Improve automated security assurance workflows to reduce manual effort and increase consistency.
Streamline collection and analysis of security evidence to improve audit readiness and visibility.
Enhance efficiency of access reviews, control testing, and risk assessments through technical automation.
Chainlink is the industry-standard oracle platform bringing capital markets onchain and powering decentralized finance. It has enabled tens of trillions in transaction value and is adopted by major financial institutions and protocols, with a remote-first culture.
Partner with product teams to ensure security is embedded throughout the product development lifecycle.
Conduct threat modeling, architecture reviews, and source code analysis to identify and mitigate vulnerabilities.
Automate security processes and drive cross-team projects to closure.
Affirm exists to give people a clear, predictable way to pay over time with no hidden fees, building honest financial products. It is a remote-first company that values information security, transparency, and flexibility, with a strong culture of care.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Run and improve IAM operations, including access lifecycle, requests, certifications, and issue resolution.
Automate repetitive processes and build production backend services, APIs, and identity integrations.
Partner with Security, IT, and Engineering on secure, auditable changes and SailPoint/Auth0 integrations.
Affirm provides clear, predictable pay-over-time options with no hidden fees or surprises, helping consumers make confident purchases. A remote-first company, Affirm emphasizes care, transparency, and flexibility, with comprehensive benefits and an inclusive culture.
Conduct AWS security reviews and validate best practices across the cloud environment.
Implement security improvements and fix custom-built security tools with the Lead Security Architect.
Participate in on-call rotation to ensure 24/7 system availability for customers.
Mapbox is the leading real-time location platform powering location-aware businesses with maps, navigation, and location data tools. With over 4 million registered developers and a globally distributed team, Mapbox fosters a culture of flexibility, security, privacy, and inclusion.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Contribute production-quality code to the application (Node.js and Python), shipping security fixes end-to-end.
Build AI-powered automation and manage a bug bounty program, evaluating and reproducing submissions.
Define secure-by-design patterns and drive security standards across the architecture, including AI-integrated features.
Fast-growing B2B SaaS company serving the life sciences and pharma space. A small, high-impact security team with an engineering-first mindset, building AI-native features.
Design and build authentication flows, OAuth integrations, and authorization platforms across Motive's products.
Develop BYOK capabilities and security controls for customers with advanced data-protection requirements.
Drive security projects from technical design to implementation, including threat modeling, vulnerability remediation, and security automation.
Motive empowers the people who run physical operations with tools to make their work safer, more productive, and more profitable. The company serves nearly 100,000 customers, from Fortune 500 enterprises to small businesses, across a wide range of industries.
Design, build, and operate secure, cost-efficient infrastructure in a multi-cloud environment (AWS and Azure).
Develop and evolve infrastructure as code for repeatable, auditable, and scalable system provisioning.
Partner with product and application engineering teams and participate in an on-call rotation.
Abnormal AI is an AI-native behavioral security platform protecting enterprises from advanced threats by analyzing communication and access behavior. It protects over 25% of the Fortune 500 and fosters a fast-paced, remote-first culture.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Design and deliver automation workflows that help security analysts detect, investigate, and remediate threats faster.
Architect deterministic and agentic automation pipelines integrating services, scripting, orchestration, and security data enrichment.
Provide technical leadership, mentor engineers, and improve service reliability through monitoring, observability, and on-call support.
They build and operate Falcon Complete, a managed detection and response platform that protects organizations from cyber threats. They are a globally distributed, remote-first team focused on collaboration, innovation, and engineering excellence.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Lead and manage the Product Security team, shaping a risk-driven security program in partnership with the Director of Security.
Guide engineering teams to own their security health, with automation handling first-pass findings and Security validating rather than fixing.
Act as incident manager of record, delegated approver, and drive monthly and quarterly security posture reporting.
LaunchDarkly provides a feature management platform that helps developers release software safely and efficiently through gradual rollouts and targeted experiences. The company values high trust, transparency, and a humble, collaborative team culture.
Improve cloud security posture through practical, scalable policy engineering.
Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.
UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.
Lead the Partner Integrations team shipping NodeZero's first-party security integrations.
Own the integration roadmap, API contracts, and certification pipeline.
Grow a 6-7 engineer team and drive reliability and backwards compatibility.
Horizon3 is a remote cybersecurity company providing the NodeZero autonomous pentesting platform to help organizations find and fix attack vectors. The team is a fusion of special ops cyber operators and engineers, with a culture of respect, collaboration, and ownership.
Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audits from a technical perspective.
Translate security, compliance, and privacy requirements into scalable, enforceable, and auditable technical controls.
Develop internal security tooling using Python and implement cloud security controls across AWS and GCP.
Yuno builds payment infrastructure that enables companies to participate in the global market through seamless integrations and over 1,000 payment methods. Founded by payments and tech industry experts, it empowers high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus.
Own corporate security and identity infrastructure, including Google Workspace, SSO/SCIM, MDM/EDR, and access reviews.
Lead security compliance programs like SOC 2, manage customer security reviews, and maintain incident response.
Collaborate with managed IT partners, vendors, and auditors to keep security priorities working and risks managed.
Sofar Ocean is building the world's largest real-time ocean sensor network, using Spotter buoys and software like Wayfinder to turn ocean data into decisions for shipping, government, and defense customers. The company is a team of about 100 based in San Francisco and is growing fast.
Own risk identification, analysis, and prioritization across third-party risk and security risk assessments using established frameworks.
Translate technical vulnerabilities and risk findings into clear, quantified risk statements for non-security stakeholders and leadership.
Drive remediation of findings and risk exceptions to closure, partnering with Engineering, IT, Product, and Legal.
GitLab is an intelligent orchestration platform for DevSecOps, helping organizations increase developer productivity and improve security. With over 50 million users, GitLab is trusted by more than 50% of the Fortune 100 and fosters a high-performance culture driven by values and continuous knowledge exchange.
Design, build, and operate services powering the Exposure Management platform across the full production lifecycle.
Work with large volumes of security data to improve scanning, asset discovery, and vulnerability prioritization.
Collaborate with product, threat research, and client-facing teams to turn security requirements into production-ready features.
They build an external attack-surface and Exposure Management platform that helps organizations discover internet-facing assets and prioritize vulnerabilities. They foster a collaborative, curious engineering culture with an AI-first approach to security and scale.