Build and improve vulnerability management tooling and workflows across applications, dependencies, containers, and infrastructure.
Integrate security checks and policy controls into CI/CD and developer workflows.
Partner with engineers to design secure-by-default patterns and translate security risks into remediation plans.
ITHAKA is a nonprofit that expands access to knowledge and education through services like JSTOR, Portico, and Ithaka S+R. It values belonging, evidence, speed, teamwork, and trust, with staff across the United States.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.
Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.
Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.
Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.
Run security assessments and threat modeling across the AWS environment.
Review and remediate launch-critical findings in Infrastructure as Code.
Build and execute the security roadmap: WAF, SAST/DAST, security gates, secrets management, and IAM hardening.
Ubiminds connects Latin American tech professionals with software companies in the US and Canada. With 9 years in the market and GPTW-certified, hundreds of professionals are growing in North American teams with their support.
Design and operate secure AWS infrastructure with DevSecOps focus, including automation and compliance controls.
Develop Terraform modules and CI/CD pipelines for secure, scalable, and repeatable deployments.
Integrate security monitoring, threat detection, and incident response across hybrid environments.
CPI Card Group provides secure payment card solutions and services. With a focus on technology and security, the company operates with a size that values engineering collaboration and continuous improvement.
Lead technical security design and review for security-critical systems, ensuring data protection and resilience.
Master complex technical security domains like Cloud Security, AppSec, or Data to solve business and technical challenges.
Architect automated defenses and translate broad security objectives into clear deliverables for the engineering team.
Garner partners with employers to transform U.S. healthcare by using proprietary clinical metrics to connect members with top-performing doctors, improving care while reducing costs. A mission-driven team that has helped over 2.5 million people and saved $1B, doubling five years running.
Lead cloud security architecture and posture management across large multi-subscription Azure and AWS environments.
Design policy-as-code guardrails and automated controls to prevent misconfigured infrastructure from reaching production.
Partner with engineering teams to integrate security into CI/CD, threat modeling, and vulnerability management.
HealthEquity empowers healthcare consumers by providing health savings accounts and related financial solutions. They are a large, mission-driven company focused on connecting health and wealth, with a culture that values belonging and innovation.
Own application and product security, including threat modeling, secure code review, and access-control and secrets-exposure flaws.
Design and implement security architecture for an agentic AI software development lifecycle with out-of-band controls.
Secure AWS environment, manage non-human identities, and enforce security tooling across GitHub and SaaS estate.
Oshi Health is a fully remote, cloud-native healthcare platform dedicated to helping people manage chronic GI conditions. It is a growing company with a small cross-functional team, emphasizing a remote-first culture and equity-based compensation.
Secure Drivetrain's cloud infrastructure (AWS) including IAM, network security, and monitoring.
Embed security into the SDLC via threat modeling, secure code reviews, and automated scanning.
Lead vulnerability management, incident response, and compliance programs such as SOC 2 and ISO 27001.
Drivetrain is a financial planning & decision-making platform that helps companies scale and achieve targets predictably. Founded in 2021 by ex-Googlers, it is a remote-first, fast-growing startup backed by leading venture capital firms with a culture focused on autonomy, transparency, and customer-centricity.
Own the administration and optimization of security tools like S1, Tanium, Active Directory, Okta, and M365, and fine-tune alerts and automation.
Investigate threats, drive remediation across IT and business teams, and lead incident response from first alert to resolution.
Mentor security analysts, conduct quarterly tabletop exercises, and collaborate with stakeholders to strengthen overall security posture.
Lakeshore creates innovative learning materials and world-class guest experiences for teachers, parents and children. Since 1954, the company has grown into a global community with a thriving e-commerce business, over 50 stores, and a diverse team of inquisitive top talent.
Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.
symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.
Set the technical vision for security stack across endpoint, email, data loss prevention, vulnerability management, network, application, and data security.
Define long-term cloud and identity security strategy across AWS and Microsoft Azure, including privileged access, phishing-resistant MFA, and governance of non-human identities.
Lead security architecture review, threat modeling, DevSecOps strategy, and serve as senior escalation point for complex security incidents.
Imagine Pediatrics is a tech-enabled, pediatrician-led medical group reimagining care for children with special health care needs. They deliver 24/7 virtual-first and in-home medical, behavioral, and social care, working alongside families and providers to break down barriers to quality care.
Define binding security requirements and reference architectures for AWS and Azure, including landing zones, IAM, network segmentation, encryption, and logging.
Support Cloud & AI Platforms and Engineering teams in an advisory role through security and architecture reviews, handling deviations and escalations.
Build security gates, pipeline templates, and Policy as Code to enforce security automatically in CI/CD pipelines.
The Quality Group is an innovative provider of sports nutrition products, bringing together the brands ESN and More Nutrition. With over 1,200 employees, the company combines passion for sports nutrition and healthy foods with cutting-edge technology, production, and logistics in an agile, inclusive culture.
Serve as a key technical leader in protecting a cloud-based fraud prevention platform across AWS, Kubernetes, and Terraform.
Lead security automation, compliance, and certification initiatives including ISO 27001, SOC 2, and PCI DSS.
Strengthen identity management, threat detection, and incident response capabilities in a fast-paced environment.
The company builds a real-time, cloud-based fraud prevention platform for highly regulated industries. It is a fast-growing international technology environment with a collaborative engineering culture.
Harden AWS infrastructure using Terraform and Go, designing account structure, IAM, network segmentation, and KMS.
Secure Kubernetes clusters with admission policies, RBAC, network policies, and runtime controls.
Engineer cloud detections, guardrails, and just-in-time access while responding to incidents and teaching engineers.
Qualia builds the leading B2B real estate technology that transforms home buying and selling into a simple, secure, and enjoyable process. They're a growing, mission-driven team committed to supporting employees with flexible work and comprehensive benefits.
Design and implement security architectures for both blockchain and non-blockchain systems in AWS.
Collaborate with engineering teams to embed security into the SDLC and respond to incidents.
Drive security maturity across the organization through risk modeling, tooling, and cross-team collaboration.
Zerohash is a leading crypto and stablecoin infrastructure platform that enables financial services. The company has raised over $280 million and fosters a culture of ownership, collaboration, and transparency.
Design and maintain AWS infrastructure and CI/CD pipelines using infrastructure-as-code.
Own deployments, security scanning, and reliability for cloud services and mobile apps.
Partner with security/compliance on audits and mentor engineers on operational practices.
Eko builds AI and digital tools to help healthcare providers detect heart and lung disease. It is a fast-growing digital health company with a mission-driven team of engineers, physicians, and technologists.
Lead and define security strategy for a globally distributed technology organization.
Manage application security, infrastructure protection, and incident response.
Collaborate with engineering teams to embed security throughout the development lifecycle.
They are a globally distributed technology organization building a SaaS platform with AI-powered tools and integrations. They operate as a lean, high-trust remote team that values collaboration, autonomy, and innovation.
Lead the Infrastructure Security team to secure 1Password's cloud-native platform, setting strategic direction and priorities.
Work with engineering teams to embed security into system design, including AI and agentic technologies.
Build and grow a team of security engineers, ensuring accountability and professional development.
1Password is a cybersecurity company that provides password management and unified access management solutions to over 180,000 businesses. With over $500M in ARR and a spot on the Forbes Cloud 100 for four consecutive years, the company fosters a collaborative, fast-paced culture focused on innovation and human-centric security.