Source Job

Europe US 6w PTO

  • Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
  • Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
  • Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.

Threat Modeling Cloud Security Kubernetes Vulnerability Management Application Security

20 jobs similar to Security Engineer

Jobs ranked by similarity.

North America

  • Partner with Fortune 500 customers to address security concerns and accelerate platform adoption.
  • Develop security reference architectures and perform threat modeling for ServiceNow products and AI services.
  • Lead security deep dives covering cloud-native architectures, identity, encryption, and AI security controls.

ServiceNow is an AI platform that helps enterprises automate workflows and reinvent business processes. The company serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent work together.

  • Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
  • Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
  • Partner with DevOps on paved roads for secure-by-default development and lead incident response.

Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.

$175,000–$200,000/yr
US Canada Unlimited PTO

  • Partner with engineering teams on architecture reviews, threat modeling, and secure design to translate risks into practical recommendations.
  • Improve security tooling, strengthen SDLC and CI/CD controls, and serve as a GCP security subject matter expert.
  • Drive vulnerability management, coordinate penetration testing, and enable engineers through documentation and mentorship.

Doppel builds an AI-native platform for social engineering defense, protecting executives, employees, customers, and brands from phishing, impersonation, and fraud across digital channels. Backed by Andreessen Horowitz and Bessemer Venture Partners, it is a rapidly growing Series C startup with a team focused on cybersecurity expertise and startup velocity.

$0–$185,800/yr
Global 26w maternity 26w paternity

  • Design and build security solutions across application security, infrastructure, and AI agentic systems.
  • Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
  • Develop AI governance standards and security review agents to protect user trust.

Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.

US

  • Lead and execute Delinea's Product Security Program, including secure design reviews, threat modeling, and security consulting.
  • Collaborate with Enterprise Architecture, Development, DevOps, and Cloud engineering teams to balance security with business objectives.
  • Define baseline cloud, container, application, and infrastructure security standards and integrate them into CI/CD pipelines.

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, with a cloud-native Identity Security Platform that applies AI-powered context across the entire identity lifecycle. We are a passionate, global team driven by world-class product leadership, outstanding engineers, and strategic investment from TPG, valuing diversity, innovation, and a culture of respect and fairness.

US Unlimited PTO

  • Lead security assessments of AI/ML models, data pipelines, and AI-enabled applications, identifying vulnerabilities such as prompt injection, model inversion, data poisoning, and adversarial inputs.
  • Partner with Data & Analytics and Engineering to embed security requirements and threat modeling into the AI development lifecycle, from data collection through model deployment.
  • Build and maintain guardrails, monitoring, and detection controls for AI systems in production, flagging anomalous model behavior and unauthorized data access.

Interra Health is a healthcare technology company that helps providers and patients navigate the prescription journey. It is a fast-growing, mission-driven team of about 100 employees, formed through the merger of DoseSpot, Arrive Health, and pVerify, and focused on reducing friction and improving access to medications.

UK

  • Lead and grow a team of security engineers focused on protecting cloud-native environments and CI/CD pipelines.
  • Drive technical strategy, threat modeling, and security automation across multi-cloud infrastructure.
  • Partner with engineering and DevOps teams to embed secure-by-design principles and manage vulnerability and supply chain security.

Wiz is a cybersecurity company that provides a cloud security platform connecting code, cloud, and runtime to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and now powered by Google, with a culture that values world-class talent.

US

  • Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
  • Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
  • Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.

Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.

$151,000–$178,500/yr
US

  • Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
  • Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
  • Own SOC 2, HIPAA, AI security governance, and incident response.

AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.

Europe

  • Own cloud and product security across AWS and GCP, setting baselines for IAM, networking, data protection, and workload configuration.
  • Partner with platform, SRE, and product teams to embed practical security controls into developer workflows and automate guardrails in delivery pipelines.
  • Perform security architecture reviews, threat modeling, and incident response, and drive systemic improvements with meaningful security metrics.

