Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Implement, operationalize, and troubleshoot SAST platforms like Semgrep, Snyk, CodeQL, Checkmarx, and Veracode within client environments.
Design and integrate automated security testing into CI/CD pipelines, author custom SAST rules, and triage vulnerabilities.
Advise development teams on secure coding practices, leverage AI tools, and deliver engagements across the Northeast/Mid-Atlantic region.
GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations make better decisions and minimize risk. With over 1,300 employees, the company fosters a collaborative, mentorship-driven culture and serves more than 6,200 customers.
Lead application security protocols throughout the SDLC.
Partner with engineering teams to embed security into architecture and development.
Perform hands-on security testing of web apps, APIs, and cloud-native services.
K Health is an AI-powered virtual care engine that modernizes the primary care loop using clinical AI and virtual clinics. Founded in 2016 and headquartered in New York City, the company is backed by over $443.5M and aims to build diverse, collaborative teams.
Shape application security practices by integrating automated safeguards throughout the software development lifecycle.
Collaborate with Security and Engineering teams to identify vulnerabilities early and manage bug bounty programs.
Conduct threat modeling and secure code reviews for Java and Python microservices while fostering developer security ownership.
This partner company protects payment infrastructure and enables secure, scalable digital commerce. It operates as a remote-first, security-focused fintech organization with a fast-moving culture and globally distributed teams.
Partner with product and engineering teams to embed security across application design and development.
Lead threat modeling, secure code reviews, and vulnerability analysis to protect complex systems.
Build automated security guardrails and promote secure coding practices throughout the SDLC.
Quanata is building an AI-native insurance technology platform for the State Farm family of companies. It is a remote-first organization that values veteran hiring, professional growth, and a collaborative culture across the U.S.
Automate security controls by integrating SAST, DAST, and SCA tools into CI/CD pipelines to catch vulnerabilities before production.
Define and drive a developer-friendly Secure SDLC, including threat modeling frameworks like STRIDE and security champions network.
Manage the private bug bounty program, triage reports, lower mean time to mitigation, and conduct code reviews for Java and Python microservices.
VGS is the world's leader in payment tokenization, providing the trust infrastructure for modern commerce and agentic payments. Trusted by Fortune 500 companies and innovative fintechs, VGS stores over 9 billion tokens and processes 10 billion monthly interactions, with a remote-first culture that values curiosity, ownership, collaboration, and continuous learning.
Embed security into every stage of the SDLC ensuring secure-by-design systems.
Lead secure code reviews across TypeScript/Node.js services and modern frontend stacks.
Drive threat modeling and own the vulnerability management lifecycle.
SpinQuest is a social casino platform that blends social gaming with innovative currency mechanics. Founded in 2025, we have grown into a recognized name in social gaming with a community-first approach and original content.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Collaborate with Product Engineering teams throughout the SDLC to identify vulnerabilities through threat modeling, design reviews, and secure code reviews.
Develop and implement end-to-end security solutions to mitigate risks across the product suite.
Drive improvements across Product Security tooling, automation, and the bug bounty program while experimenting with AI-based tools.
Superhuman is an AI productivity platform that integrates with over 1 million apps, offering writing, docs, inbox, and AI assistant products. Founded in 2009, it powers over 40 million people and 50,000 organizations worldwide.
Own and scale the vulnerability management program, including triage, prioritization, and remediation.
Embed security into the SDLC by integrating automated gates, threat modeling, and design reviews.
Drive cross-team security initiatives and mentor engineers to improve overall posture.
Figure is a blockchain-native capital marketplace for the origination, funding, and trading of tokenized assets. It has over 480 partners, has originated $30 billion in loans, and is recognized as a top fintech company.
Integrate and automate application security tools (SAST, DAST, SCA) into CI/CD pipelines.
Conduct threat modeling, secure code reviews, and manage the bug bounty program.
Build a Security Champions network and deliver secure coding training to empower developers.
They are a payment technology platform supporting modern commerce and financial innovation. They operate as a remote-first, globally distributed company with a strong focus on security, collaboration, and developer enablement.
Become an expert in the application security platform and integrate it into customer CI/CD pipelines, developer workflows, and security programs.
Lead technical discovery, diagnose customer issues, and advise on solution design.
Own proof-of-value cycles from success criteria through environment configuration and technical validation.
The company operates in the application security space, serving digital native and mid-market customers. The team size and specific culture are not mentioned in the posting.
Operate and maintain application security scanning tools including SAST, SCA, secrets scanning, and container scanning throughout the SDLC.
Review and triage security findings, validate true positives, and collaborate with engineering teams to prioritize remediation activities.
Support onboarding of new repositories, maintain documentation, and assist with scripting and automation to improve security workflows.
This company is a partner organization with a collaborative security team focused on strengthening application security across a diverse portfolio of digital products and services. It fosters an inclusive, collaborative culture with employee communities and emphasizes learning and development.
Design, operate, and continuously improve application security testing capabilities and pipelines.
Assess application risks, perform security reviews across multiple languages, and assist with penetration testing.
Provide application security guidance and mentorship to development teams as needed.
Esri is a global leader in geographic information system (GIS) technology, helping organizations create positive global change. With a diverse workforce unified under this mission, Esri fosters an inclusive culture that values continuous learning and growth.
Investigate and remediate application security vulnerabilities directly in code, implementing fixes and submitting pull requests.
Deploy, configure, and optimize SAST and SCA tools across repositories and CI/CD pipelines, reducing false positives.
Triage and prioritize security findings while collaborating with engineering teams to embed secure coding practices.
Partner company is a technology firm delivering large-scale international projects with a focus on integrating application security into the software development lifecycle. They foster a collaborative, globally distributed engineering culture with an informal environment, open-door policy, and continuous learning opportunities.
Own application and product security, including threat modeling, secure code review, and access-control and secrets-exposure flaws.
Design and implement security architecture for an agentic AI software development lifecycle with out-of-band controls.
Secure AWS environment, manage non-human identities, and enforce security tooling across GitHub and SaaS estate.
Oshi Health is a fully remote, cloud-native healthcare platform dedicated to helping people manage chronic GI conditions. It is a growing company with a small cross-functional team, emphasizing a remote-first culture and equity-based compensation.
Educate customers on application security and software supply chain security through engaging demos.
Serve as a technical expert on Endor Labs' product suite and shape solutions with engineering.
Guide customers through onboarding and adoption to ensure they achieve security and development goals.
Endor Labs provides security solutions for AI-generated code, using a patented code context graph to identify and fix exploitable vulnerabilities. Founded by Varun Badhwar, the company has raised $163M and serves major customers like OpenAI and SpaceX, fostering a mission-driven, collaborative culture.
Lead the technical side of sales cycles, guiding customers through integration with CI/CD pipelines and application security programs.
Build deep product expertise, conduct technical discovery, and own proof-of-value projects for customers.
Partner with account executives on complex sales cycles and improve demonstrations, automation, and educational resources.
They are a Series D application security company supporting digital native and mid-market customers. The team is remote-first and collaborates closely with account executives on complex sales cycles.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Lead technical discovery and design solutions for customer CI/CD and security programs.
Own proof-of-value engagements from success criteria to configuration and outcomes.
Partner with account executives and communicate technical differentiation to stakeholders.
A cybersecurity company focused on application security, offering a platform that helps teams integrate security into developer workflows and CI/CD pipelines. The team is seeking a technical lead for pre-sales engagements, indicating an engineering-driven and customer-focused culture.