Source Job

• Own cloud and platform security end to end across AWS and Azure, including architecture, detection, and response.
• Build self-serve security tooling and guardrails to replace manual processes and reduce risk.
• Partner with engineering teams to embed security into CI/CD pipelines and product development.

Ada is an AI customer service platform that enables enterprise companies to deliver instant, proactive, and personalized customer experiences. Established in 2016, the Canadian company has powered over 5.5 billion interactions for brands like Square and YETI, backed by over $250M in funding from top-tier investors.

• Lead the development and implementation of security strategies, policies, and procedures.
• Architect secure systems and collaborate with engineering teams to integrate security throughout the software development lifecycle.
• Conduct risk assessments, incident response, and mentor junior engineers to promote security awareness.

Gemini is a global crypto and Web3 platform founded in 2014, offering secure crypto products and services to individuals and institutions in over 70 countries. The company is publicly traded with a mission to bridge traditional finance with the emerging cryptoeconomy, fostering a diverse team that prioritizes trust and security.

• Build and lead Attio's Product Security function, securing their AI-native SaaS platform and sensitive customer data.
• Work with Engineering Leadership to ensure security by design, mitigating unique risks from AI-driven features and AI-assisted development.
• Lead production security incident response, recruiting and retaining a world-class team of Security Engineers and SecOps practitioners.

Attio is the CRM for agentic revenue, designed for ambitious go-to-market teams to understand every customer and automate at scale. They have raised $116M from top investors and hire builders who thrive on complex technical challenges, holding themselves to a high bar and delighting users.

• Lead security architecture across AWS and colocation, defining secure patterns and controls.
• Partner with engineering teams to threat model, review designs, and promote secure-by-design.
• Develop automated security tooling and guardrails using infrastructure-as-code and AI-assisted workflows.

NMI enables partners with choice, challenging the one-size-fits-all approach to payments. We're a global company with a remote-first culture, fostering diversity and inclusion through initiatives like affinity groups and DEI action teams.

• Design and implement security controls across applications, cloud infrastructure, and development environments.
• Conduct architecture reviews, threat modeling, and security assessments for new products.
• Identify, prioritize, and remediate vulnerabilities across the technology stack.

SignalFire partners with top early-stage startups that are shaping the future of technology. They have a portfolio of over 200 innovative companies across AI, cybersecurity, healthtech, fintech, developer tools, and enterprise SaaS.

• Own security architecture, guardrails, and automation across Azure and AWS.
• Engineer and maintain Kubernetes security and cloud network controls.
• Mentor junior engineers and drive security maturity across the organization.

Semperis is a cybersecurity company focused on protecting enterprise identities. It has been recognized as one of America's Fastest-Growing Cybersecurity Companies and a multi-year Inc. Best Workplace awardee, with a culture rooted in purpose, growth, and balance.

• Lead Enterprise Security Engineering and SecOps, directing a high-performing team while owning operational defense.
• Architect Zero Trust Architecture transition, implementing micro-segmentation and identity-based controls.
• Oversee 24/7 MDR/SOC partnerships, incident response, and risk-based vulnerability management.

Virta Health is on a mission to reverse metabolic disease in one billion people through innovations in technology, personalized nutrition, and virtual care delivery. They have raised over $350 million and partner with large health plans, employers, and government organizations, with a values-driven culture emphasizing ownership, transparency, and evidence-based decision-making.

• Lead and grow a team of security specialists to manage day-to-day security operations, incident response, and threat intelligence.
• Own the security strategy, policy framework, and controls while partnering with engineering on cloud and application security.
• Drive security awareness across the organization and report on risks to senior leadership and governance forums.

Wayflyer provides fast, technology-driven financing to small businesses, assessing them in minutes and deploying capital within 24 hours. With over $6 billion deployed and backing from Tier 1 banks, the company has a global team across offices in Dublin, London, New York, Charlotte, Berlin, and Sydney, fostering an ambitious and collaborative culture.

• Partner with engineering teams to review cloud and compute architecture design changes.
• Establish threat models for cloud and compute paved roads to identify security risks.
• Write code for automations that support security requirements like threat detection and incident containment.

Quora operates two platforms: a global knowledge sharing platform with over 300 million monthly unique visitors, and Poe, a platform for AI language models. The company is remote-first with a culture rooted in transparency, idea-sharing, and experimentation.

• Lead and evolve the company's application security strategy, roadmap, and day-to-day operations.
• Manage and optimize AppSec tooling including GitHub Advanced Security, Invicti, Hadrian, and Cloudflare WAF.
• Build secure development standards, conduct security reviews, and partner with engineering teams on design and code review.