We create intelligent software development tools used by more than 15 million users and 300,000 companies, including 88 of the Fortune Global Top 100. Our mission is to make development teams more productive and AI adoptable at scale, and we foster an open and inclusive workplace.

US

  • Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
  • Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
  • Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.

Wiz is redefining security for the AI era, enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups ever, we are trusted by over 65% of the Fortune 100 and scan over 230 billion files daily, with a culture that values world-class talent and is now powered by Google.

US

  • Own security solutioning for k0rdent AI across the full stack, from hardware to AI models.
  • Publish reference architectures and proofs of concept with customers and partners.
  • Research emerging threats and present to engineers, executives, and conference audiences.

Mirantis, an IREN company, is the Kubernetes-native AI infrastructure company enabling organizations to build scalable, secure infrastructure for AI and data-intensive applications. It is a distributed, world-class team committed to openness and technical excellence.

$235,000–$305,000/yr
US 4w PTO 12w maternity 12w paternity

  • Lead threat modeling and security architecture for AI-enabled systems, including LLM applications and cloud-native platforms.
  • Define and implement secure engineering patterns and guardrails across AWS infrastructure, CI/CD pipelines, and third-party integrations.
  • Partner with engineering and security teams to embed security throughout the AI product lifecycle and drive cross-functional security initiatives.

Quanata is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions for State Farm and HiRoad. We are a wholly owned subsidiary of State Farm with a remote-first culture that values inclusion and positive team dynamics.

US

  • Investigate and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information.
  • Translate technical findings into clear attack paths, business impact, and actionable remediation, and drive durable fixes through verified closure.
  • Build and operate security tools and integrations using code, APIs, automation, and AI agents, and design controls for agent access and execution.

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. They value diverse perspectives and are an equal opportunity employer.

Global

  • Secure BJAK's AI-enabled products and agent workflows using third-party models.
  • Assess customer data shared with model vendors and design least-privilege controls for AI agents.
  • Threat model prompt injection and support SC TRM/BNM RMiT compliance for AI risks.

BJAK is a mobile-first insurance platform that makes insurance accessible online and is the leading insurtech in Southeast Asia. With over 20 nationalities working from offices and remotely worldwide, the company values passionate builders who love creating next-generation financial products.

$204,500–$330,700/yr
US

  • Lead and manage the Product Security team, shaping a risk-driven security program in partnership with the Director of Security.
  • Guide engineering teams to own their security health, with automation handling first-pass findings and Security validating rather than fixing.
  • Act as incident manager of record, delegated approver, and drive monthly and quarterly security posture reporting.

LaunchDarkly provides a feature management platform that helps developers release software safely and efficiently through gradual rollouts and targeted experiences. The company values high trust, transparency, and a humble, collaborative team culture.

$73,900–$83,300/yr
Canada 3w PTO

  • Collaborate across engineering, product, and customer teams to embed security requirements throughout the product lifecycle.
  • Manage security assessments, third-party risk reviews, and vulnerability disclosure processes, including CVE registration.
  • Support AI security governance and secure development practices, including monitoring applications and services beyond core engineering.

They are a growing technology organization that develops products with a strong focus on security and responsible AI adoption. The culture is collaborative and innovation-driven, with remote work across Canada, autonomy, and continuous improvement.

UK Unlimited PTO

  • Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
  • Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
  • Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.

G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.

Global

  • Monitor security systems, logs, and alerts to detect and respond to threats.
  • Run vulnerability scans and coordinate remediation with IT and engineering.
  • Maintain compliance with SOC 2 and support security awareness programs.

Power Digital is an AI-native growth firm combining talent and proprietary technology to help brands drive measurable business outcomes. With a people-first culture, the company values diversity and collaboration, using its AI operating system Omega to amplify capacity for strategy, creativity, and analysis.

US

  • Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
  • Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
  • Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.

Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins, combining custodial wallets, payment orchestration, and issuance. As a 40-person startup, we operate through our own regulated entities with built-in compliance and risk controls.