Build and harden secure CI/CD pipelines with security gates.
Implement software supply chain security controls such as signed artifacts, SBOMs, and provenance attestation.
Lead security architecture reviews and threat models for Kubernetes-based workloads on GCP and AWS.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software to help organizations build faster, stay compliant, and eliminate risk. They are a venture-backed company with a remote-first culture and serve Fortune 500 enterprises.
Set product security direction across major products and platforms, leading cross-functional initiatives.
Embed security by design into roadmaps and engineering work, with high autonomy.
Drive security assurance programs and mentor engineers across the organization.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.
Work on client consulting projects to design and implement cloud native security architectures across AWS, GCP, and Azure.
Contribute to internal labs and open source projects, with a focus on threat modelling, supply chain security, and DevSecOps practices.
Collaborate with a team of SANS authors and engineers to deliver pragmatic security solutions for highly regulated industries.
ControlPlane is a London-based consultancy specialising in cloud-native, Kubernetes, and open source solutions, helping organisations secure complex cloud infrastructures with secure-by-design principles. As a successful start-up, we are a dynamic, cutting-edge, and passionate team that values employee wellbeing, progression, and open source community engagement.
Harden AWS infrastructure using Terraform and Go, designing account structure, IAM, network segmentation, and KMS.
Secure Kubernetes clusters with admission policies, RBAC, network policies, and runtime controls.
Engineer cloud detections, guardrails, and just-in-time access while responding to incidents and teaching engineers.
Qualia builds the leading B2B real estate technology that transforms home buying and selling into a simple, secure, and enjoyable process. They're a growing, mission-driven team committed to supporting employees with flexible work and comprehensive benefits.
Design and implement software supply chain security controls across build and release pipelines.
Secure GitHub and GitLab environments, implement SBOM generation, and integrate vulnerability scanning into CI/CD.
Align security practices with SLSA, NIST SSDF, and NIST SP 800-218 while collaborating with security and engineering teams.
New Era Technology securely connects people, places, and information with end-to-end technology solutions at scale. With a global team of over 3,000 professionals, it fosters a team-oriented culture focused on personal and professional development.
Design and implement secure-by-default workflows for cloud production environments.
Strengthen Kubernetes, CI/CD security, and identity management across the platform.
Collaborate with engineers to improve reliability, observability, and disaster recovery.
The hiring company is a remote-first platform organization focused on building reliable infrastructure and protecting sensitive data across multiple countries. Their culture emphasizes collaboration, developer experience, and evidence-based assessment.
Design and build paved paths for privileged access and secrets management on top of access management and secret storage platforms.
Build self-service tooling, SDKs, and Terraform modules to enable just-in-time access and short-lived credentials.
Partner with engineering teams to integrate security services into Kubernetes, CI/CD, and cloud environments across DoorDash, Wolt, and Deliveroo.
DoorDash is a technology and logistics company that operates a multi-sided marketplace connecting consumers, merchants, and dashers. They are building a large, inclusive team focused on empowering local economies.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Conduct hands-on penetration testing and security assessments for Kubernetes and cloud-native products.
Own vulnerability management from discovery through patch development, release, and verification.
Guide secure engineering practices and threat modeling across the product lifecycle.
They build next-generation Kubernetes and AI infrastructure for organizations operating at scale. The company is fast-growing, open-source-oriented, and values ownership, technical excellence, and measurable impact.
Design, develop, and optimize automated CI/CD pipelines for enterprise applications, microservices, and infrastructure workflows.
Integrate DevSecOps practices including automated security testing, compliance controls, and vulnerability remediation.
Collaborate with cloud, development, and security teams to support containerized workloads on AWS and Kubernetes.
They are a mission-driven technology partner focused on modernizing critical government systems and strengthening secure, reliable digital services. They hire through Jobgether and work with multidisciplinary teams across software engineering, cloud infrastructure, cybersecurity, and operations.
Design, build, and ship secure container technologies from design through production.
Develop image pipelines, registry infrastructure, and developer tooling for security and performance.
Collaborate with product, customers, and engineers while integrating AI-assisted development.
