Embed security into every phase of the SDLC and champion secure design for Gen AI and agentic AI tools.
Perform secure code reviews, threat modeling, and establish secure API patterns across engineering teams.
Operate the application vulnerability management lifecycle and communicate risk to engineering and business leaders.
GameChanger builds a platform for youth sports, helping families elevate the next generation through community and technology. They are a remote-first, dynamic tech company based in New York City, solving major challenges in youth sports.
Design, deploy, and manage cloud security solutions to protect AWS and Azure environments.
Perform security assessments, vulnerability remediation, and lead key security programs.
Automate security processes and integrate DevSec practices into the software development lifecycle.
Navitus is a pharmacy benefit manager (PBM) alternative that aims to make medications more affordable by removing cost from the drug supply chain. The company fosters a diverse, creative, and growth-oriented culture.
Monitor security solutions and investigate potential incidents to protect cloud, infrastructure, and applications.
Conduct vulnerability assessments, penetration testing, and security audits to strengthen security posture.
Collaborate with development teams to identify risks and implement effective security controls.
The partner company offers services aimed at improving emotional wellness and access to care. It fosters a collaborative culture with a focus on continuous learning, innovation, and professional development, and values diversity and inclusion.
Lead and maintain ATO documentation and coordinate with security, engineering, and project teams to ensure compliance.
Monitor security events, investigate threats, and assess vulnerabilities across cloud and enterprise environments.
Develop and implement security policies, conduct risk analysis, and provide cybersecurity guidance to stakeholders.
The company is a partner organization focused on cybersecurity and federal technology modernization. It offers a fully remote, mission-driven culture with opportunities for growth in a technology-focused environment.
Integrate security into the SDLC through automation, testing, and continuous improvement.
Identify, investigate, and remediate application and infrastructure vulnerabilities.
Develop tools and automation in Python, Go, or Terraform to improve security and developer productivity.
Corbalt is a technology company that partners with federal agencies to modernize and operate complex technology ecosystems, building shared platforms and reusable services. They are a remote-first team that values curiosity, kindness, ownership, and continuous learning, with roots in the Healthcare.gov recovery effort.
Lead product security engineering across key verticals, engaging with engineering leadership and technical teams.
Build and automate security design reviews, threat modeling, vulnerability management, and AI-assisted tools.
Serve as a subject matter expert for mobile, API, and cloud security, mentoring engineers and collaborating cross-functionally.
Xplor Technologies powers the experiences at the heart of everyday life through modern vertical software, embedded payments, and AI-powered capabilities. With over 130,000 businesses in 72+ countries and processing over $47 billion annually, we foster a culture of innovation, collaboration, and empathy, guided by core values like 'Find a better way' and 'Win together'.
Own the vulnerability management lifecycle across Glean's technology stack, from discovery through remediation and reporting.
Harden base OS images and secure open-source dependencies and the broader software supply chain.
Integrate SAST, DAST, dependency scanning, and automated security validation into CI/CD pipelines.
Glean is the Work AI platform that helps everyone work smarter with AI. With over 1,000 employees across more than 25 countries, we foster a diverse, inclusive workplace and are recognized as one of the world's most innovative companies.
Lead secure code reviews, threat modeling, and secure design assessments to translate findings into actionable guidance.
Design and integrate application security controls across CI/CD platforms and developer workflows.
Define secure coding standards, reference architectures, and automated security capabilities scalable to engineering teams.
Jobgether is a platform that uses AI-powered matching to connect candidates with job opportunities, ensuring rapid and fair application reviews. They focus on leveraging technology to streamline hiring processes and are committed to data privacy and professional growth.
Champion secure-by-default culture by embedding defense-in-depth principles into engineering frameworks and development practices.
Conduct hands-on source code reviews, threat modeling, and security assessments across microservice architectures.
Build automation and frameworks to eliminate repetitive security work and create scalable security capabilities.
Jobgether is a company that uses AI-powered matching to streamline job applications. It is a technology platform connecting candidates with hiring companies, with a focus on efficient and objective candidate review.
Operate and monitor cybersecurity controls for a FedRAMP- and CJIS-regulated SaaS product in AWS.
Triage security events, investigate threats, and support incident response with root-cause analysis.
