Act as the directly responsible individual for the team's highest-scope initiatives, shaping long-range technical goals for the static analysis engine.
Set technical direction for AI-assisted tooling that implements, reviews, and validates engine changes, including SAST rules mapped to CWE and OWASP.
Mentor engineers through code review and pairing, and participate in on-call rotations to troubleshoot production and security operations.
GitLab is an intelligent orchestration platform for DevSecOps that helps organizations increase developer productivity, improve operational efficiency, and reduce security and compliance risk. With over 50 million registered users and more than half of the Fortune 100 as customers, GitLab fosters a high-performance, remote-first culture that embraces AI and continuous knowledge exchange.
Design, build, and operate security engineering services in Go and Python on AWS and Kubernetes.
Own the event-driven NATS platform connecting security services, ensuring delivery guarantees and observability.
Build agentic security workflows and CI security gates (SAST, SCA, secret detection) that are trusted by default.
Sezzle is a fintech company that offers interest-free installment plans and aims to financially empower the next generation. It is building an innovative, dynamic team of engineers and data enthusiasts with a culture that values unique, purpose-driven individuals.
Architect and develop secure backend services for Access Security using AI.
Collaborate with cross-functional teams to deliver enterprise-ready identity intelligence.
Own end-to-end feature delivery and mentor engineers.
ServiceNow is an AI control tower for business reinvention, uniting AI, data, and workflows to help enterprises work smarter. It serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent are unstoppable.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Investigate and remediate application security vulnerabilities directly in code, implementing fixes and submitting pull requests.
Deploy, configure, and optimize SAST and SCA tools across repositories and CI/CD pipelines, reducing false positives.
Triage and prioritize security findings while collaborating with engineering teams to embed secure coding practices.
Partner company is a technology firm delivering large-scale international projects with a focus on integrating application security into the software development lifecycle. They foster a collaborative, globally distributed engineering culture with an informal environment, open-door policy, and continuous learning opportunities.
Deliver accurate security assessments of software, code, and firmware, evaluating resilience against AI-driven attacks.
Build and pressure-test novel AI-enabled security tooling and workflows, then drive adoption across the security org.
Partner cross-functionally to define and drive Samsara's medium- and long-term AI security strategy.
Samsara provides a Connected Operations Cloud platform that helps organizations improve safety, efficiency, and sustainability of physical operations. As a publicly traded company, they foster a culture of rapid career development and hyper growth, with a high-caliber team.
Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
Partner with DevOps on paved roads for secure-by-default development and lead incident response.
Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.
Build and maintain core components of the clearing house in Go on GCP, including customer onboarding flows and data ingestion pipelines.
Take ownership of ambiguous problems and specific features, driving them from design through production with appropriate testing and observability.
Design, implement, and operate reliable agentic workflows that automate complex, multi-step tasks across production systems.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. The company is venture-backed by leading investors and serves Fortune 500 enterprises, including OpenAI and Snowflake.
Contribute to secure-by-design practices and maturing SAST, SCA, and DAST programs.
Develop Secure AI Development Lifecycle and AI-assisted threat modeling framework.
Mentor engineers on secure coding and foster cross-functional collaboration.
Spring Health is a global mental health company using an AI-native platform to deliver personalized mental health support. The company reaches over 170 million people worldwide and fosters a culture of innovation, collaboration, and commitment to eliminating barriers to mental health.
Conduct hands-on application security reviews threat modeling and code audits across the entire stack (backend frontend APIs infrastructure).
Build and improve security automation for vulnerability management including SAST DAST container scanning and secrets detection.
Drive remediation of findings from bug bounty scanners and audits partnering with engineering teams to prioritize and fix.
Close builds a communication-first AI-powered CRM that helps sales teams sell more and faster. With a 120-person 100% remote team they are bootstrapped profitable and focused on eliminating manual data entry for scaling businesses.
Design, build, and operate production AI agents for developer productivity, from code review to incident response.
Build self-service platform infrastructure enabling teams to prototype, deploy, and scale their own AI developer tools.
Integrate LLM providers, agent orchestration frameworks, and MCP servers into reliable, loved developer tools.
Docker is a developer tooling company trusted by over 20 million monthly users for building, sharing, and running applications. We are a globally distributed, remote-first team building AI-powered tools that shape how software gets built and delivered.
Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.
Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins, combining custodial wallets, payment orchestration, and issuance. As a 40-person startup, we operate through our own regulated entities with built-in compliance and risk controls.
Design and build full-stack capabilities supporting AI initiatives across Keeper's product portfolio.
Develop backend services, APIs, and frontend experiences that integrate AI-driven functionality into secure production environments.
Collaborate with AI and product engineering teams to remove technical dependencies and deliver production-ready AI features.
Keeper Security is a cybersecurity software company providing zero-knowledge and zero-trust security solutions that protect passwords, secrets, and infrastructure. It is a fast-growing global organization trusted by millions of users and thousands of enterprises, with a culture focused on innovation and reliability.
Lead and develop a distributed engineering organization across multiple time zones.
Drive technical roadmap and engineering excellence for scalable, secure, observable systems.
Foster ownership, continuous learning, and reliability practices across engineering teams.
They build developer tooling for identifying security vulnerabilities and code quality issues early in the development lifecycle. A distributed, collaborative culture across Canada, US, and Europe, emphasizing ownership and continuous learning.
Take deep ownership of key systems and product areas, becoming the technical expert and primary point of reference.
Architect, build, and maintain highly available and scalable REST APIs and backend services.
Use agentic development workflows and AI coding tools as standard engineering practice.
This partner company builds an AI-driven e-commerce messaging platform powered by customer context and data. It is a high-growth, remote-first environment with a collaborative and supportive culture.
Review coding tasks derived from real GitHub issues and pull requests to assess technical soundness and reproducibility.
Evaluate unit tests for correctness, coverage, and robustness, identifying flaky tests or missing dependencies.
Provide clear recommendations on whether tasks should be accepted, improved, or excluded.
Anyone AI is a company that focuses on AI-related projects, particularly in evaluating software engineering tasks. They are a smaller organization with a culture that values technical expertise and attention to detail.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Develop secure, well-tested features using Ruby and GraphQL for repository management.
Work through complex requirements and legacy constraints to deliver reliable and performant solutions.
Collaborate across teams and functions, both asynchronously and synchronously, using AI tools to speed up delivery.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity and accelerate digital transformation. They serve over 50 million registered users and more than 50% of the Fortune 100, fostering a high-performance culture driven by values and continuous knowledge exchange.
Apply your cybersecurity expertise to train next-generation AI systems with real-world input.
Analyze, debug, and resolve software bugs and vulnerabilities across diverse codebases.
Perform security audits, penetration testing, and contribute to backend development.
Our client is a venture-backed AI company developing intelligent systems via human expertise and machine learning. They are rapidly growing with over $40 million in funding and a global network of experts.
Design and build CI/CD workflow integrations that bring application security into software delivery pipelines and developer environments.
Run discovery sessions and architecture workshops with enterprise customers to align the Snyk platform to their requirements.
Build trusted relationships with technical stakeholders and support implementations from pre-sales through post-sales.
Snyk builds a security platform where AI agents work alongside engineers to find and fix risk at the speed software is built. The company fosters an inclusive culture with global benefits and employee resource groups, aiming to make the digital world safer.