Chainguard develops secure container technologies and open-source tools to help organizations build and deploy software safely. It is a remote-first, fast-growing company with a small autonomous engineering team that values ownership, transparency, and continuous improvement.
Secure and operate AWS and Kubernetes environments supporting Chainalysis products and AI platforms.
Troubleshoot production issues, ship Terraform and Kubernetes changes, and strengthen infrastructure security controls.
Collaborate across infrastructure, security, and AI teams, and participate in on-call to drive fixes to completion.
Chainalysis is a blockchain data platform that helps governments and businesses investigate illicit activity and manage risk through data, services, and solutions. The global company values diversity, innovation, and AI-driven work, with employees and customers around the world.
Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
Implement automated vulnerability scanning for Docker images and dependencies.
Secure Kubernetes workloads and enforce security policies throughout the CI/CD lifecycle.
Gcore is a global provider of infrastructure and software solutions for AI, cloud, network, and security. With 550+ professionals and 210+ edge locations, we build the foundation that connects the world to AI.
Own the technical direction for NodeZero container image build, signing, scanning, and OTA delivery.
Design and operate CI/CD pipelines, image hardening, and release engineering standards at scale.
Mentor engineers and drive architecture decisions across team boundaries for secure product delivery.
Horizon3 is a fast-growing, remote cybersecurity company that helps organizations proactively find, fix, and verify exploitable attack vectors. The team is a fusion of former special operations cyber operators and engineers, focused on respect, collaboration, and results.
Design, build, and maintain minimal, hardened container images across Linux distributions and application runtimes.
Own end-to-end CVE remediation across OS packages, libraries, and dependencies, including patching and validation.
Build automated pipelines for image builds, vulnerability scanning, testing, and publishing.
RapidFort is a cybersecurity company focused on container image security and software supply chain protection. It is a rapidly scaling remote-first startup offering career growth in Linux, container, and security challenges.
Design, build, and operate scalable, secure microservices powering Cyderes' security platform with minimal oversight.
Deploy to AWS, GCP, or Azure with Terraform and run containerized workloads on Docker and Kubernetes.
Improve automated testing and CI/CD, review code, and mentor teammates while keeping security in mind.
Cyderes builds practical Identity & Access Management (IAM), Exposure Management, and risk programs, providing Managed Detection & Response (MDR) powered by its Meridian entity fabric. It is a Great Place to Work-Certified global team that helps organizations stop active threats fast with people, platforms, and perspectives.
Develop and maintain automated CI/CD pipelines and Infrastructure as Code templates for secure software delivery.
Work with Docker, Kubernetes, and AWS to standardize deployments and improve platform reliability.
Collaborate with development, security, and infrastructure teams to embed DevSecOps practices and troubleshoot issues.
The partner company is a technology-driven organization focused on cloud infrastructure, platform engineering, and secure software delivery. It promotes a collaborative culture and operates with a fully remote workforce.
Own and strengthen security across the product stack, partnering with engineering throughout development.
Build security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
Lead security reviews, threat modeling, and drive security compliance programs and incident response.
Early-stage B2B identity and access management company focused on building secure product systems. Small, collaborative team seeking its first dedicated security engineer to help grow the security function.
Design, build, and operate security engineering services in Go and Python on AWS and Kubernetes.
Own the event-driven NATS platform connecting security services, ensuring delivery guarantees and observability.
Build agentic security workflows and CI security gates (SAST, SCA, secret detection) that are trusted by default.
Sezzle is a fintech company that offers interest-free installment plans and aims to financially empower the next generation. It is building an innovative, dynamic team of engineers and data enthusiasts with a culture that values unique, purpose-driven individuals.
Embed security practices into the SDLC, implementing SAST, SCA, and secret scanning controls in CI/CD pipelines.
Harden AWS infrastructure and infrastructure-as-code, including IAM, Terraform, VPCs, and KMS.
Lead a Security Champions program, conduct threat modeling, and define security standards for APIs and critical features.
The company is a fast-growing technology organization focused on application and cloud security. It fosters a collaborative, remote-first culture with technical autonomy and a focus on developer empowerment.