Beyond Finance helps everyday Americans escape debt and achieve financial freedom through compassionate, individualized care and customized solutions. The company is rapidly growing, has helped over 1 million clients, and fosters a forward-thinking culture focused on compliance and ethics.

• Build secure-by-default infrastructure and automation to eliminate entire vulnerability classes across money-moving systems.
• Own application security, threat modeling, and vulnerability disclosure from design review to production.
• Partner with engineering to set security standards, make risk-based decisions, and ship fast without compromising safety.

Flex is building the AI-native private bank for business owners, re-architecting the entire financial system for entrepreneurs. Since launching in 2023, Flex has scaled to nine-figure annualized revenue, raised $100M+ in equity and $300M+ in debt, and operates with a high-bar, low-ego culture focused on speed and execution.

• Lead threat modeling and security architecture reviews with engineering teams by translating security risks into concrete development actions.
• Architect, build, and maintain security tooling and integrations that make secure development the default in our CI/CD pipelines.
• Design and deploy automated security testing to identify vulnerabilities early in the development process.

Abnormal Security protects the humans behind the world's most critical organizations from AI-powered cybercrime. More than 4,500 enterprises trust its behavioral AI platform.

• Define and execute short- and long-term security strategy, governance, and operations across the organization.
• Lead security initiatives covering monitoring, incident response, cloud protection, and application security.
• Collaborate with engineering, compliance, and leadership teams to balance strong protection with seamless experiences.

A fast-growing global technology organization in the fintech sector. The company fosters a collaborative international environment with talented teams across multiple regions.

• Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
• Build automation, policy-as-code, and security tooling to enable development teams to shift left and integrate security into workflows.
• Design and implement secure baselines for cloud resources and Kubernetes-based infrastructure, and drive vulnerability management efforts.

Wiz is a cloud security company enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime. As one of the fastest-growing startups, trusted by over 65% of the Fortune 100, Wiz values world-class talent and creativity.

• Own application and product security: threat modeling, secure design review, and secure code review for a member-facing healthcare app.
• Build and secure the AI-native agentic SDLC with security gates and controls for AI-generated code.
• Manage security architecture across AWS environment, identity and access management, and third-party vendor integrations.

Oshi Health is on a mission to eliminate the impact of digestive health conditions through innovative GI care, operating a virtual-first platform. As a fully remote, SaaS- and cloud-native healthcare company, they foster a culture that thrives on diversity, with monthly DEIB discussions, and emphasize core values like owning the outcome and doing the right thing.

• Write, tune, and maintain detections in a modern SIEM across cloud, container, and SaaS log sources.
• Run cloud security operations in AWS, triage alerts, and help execute incident-response playbooks.
• Build and extend security-automation tooling with code fluency in Python or TypeScript.

SmarterDx uses clinical AI to help health systems capture the full value of patient care. They are a remote-first team with a mission to make healthcare more accurate and sustainable.

• Implement and optimize Microsoft 365 E5 security solutions, including Entra ID, Intune, Defender, and Sentinel.
• Participate in security operations, incident response, threat detection, and vulnerability management.
• Support cloud security posture management across Azure and AWS environments.

Numeris is Canada's most trusted source for broadcast measurement and consumer behavior data, serving broadcasters, advertisers, and agencies. The company fosters a collaborative culture with a focus on continuous learning, career advancement, and community support.

• Define and execute the growth strategy for the Cloud Security practice, building a qualified pipeline and developing trusted relationships with Microsoft, Cognizant, and strategic clients.
• Lead complex solutioning efforts, including discovery, architecture, estimation, proposals, and executive presentations, ensuring solutions are technically sound and commercially viable.
• Build, develop, and lead a high-performing team of architects, consultants, engineers, and technical leaders, fostering a culture of accountability and collaboration.

3Cloud is a cloud services company specializing in Microsoft Azure, helping clients with cloud transformation, data, AI, and application modernization. They foster a culture of experimentation, candid feedback, and collective growth, hiring people who challenge and hold each other accountable.

• Lead the technical architecture and engineering strategy for cybersecurity assessment offerings and an agentic AI platform across multiple markets.
• Establish and scale the Cyber Engineering function, including operating models, team charters, and delivery frameworks.
• Partner with sales, consulting, and OEM alliances to align technical execution with strategic growth objectives.

Emergent is an award-winning IT solutions provider and value-added reseller specializing in cybersecurity and complex technology challenges. The company has a collaborative culture centered on respect, empathy, excellence, and fun, with a focus on employee well-being.

• Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization.
• Use your knowledge of security architecture to help engineers build and securely operate products and services from the ground up.
• Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.

LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials. Trusted by more than 100,000 businesses and millions of users worldwide, LastPass blends strong security with everyday simplicity.