Execute external network, web application, and API penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities and assess attack paths.
Write clear client reports and communicate findings, risk, and remediation guidance.
We are A-LIGN, a technology-enabled cybersecurity company providing offensive and defensive security and compliance services trusted by more than 2,400 global organizations. We are a fast-paced, collaborative team supporting remote work and professional growth.
Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, and cloud environments.
Turn vulnerability research and attacker tradecraft into safe, repeatable automated attack capabilities.
Validate remediation and collaborate with research, product, and engineering teams.
Horizon3 is a fast-growing remote cybersecurity company that helps organizations proactively find, fix, and verify exploitable attack vectors. Its NodeZero platform delivers autonomous pentests, and the team is a collaborative culture committed to respect, ownership, and results.
Serve as a technical subject matter expert for building automation and control technologies.
Support System Integrators, end-user customers, and sales teams with technical guidance and training.
Collaborate with engineering and product teams to drive adoption of IoT, APIs, and containerized technologies.
Our partner provides building automation and control technologies, helping system integrators and customers adopt IoT and API-driven solutions. The company fosters a collaborative, team-oriented remote culture with opportunities to learn from experienced technical professionals.
Lead and mentor a team of device engineers and reverse engineers, driving technical growth and professional development.
Own the technical strategy for device coverage and prioritize reverse engineering investment.
Champion automation and AI-assisted development tools to scale device intelligence workflows.
Dragos is a global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services to protect critical infrastructure. The company is a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust.
Execute penetration testing engagements across web applications, APIs, networks, and cloud environments.
Identify, validate, and document security vulnerabilities with clear proof-of-concepts and remediation guidance.
Collaborate with clients and internal teams through scoping calls, kickoffs, report reviews, and quality assurance.
A security consulting firm that provides penetration testing services for web applications, APIs, networks, and cloud environments. The company fosters a collaborative, remote-first culture with a focus on quality assurance and continuous improvement.
Lead red team assessments and adversary emulation for space and mission systems.
Develop attack plans, test cases, and Rules of Engagement with safety boundaries.
Assess Linux, embedded, cloud, and network systems for exploitable weaknesses.
SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. The company combines innovation and deep technical expertise to uncover vulnerabilities and strengthen operational resilience.
Own the device software architecture end to end, from safety-critical control to secure cloud communication.
Lead a small firmware team while staying hands-on, driving fast iteration and clean interfaces.
Bring up new hardware, implement revenue-grade metering, and ship secure OTA updates.
ConnectDER develops the Meter Socket Adapter, a product that reduces the cost and interconnection time for solar energy, EV charging, and home battery storage. They are a venture-backed company of over 50 professionals with a collaborative, transparent, and team-oriented culture.
Perform web, mobile application, and internal penetration tests, source code reviews, and threat analysis.
Support blue teams, research new attack vectors, and stay current with cybersecurity news and trends.
Train QA and Development teams in standard security testing techniques and secure software development.
Insider One is a platform that unifies marketing and customer engagement tools, powered by AI and an integrated Customer Data Platform. The company is a woman-founded, women-led B2B SaaS unicorn with 1,500+ team members from 50+ nationalities across 30+ offices.
Provide technical and operational leadership for a Security Operations Center, monitoring threats and driving incident response.
Design and develop security tools and platforms to improve detection, response, and operational efficiency.
Mentor early-career engineers and contribute to open source security projects and industry conferences.
Jobgether uses AI-powered matching to help candidates find jobs. The company operates a fully distributed, remote-first environment with in-person team events.
Plan and execute realistic adversary simulations using threat intelligence to assess security and detection capabilities.
Hunt for vulnerabilities across AI systems, payment infrastructure, autonomous delivery hardware, and emerging technologies.
Build custom tools, exploits, and payloads tailored to DoorDash's tech stack and partner with Blue Teams.
DoorDash is a technology and logistics company that empowers local economies by enabling door-to-door delivery for consumers, merchants, and Dashers. The company is growing rapidly and constantly changing, with a culture focused on empathy, diversity, and employee well-being.
Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
Partner with security engineering to turn findings into actionable defense improvements.
Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.
Apply your cybersecurity expertise to train next-generation AI systems with real-world input.
Analyze, debug, and resolve software bugs and vulnerabilities across diverse codebases.
Perform security audits, penetration testing, and contribute to backend development.
Our client is a venture-backed AI company developing intelligent systems via human expertise and machine learning. They are rapidly growing with over $40 million in funding and a global network of experts.
Own the firewall estate and define security architecture standards across a multi-site broadband environment.
Lead major security initiatives, serve as technical incident commander, and drive automation.
Mentor Tier I/II engineers and manage the security posture roadmap aligned with NIST CSF.
They operate a multi-site broadband environment across six properties. The culture emphasizes security engineering, compliance, and technical leadership.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
Partner with DevOps on paved roads for secure-by-default development and lead incident response.
Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Monitor and analyze sophisticated cyber threats targeting Anduril's products, infrastructure, and personnel.
Research and anticipate emerging technical trends in the threat landscape, collaborating with detection and response teams.
Enhance tooling for threat actor tracking and intelligence data integration, engaging with external partners.
Anduril Industries is a defense technology company focused on transforming military capabilities with advanced technology, including AI-powered systems and autonomy. The company is known for its fast-paced, innovative culture and its commitment to bringing cutting-edge solutions to the defense industry.
Conduct hands-on application security reviews threat modeling and code audits across the entire stack (backend frontend APIs infrastructure).
Build and improve security automation for vulnerability management including SAST DAST container scanning and secrets detection.
Drive remediation of findings from bug bounty scanners and audits partnering with engineering teams to prioritize and fix.
Close builds a communication-first AI-powered CRM that helps sales teams sell more and faster. With a 120-person 100% remote team they are bootstrapped profitable and focused on eliminating manual data entry for scaling businesses.
Serve as subject matter expert and working lead for IEC 62443 certifications, owning the gap between standards and practice.
Maintain SDLC process documentation, traceability, and compliance evidence for audits, certifications, and regulatory obligations.
Coordinate the Coordinated Vulnerability Disclosure (CVD) and incident management program, including CISA and ENISA reporting readiness.
Inductive Automation provides industrial automation software solutions, empowering customers to turn great ideas into reality by removing technological and economic obstacles. The company fosters a collaborative, flexible culture with an emphasis on work-life balance, personal growth, and social connection.
Plan and execute red team operations and adversary simulations focused on cloud environments.
Evaluate security of cloud infrastructure, identity architectures, CI/CD pipelines, and containerized workloads.
Assess detection and response coverage with blue team and detection engineering.
Motive empowers people who run physical operations with tools to make their work safer, more productive, and more profitable. We serve nearly 100,000 customers, from Fortune 500 enterprises to small businesses, and value diversity and inclusion.