, and AI security.
• Collaborate closely with engineering leadership and development teams to identify vulnerabilities, strengthen controls, and drive remediation.
• Protect AI-powered systems against evolving threats like prompt injection, jailbreaks, and third-party provider vulnerabilities.

They are a rapidly growing AI-powered technology platform serving over 50 million users worldwide. As a scale-up with more than 50 employees, they foster a high-autonomy, execution-focused culture with direct access to leadership.

• Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
• Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
• Own SOC 2, HIPAA, AI security governance, and incident response.

AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.

• Design, build, and operate secure, cost-efficient infrastructure in a multi-cloud environment (AWS and Azure).
• Develop and evolve infrastructure as code for repeatable, auditable, and scalable system provisioning.
• Partner with product and application engineering teams and participate in an on-call rotation.

Abnormal AI is an AI-native behavioral security platform protecting enterprises from advanced threats by analyzing communication and access behavior. It protects over 25% of the Fortune 500 and fosters a fast-paced, remote-first culture.

• Partner with product portfolios to manage product security, emphasizing AI/ML security and cross-functional collaboration.
• Lead security design reviews, threat modeling, and secure code reviews across web, backend, and API stacks.
• Integrate AppSec tooling into CI/CD, support secure development practices, and participate in incident response.

Quanata is an insurance technology company building advanced risk prediction and prevention solutions and a full-stack, AI-native insurance platform for State Farm and HiRoad. It is wholly owned by State Farm and fosters an inclusive, positive culture focused on hiring talented people across disciplines.

• Own application and product security, including threat modeling, secure code review, and access-control and secrets-exposure flaws.
• Design and implement security architecture for an agentic AI software development lifecycle with out-of-band controls.
• Secure AWS environment, manage non-human identities, and enforce security tooling across GitHub and SaaS estate.

Oshi Health is a fully remote, cloud-native healthcare platform dedicated to helping people manage chronic GI conditions. It is a growing company with a small cross-functional team, emphasizing a remote-first culture and equity-based compensation.

• Collaborate with sales to engage clients and architect tailored AI security solutions.
• Conduct product demonstrations, PoCs, and technical presentations to prospective clients.
• Provide pre- and post-sales support, training, and enablement to clients and internal teams.

HiddenLayer protects the world's most valuable technologies from adversarial AI attacks. The company is a fully remote, fast-growing startup backed by $100M in Series B funding, with a global team and a strong focus on innovation and culture.

• Contribute to secure-by-design practices and maturing SAST, SCA, and DAST programs.
• Develop Secure AI Development Lifecycle and AI-assisted threat modeling framework.
• Mentor engineers on secure coding and foster cross-functional collaboration.

Spring Health is a global mental health company using an AI-native platform to deliver personalized mental health support. The company reaches over 170 million people worldwide and fosters a culture of innovation, collaboration, and commitment to eliminating barriers to mental health.

• Design scalable, secure AWS architectures and lead systems decisions for resilience.
• Implement IaC with Terraform, CDK, or CloudFormation; optimize CI/CD pipelines.
• Integrate AI tools into workflows, mentor engineers, and enforce security standards.