Source Job

Europe

  • Implement and improve security controls across corporate infrastructure and AI solutions.
  • Develop SIEM/XDR monitoring, vulnerability management, and secure CI/CD baselines.
  • Validate security weaknesses and automate tasks with Python, PowerShell, and AI tools.

Security Engineering Vulnerability Management Python Cloud Security

20 jobs similar to Security Engineer / DevSecOps

Jobs ranked by similarity.

  • Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
  • Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
  • Partner with DevOps on paved roads for secure-by-default development and lead incident response.

Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.

$150,000–$180,000/yr
US 20w maternity 12w paternity

  • Lead security architecture across cloud, platform, and AI systems.
  • Drive threat modeling, vulnerability management, and incident response.
  • Embed automated security testing into CI/CD and infrastructure-as-code.

Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.

Europe US 6w PTO

  • Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
  • Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
  • Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.

n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.

$200,000–$250,000/yr
US

  • Build and maintain security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
  • Partner with engineering on security reviews, threat modeling, secure design, code review, and vulnerability remediation.
  • Develop detection capabilities and improve incident response processes.

They build enterprise identity software for cybersecurity. As an early-stage company, they focus on security and compliance.

Europe 6w PTO

  • Manage the full vulnerability lifecycle: scan, triage, remediate, and verify across code, containers, and IaC.
  • Administer SAST, DAST, SCA, and secret scanning tools in CI/CD and investigate alerts.
  • Monitor logs, SIEM/Wazuh rules, and Cloudflare/WAF configurations for operational security.

Boosta is a holding tech company that creates, develops, and invests in digital businesses with global potential. We collaborate with over 800 specialists worldwide, and TechCore, our service team, includes 50+ professionals handling 300+ projects a year.

France 4w paternity

  • Bridge security and platform engineering to make infrastructure secure by design and provable at audit.
  • Own infrastructure vulnerability management and automate security guardrails on Azure and Kubernetes.
  • Build detection as code, widen SIEM coverage, and eliminate long-lived credentials.

360Learning is a collaborative learning platform for turning internal experts into champions for employee, customer, and partner growth. Founded in 2013, it has 400+ employees across North America and EMEA with an inclusive Convexity culture.

$140,000–$160,000/yr
US

  • Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
  • Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
  • Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.

Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.

Global 4w PTO

  • Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
  • Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
  • Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.

Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.

US

  • Own the security program end-to-end, covering CorpSec, SecOps, compliance, and tooling.
  • Drive SOC 2 audits, manage identity and access, and build detection and observability with Datadog and SentinelOne.
  • Operate as a hands-on zero-to-one operator on a small team with high autonomy and real ownership.

Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors, Kodex supports over 15,000 government agencies in 190 countries and operates as a fast-growing Series A company with a small, high-autonomy team.

  • Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
  • Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
  • Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.

Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.

$0–$185,800/yr
Global 26w maternity 26w paternity

  • Design and build security solutions across application security, infrastructure, and AI agentic systems.
  • Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
  • Develop AI governance standards and security review agents to protect user trust.

Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.

$110,000–$120,000/yr
US 4w PTO

  • Build and improve vulnerability management tooling and workflows across applications, dependencies, containers, and infrastructure.
  • Integrate security checks and policy controls into CI/CD and developer workflows.
  • Partner with engineers to design secure-by-default patterns and translate security risks into remediation plans.

ITHAKA is a nonprofit that expands access to knowledge and education through services like JSTOR, Portico, and Ithaka S+R. It values belonging, evidence, speed, teamwork, and trust, with staff across the United States.

Europe

  • Provide security support for infrastructure and end-user systems, including macOS endpoints and cloud environments.
  • Manage AI governance, vulnerability management, and endpoint security across a global remote team.
  • Handle vendor security assessments, audit observations, and third-party app reviews.

Gurobi Optimization empowers customers to expand their use of mathematical optimization technology for smarter decision-making. They are a small company with employees across 16 countries, fostering a collaborative and innovative culture.

$182,800–$215,000/yr
US

  • Own the configuration, tuning, and management of our SIEM solution to diagnose unusual threats.
  • Perform architecture reviews, code reviews, and penetration testing on web and mobile apps.
  • Build and maintain vulnerability management CI/CD pipeline and collaborate with engineering teams.

Engine is the AI-native platform for intelligent travel, serving over 38,000 customers and nearly 2 million travelers. Recognized as one of Fast Company's Best Workplaces for Innovators (2025) and Built In's Best Places to Work (2020–2026), we have a culture of exponential growth and high-caliber colleagues.

Europe

  • Take end-to-end ownership of security across a platform serving 50 million users, spanning application security, GRC, and AI security.
  • Collaborate closely with engineering leadership and development teams to identify vulnerabilities, strengthen controls, and drive remediation.
  • Protect AI-powered systems against evolving threats like prompt injection, jailbreaks, and third-party provider vulnerabilities.

They are a rapidly growing AI-powered technology platform serving over 50 million users worldwide. As a scale-up with more than 50 employees, they foster a high-autonomy, execution-focused culture with direct access to leadership.

Brazil 6w PTO

  • Embed security practices into the SDLC, implementing SAST, SCA, and secret scanning controls in CI/CD pipelines.
  • Harden AWS infrastructure and infrastructure-as-code, including IAM, Terraform, VPCs, and KMS.
  • Lead a Security Champions program, conduct threat modeling, and define security standards for APIs and critical features.

The company is a fast-growing technology organization focused on application and cloud security. It fosters a collaborative, remote-first culture with technical autonomy and a focus on developer empowerment.

US

  • Lead technical initiatives to strengthen engineering security across Aiwyn's SaaS platform, CI/CD pipelines, and software delivery systems.
  • Own vulnerability management, threat modeling, and product security, partnering with engineering teams to build secure-by-default practices.
  • Drive supply chain security, AI security, and security strategy to make security a shared responsibility across engineering.

Aiwyn builds the first complete platform for modern accounting firms, replacing legacy practice management systems with software firms can trust. Backed by top-tier investors, it works with the majority of the Top 500 accounting firms and fosters a culture of ownership, trust, and relentless innovation.

UK Unlimited PTO 18w maternity 12w paternity

  • Set product security direction across major products and platforms, leading cross-functional initiatives.
  • Embed security by design into roadmaps and engineering work, with high autonomy.
  • Drive security assurance programs and mentor engineers across the organization.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.

Global

  • Build and operate the Security Observability & Data Platform: ingestion, normalization, retention, and query/detection at TB scale.
  • Own endpoint security across the fleet: EDR deployment, binary authorization, and hardening baselines with IT.
  • Lead threat hunting, incident response, and red-team exercises, and turn results into detections and fixes.

We build foundational infrastructure and products for web3, including the Sui blockchain and Move language. We are a remote-first, world-class team with tremendous growth potential, backed by a $300M Series B from top venture funds.

$180,000–$230,000/yr
US

  • Own and strengthen security across the product stack, partnering with engineering throughout development.
  • Build security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
  • Lead security reviews, threat modeling, and drive security compliance programs and incident response.

Early-stage B2B identity and access management company focused on building secure product systems. Small, collaborative team seeking its first dedicated security engineer to help grow the security function.