Source Job

As a Senior Security Engineer, you will lead cross-team infrastructure security initiatives that strengthen GitLab's SaaS Platforms and Self-Managed offerings. You'll design and own the implementation of security solutions while collaborating with various stakeholders across GitLab. Your technical leadership and hands-on execution will drive pragmatic security capabilities that empower critical software factories globally to operate securely at scale.

GitLab is an open-core software company that develops the most comprehensive AI-powered DevSecOps Platform , used by more than 100,000 organizations.

• Design and implement scalable infrastructure supporting HIPAA, SOC 2, and ISO 27001 compliance.
• Create self-service security tools integrating with developer workflows (GitLab CI/CD, Terraform).
• Lead threat modeling and security architecture reviews for new products and services.

Maven is the world's largest virtual clinic for women and families on a mission to make healthcare work for all of us.

In this role, you’ll be at the intersection of security, automation, and distributed systems. You’ll take ownership of hardening complex hybrid environments from bare-metal validators to multi-cloud clusters ensuring our systems are both fast and fortress-strong. You’ll join a distributed, high-performing Blockchain DevOps team that values ownership, transparency, and innovation.

Figment powers the future of Web3 through industry-leading blockchain infrastructure as the leading provider of staking solutions.

• Design, implement, and operate automated patch pipelines for Linux/Windows across GCE and GKE nodes.
• Proactively monitor security dashboards, logs, and alerts for threats, anomalies, and suspicious activity.
• Support the vulnerability management program by triaging, prioritizing, and coordinating the remediation of infrastructure-related vulnerabilities.

Turing, based in San Francisco, is a research accelerator for frontier AI labs and a partner for enterprises deploying advanced AI systems. They accelerate research with data, talent, and training, and build intelligence systems, with a leadership team from top tech companies.

• Lead cross-team infrastructure security projects from design to delivery.
• Design and implement robust security solutions for cloud environments and container platforms.
• Identify security gaps and remediate systemic security issues in cloud and infrastructure configurations.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements.

• Lead the architecture and development of security tools and infrastructure.
• Collaborate with engineers to implement security features in AWS cloud infrastructure.
• Support security detection and response efforts by contributing to detections, automation, and investigations.

Benchling’s mission is to unlock the power of biotechnology by providing the world’s most innovative biotech companies with a R&D Cloud.

• Implement and maintain security measures to protect the organization's information assets and infrastructure.
• Support product and development teams on application security challenges, including threat modeling and architecture reviews.
• Support security incident response, perform root cause analysis, and drive remediation strategies.

insightsoftware is a global provider of comprehensive solutions for the Office of the CFO, transforming how teams operate and empowering leaders.

Seeking Senior-level DevOps / Platform engineer to own cloud infrastructure, deployments, and CI/CD pipelines with a strong security mindset. Ensure deployments are reliable, automated, secure, and follow best practices appropriate for a cybersecurity product. Operationalize recommendations and makes infrastructure safe and robust.

Janea Systems is a dynamic team of the best & brightest software engineering specialists and solutions innovators, from around the world.

• Lead the design, develop, and implementation of incident response playbooks.
• Be part of a weekly on-call rotation and support in detection engineering.
• Identify areas for security improvement and translate that into workable solutions.

Ping Identity's cloud identity platform enables secure and seamless digital experiences. They are headquartered in Denver, Colorado, with offices and employees around the globe, serving large enterprises.

Leverage expertise in application security and security engineering. Implement and administer application security tooling. Integrate security tooling with CI/CD pipelines.

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow.

• Collaborate with DevOps, CI/CD engineers, and the Architecture team to implement and maintain security best practices across infrastructure.
• Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.
• Conduct proactive research to identify emerging threats and attack vectors.

LastPass is a leader in password and identity management, making it easier to log into life and work, and is trusted by 100,000 businesses and millions of users.

Lead the secure software and infrastructure architecture for our most advanced experiments. Define and govern the secure infrastructure backbone, driving the architectural design and rapid prototyping of cloud-native security solutions. Instrumental in fusing rigorous enterprise security standards and expert software architecture design with agile development to accelerate our next-generation product roadmap.

At Palo Alto Networks® everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life.

• Hardening of cloud based infrastructure.
• Creating/maintaining Vulnerability Management program.
• Implementation of security controls.

TrueAccord, a wholly owned subsidiary of TrueML, is a category-defining company combining machine learning with a human-based approach to transform debt resolution.

• Design and manage infrastructure-as-code with Terraform and GitOps.
• Build and maintain secure CI/CD pipelines with integrated security automation.
• Deploy and operate Kubernetes/K3s clusters in AWS GovCloud (IL5/IL6).

Rackner is a cloud-native software consultancy delivering solutions for startups, enterprises, and the public sector. They enable digital transformation through DevSecOps, AI/ML, and cloud-first innovation, solving high-impact problems and delivering secure, scalable solutions for the Department of Defense and federal health programs.

• Design, build, and continuously improve threat detections across 1Password’s infrastructure, products, internal tools, and corporate environments.
• Lead and support security incident response activities, including investigation, containment, remediation, and post-incident learning.
• Collaborate with Security, Infrastructure, and IT teams to improve security visibility, logging quality, and response readiness.

1Password is building the foundation for a safe, productive digital future. They innovated the market-leading enterprise password manager and pioneered Extended Access Management, a new cybersecurity category built for the way people and AI agents work today. Over 180,000 businesses trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.

• Partner with Product teams to ensure that products are designed, built, and operated securely.
• Conduct threat modeling activities with Product teams to ensure product threats are understood, documented, and mitigated.
• Review and analyze product source code to identify security vulnerabilities and providing recommendations for secure implementation.

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. Affirm is a remote-first company and offers competitive benefits anchored to their core value of people come first.

• Architect and implement secure AWS configurations.
• Embed security into CI/CD pipelines and repos using policy-as-code tools.
• Conduct threat modeling sessions and risk‑driven design reviews early in development.

OnePay is an all-in-one financial platform driven by a simple mission: better money makes life better. They are backed by Walmart and Ribbit Capital, and deeply embedded with the distribution of the world’s largest omnichannel retailer.

• Design and implement security solutions across enterprise platforms and cloud environments.
• Perform threat modeling and security risk assessments for new features and platforms.
• Partner with product teams to embed security requirements early in the SDLC.

Experian is a global data and technology company, powering opportunities for people and businesses around the world. As a FTSE 100 Index company listed on the London Stock Exchange, they have a team of 22,500 people across 32 countries and are committed to investing in their people.

• Design and implement security controls for cloud infrastructure.
• Collaborate with product and engineering teams to embed security best practices.
• Manage and optimize cloud infrastructure vulnerability management program.

Co-founded in 2023 by Joe Laws and Grant Verstandig, Trase Systems is AI, Uncomplicated and empowers enterprise leaders to harness the full potential of AI.

Huntress is seeking a strategic Staff Cloud Security Engineer to define the long-term cloud security strategy for our B2B Cloud Security SaaS platform. This role involves designing scalable defenses and influencing engineering culture across AWS, Azure, and PaaS environments. The engineer will establish frameworks for teams to self-assess risks, tackle complex system design changes, and ensure security at the whiteboard stage.

Huntress is a fully remote, global team of passionate experts and ethical badasses on a mission to break down the barriers to cybersecurity.