Maintain security platforms, vulnerability management, and data protection operations across the environment.
Granicus provides cloud-based technology for government agencies to improve digital services and connect with communities. Over 25 years, they serve 5,500 agencies and 300 million subscribers, with a remote-first, inclusive culture.
Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization.
Partner with DevOps and CI/CD engineers to embed shift-left security practices throughout the software development lifecycle.
Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.
LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials straight from the browser. Trusted by more than 100,000 businesses and millions of users worldwide, they blend strong security with everyday simplicity in a remote-first, collaborative culture.
Build and maintain security infrastructure across AWS and Kubernetes, including telemetry pipelines, cryptographic material lifecycle, and compliance automation.
Engineer agentic AI workflows using tools like Claude Code and MCP integrations to automate security tasks such as code review and drift detection.
Develop threat models and embed security controls into deployment pipelines to prevent vulnerabilities at build time.
Lumin Digital provides cloud-native digital banking solutions for credit unions and banks. The company fosters a culture of trust, respect, and boldness, encouraging innovation and collaboration in a fully remote, async-first environment.
Collaborate with DevOps and engineering teams to embed security throughout the software development lifecycle.
Implement automated security testing, including SAST, DAST, SCA, and container security, and strengthen cloud-native security controls.
Support compliance with PCI-DSS, GDPR, CCPA, and SOC 2, and evaluate secure adoption of AI-assisted coding tools.
Our partner is a technology company in the travel and hospitality industry. They have a collaborative remote culture and value employee development and diversity.
Manage day-to-day security operational availability and supportability of a 24x7x365 infrastructure.
Make recommendations on enhancements to security hardware, software, and tools, and perform risk analysis.
Configure, implement, monitor, and support security software/systems including firewalls, VPNs, IDS/IPS, DLP, etc.
eMoney Advisor is a wealth management system that offers transparency, security, mobile access, and superior organization. We serve more than 109,000 financial professionals and support over 6 million end clients, fostering a culture that values diversity and inclusion.
Own application and product security: threat modeling, secure design review, and secure code review for a member-facing healthcare app.
Build and secure the AI-native agentic SDLC with security gates and controls for AI-generated code.
Manage security architecture across AWS environment, identity and access management, and third-party vendor integrations.
Oshi Health is on a mission to eliminate the impact of digestive health conditions through innovative GI care, operating a virtual-first platform. As a fully remote, SaaS- and cloud-native healthcare company, they foster a culture that thrives on diversity, with monthly DEIB discussions, and emphasize core values like owning the outcome and doing the right thing.
Collaborate closely with the Senior Security Engineer to scope, design, and implement security initiatives across cloud, endpoint, identity, and application security.
Administer and tune core security platforms including endpoint detection, email security, and vulnerability management.
Respond to security incidents and ensure compliance with HITRUST, HIPAA, and other industry standards.
Imagine Pediatrics is a tech-enabled, pediatrician-led medical group reimagining care for children with special health care needs by delivering 24/7 virtual-first and in-home medical, behavioral, and social care. They operate as a small, collaborative team that values curiosity and an unwavering commitment to children with medical complexity.
Lead the end-to-end vulnerability management lifecycle across the technology stack.
Harden base operating system images and secure the software supply chain.
Integrate security controls into CI/CD pipelines and establish secure-development practices.
Partner company is a technology organization focused on application security and cloud-native environments. They foster a collaborative, remote-first culture with a focus on continuous improvement and employee wellbeing.
Design and enforce cloud security controls and IAM policies across multi-account AWS environments.
Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
Develop automated detection and remediation workflows using Python, Bash, or Go and IaC tools.
The Tripadvisor Group connects people to experiences worth sharing, aiming to be the world's most trusted source for travel and experiences. It is a publicly traded company with a global portfolio of travel brands, fostering a culture of collaboration, agility, and traveler-first mindset.
Provide technical guidance and recommendations to clients to enhance their overall security posture within managed products.
Handle daily proactive maintenance and reactive troubleshooting/repair functions for security tools and systems.
Utilize SIEM and other tools to assist in network investigations, including firewalls, IDS/IPS and monitoring tools.
Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers. The company provides a stimulating work environment with cutting-edge security technologies and opportunities for professional growth.