Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
Partner with security engineering to turn findings into actionable defense improvements.
Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.
Break AI and agentic systems and turn research into automated, repeatable attacks for NodeZero.
Design and execute prompt injection, defense evasion, and tool-use exploitation against AI infrastructure.
Build and extend LLM-powered applications and microservices, focusing on production safety and reliability.
Horizon3 is a cybersecurity company whose NodeZero platform delivers autonomous pentests to find exploitable attack vectors. It’s a fast-growing, fully remote team of engineers and former special ops operators with a culture of respect and ownership.
Deliver accurate security assessments of software, code, and firmware, evaluating resilience against AI-driven attacks.
Build and pressure-test novel AI-enabled security tooling and workflows, then drive adoption across the security org.
Partner cross-functionally to define and drive Samsara's medium- and long-term AI security strategy.
Samsara provides a Connected Operations Cloud platform that helps organizations improve safety, efficiency, and sustainability of physical operations. As a publicly traded company, they foster a culture of rapid career development and hyper growth, with a high-caliber team.
Lead advanced security assessments across web applications, APIs, cloud platforms, and enterprise networks.
Conduct red team activities, vulnerability research, and custom tool development to simulate real-world attacks.
Collaborate with cross-functional teams to assess risks, support remediation, and mentor colleagues.
Hitachi Vantara provides data infrastructure for global innovators across industries. As a diverse, global team, they foster an inclusive culture focused on making a real-world impact with data.
Lead Apollo's multi-year AppSec strategy and shape cross-team roadmaps.
Set secure design, code review, and AI security standards across engineering.
Mentor security champions and build automation that scales secure practices.
Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies. Founded in 2015, it has raised ~$250M and is valued at $1.6B, with a culture focused on AI-native innovation and continuous improvement.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.
Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.
Conduct original offensive research against Dia, including prompt injection, sandbox escape, and cross-profile data access.
Threat model new surfaces with engineering teams and review features before they ship.
Build automated vulnerability discovery systems, including fuzzing and AI-assisted hunting pipelines.
The Browser Company is building a better way to use the internet, with a focus on an AI-powered browser called Dia. They are a remote-first team of nearly 100 people who value diversity and craft.
Lead threat modeling and security architecture for AI-enabled systems, including LLM applications and cloud-native platforms.
Define and implement secure engineering patterns and guardrails across AWS infrastructure, CI/CD pipelines, and third-party integrations.
Partner with engineering and security teams to embed security throughout the AI product lifecycle and drive cross-functional security initiatives.
Quanata is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions for State Farm and HiRoad. We are a wholly owned subsidiary of State Farm with a remote-first culture that values inclusion and positive team dynamics.
Execute external network, web application, and API penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities while assessing business and technical risk.
Deliver client-ready reports and communicate remediation guidance to stakeholders.
Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive services. It is trusted by more than 2,400 global organizations and offers a fast-paced, collaborative remote culture.
Validate vulnerabilities and configuration weaknesses to determine practical exploitability and develop realistic attack paths across web, cloud, identity, and infrastructure.
Conduct purple-team exercises and translate offensive findings into actionable improvements for detection and response.
Backblaze is the object storage leader in the open cloud movement, providing cloud storage services to businesses, developers, and individuals. Founded in 2007 and publicly traded since 2021, the company generates over $136M in annual recurring revenue, manages over three billion gigabytes of data for 500K+ customers in 175+ countries, and fosters a culture centered on diversity, equity, and inclusion.
Execute internal network and cloud-based SaaS penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities using public or custom-developed exploits.
Deliver clear, client-ready reports with actionable remediation guidance to client stakeholders.
Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive cybersecurity services under A-LIGN, a security and compliance partner trusted by more than 2,400 global organisations. The company works with organisations ranging from small businesses to global enterprises in a fast-paced, collaborative, and remote-first environment.
Contribute to secure-by-design practices and maturing SAST, SCA, and DAST programs.
Develop Secure AI Development Lifecycle and AI-assisted threat modeling framework.
Mentor engineers on secure coding and foster cross-functional collaboration.
Spring Health is a global mental health company using an AI-native platform to deliver personalized mental health support. The company reaches over 170 million people worldwide and fosters a culture of innovation, collaboration, and commitment to eliminating barriers to mental health.
Execute external network, web application, and API penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities and assess attack paths.
Write clear client reports and communicate findings, risk, and remediation guidance.
We are A-LIGN, a technology-enabled cybersecurity company providing offensive and defensive security and compliance services trusted by more than 2,400 global organizations. We are a fast-paced, collaborative team supporting remote work and professional growth.
Execute penetration testing engagements across web applications, APIs, networks, and cloud environments.
Identify, validate, and document security vulnerabilities with clear proof-of-concepts and remediation guidance.
Collaborate with clients and internal teams through scoping calls, kickoffs, report reviews, and quality assurance.
A security consulting firm that provides penetration testing services for web applications, APIs, networks, and cloud environments. The company fosters a collaborative, remote-first culture with a focus on quality assurance and continuous improvement.
Run full kill chains against web, mobile, API, and thick/thin clients, proving exploitability and mapping blast radius.
Train the swarm by translating your tradecraft into reasoning and evaluation data for autonomous AI attackers.
Pressure-test the swarm, build tools, and tell the attack story to engineers and executives.
Armadin builds autonomous proactive security, deploying AI agents that discover and remediate threats before breaches. We're a scrappy, high-ownership team of elite researchers and engineers, led by Kevin Mandia, with startup-level autonomy.
Apply your cybersecurity expertise to train next-generation AI systems with real-world input.
Analyze, debug, and resolve software bugs and vulnerabilities across diverse codebases.
Perform security audits, penetration testing, and contribute to backend development.
Our client is a venture-backed AI company developing intelligent systems via human expertise and machine learning. They are rapidly growing with over $40 million in funding and a global network of experts.
Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
Own SOC 2, HIPAA, AI security governance, and incident response.
AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.