Define and execute a risk-based DevSecOps roadmap and implement protective AWS controls across infrastructure and software delivery.
Embed security into CI/CD, containers, and software supply chains with automated scanning and policy-as-code.
Partner with AppSec and InfoSec to triage vulnerabilities, coordinate remediation, and lead incident response and improvement.
Zeta Global is an AI-powered marketing cloud that uses advanced AI and trillions of consumer signals to help marketers acquire, grow, and retain customers. The company is publicly traded, headquartered in New York with global offices, and fosters a culture of trust and belonging.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.
Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.
Lead technical security design and review for security-critical systems, ensuring data protection and resilience.
Master complex technical security domains like Cloud Security, AppSec, or Data to solve business and technical challenges.
Architect automated defenses and translate broad security objectives into clear deliverables for the engineering team.
Garner partners with employers to transform U.S. healthcare by using proprietary clinical metrics to connect members with top-performing doctors, improving care while reducing costs. A mission-driven team that has helped over 2.5 million people and saved $1B, doubling five years running.
Build central security systems and automation the whole company relies on.
Secure cloud infrastructure, identity and access across Rain's growing footprint.
Lead external security assessments and drive findings to verified fixes.
Rain is a global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Backed by top investors and valued at $1.95B, Rain is a hypergrowth company with a flat, open culture trusted by over 100 organizations worldwide.
Conduct security architecture reviews and risk assessments for proposed IT solutions.
Evaluate designs to identify security risks, threats, and gaps in controls.
Act as a trusted security advisor to technical teams and leadership.
Kyndryl runs and reimagines mission-critical technology systems for the world's leading businesses. It has a global workforce and a culture focused on flexibility, support, and well-being.
Own application and product security, including threat modeling, secure code review, and access-control and secrets-exposure flaws.
Design and implement security architecture for an agentic AI software development lifecycle with out-of-band controls.
Secure AWS environment, manage non-human identities, and enforce security tooling across GitHub and SaaS estate.
Oshi Health is a fully remote, cloud-native healthcare platform dedicated to helping people manage chronic GI conditions. It is a growing company with a small cross-functional team, emphasizing a remote-first culture and equity-based compensation.
Lead cloud security architecture and posture management across large multi-subscription Azure and AWS environments.
Design policy-as-code guardrails and automated controls to prevent misconfigured infrastructure from reaching production.
Partner with engineering teams to integrate security into CI/CD, threat modeling, and vulnerability management.
HealthEquity empowers healthcare consumers by providing health savings accounts and related financial solutions. They are a large, mission-driven company focused on connecting health and wealth, with a culture that values belonging and innovation.
Design guardrails for AI-powered products and build automated security tooling for an AI-first workforce.
Implement preventive, default-on security controls across cloud and enterprise environments using policy-as-code.
Manage identity and access controls for AI systems and non-human agents, and integrate security tooling with LLM layers.
Rithum is the world's most trusted commerce network, accelerating how brands, suppliers, and retailers deliver seamless e-commerce experiences. More than 40,000 companies trust Rithum, representing over $50 billion in annual GMV, and the culture is remote-first, collaborative, and focused on AI-driven innovation.
Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.
Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.
Secure Drivetrain's cloud infrastructure (AWS) including IAM, network security, and monitoring.
Embed security into the SDLC via threat modeling, secure code reviews, and automated scanning.
Lead vulnerability management, incident response, and compliance programs such as SOC 2 and ISO 27001.
Drivetrain is a financial planning & decision-making platform that helps companies scale and achieve targets predictably. Founded in 2021 by ex-Googlers, it is a remote-first, fast-growing startup backed by leading venture capital firms with a culture focused on autonomy, transparency, and customer-centricity.
Partner with product teams to ensure security is embedded throughout the product development lifecycle.
Conduct threat modeling, architecture reviews, and source code analysis to identify and mitigate vulnerabilities.
Automate security processes and drive cross-team projects to closure.
Affirm exists to give people a clear, predictable way to pay over time with no hidden fees, building honest financial products. It is a remote-first company that values information security, transparency, and flexibility, with a strong culture of care.
Build and improve vulnerability management tooling and workflows across applications, dependencies, containers, and infrastructure.
Integrate security checks and policy controls into CI/CD and developer workflows.
Partner with engineers to design secure-by-default patterns and translate security risks into remediation plans.
ITHAKA is a nonprofit that expands access to knowledge and education through services like JSTOR, Portico, and Ithaka S+R. It values belonging, evidence, speed, teamwork, and trust, with staff across the United States.
Secure and operate AWS and Kubernetes environments supporting Chainalysis products and AI platforms.
Troubleshoot production issues, ship Terraform and Kubernetes changes, and strengthen infrastructure security controls.
Collaborate across infrastructure, security, and AI teams, and participate in on-call to drive fixes to completion.
Chainalysis is a blockchain data platform that helps governments and businesses investigate illicit activity and manage risk through data, services, and solutions. The global company values diversity, innovation, and AI-driven work, with employees and customers around the world.
Run security assessments and threat modeling across the AWS environment.
Review and remediate launch-critical findings in Infrastructure as Code.
Build and execute the security roadmap: WAF, SAST/DAST, security gates, secrets management, and IAM hardening.
Ubiminds connects Latin American tech professionals with software companies in the US and Canada. With 9 years in the market and GPTW-certified, hundreds of professionals are growing in North American teams with their support.
Plan and establish the technical roadmap for blockchain security products, completing core modules and frameworks.
Define architecture standards, maintain infrastructure, and develop automation tools for continuous delivery and operational efficiency.
Engage users, deliver client APIs, and troubleshoot back-end issues to ensure system performance and stability.
Binance is a leading global blockchain ecosystem behind the world's largest cryptocurrency exchange by trading volume. Trusted by 300+ million people in 100+ countries, Binance fosters a results-driven, user-centric culture with a flat structure.
Harden AWS infrastructure using Terraform and Go, designing account structure, IAM, network segmentation, and KMS.
Secure Kubernetes clusters with admission policies, RBAC, network policies, and runtime controls.
Engineer cloud detections, guardrails, and just-in-time access while responding to incidents and teaching engineers.
Qualia builds the leading B2B real estate technology that transforms home buying and selling into a simple, secure, and enjoyable process. They're a growing, mission-driven team committed to supporting employees with flexible work and comprehensive benefits.
Lead enterprise cloud security program across AWS and Microsoft Azure, including strategy and risk reduction.
Design and implement secure cloud architectures using NIST, ISO 27001, PCI DSS, and cloud-native controls.
Manage cloud security posture, automate preventive/detective controls, and support incident response readiness.
BetMGM is revolutionizing sports betting and online gaming in the US and Canada, a partnership between MGM Resorts and Entain Group. With over 1,400 talented members, they build a respectful, inclusive workplace culture.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Design and operate secure AWS infrastructure with DevSecOps focus, including automation and compliance controls.
Develop Terraform modules and CI/CD pipelines for secure, scalable, and repeatable deployments.
Integrate security monitoring, threat detection, and incident response across hybrid environments.
CPI Card Group provides secure payment card solutions and services. With a focus on technology and security, the company operates with a size that values engineering collaboration and continuous improvement.