Plan and execute red team operations and adversary simulations focused on cloud environments.
Evaluate security of cloud infrastructure, identity architectures, CI/CD pipelines, and containerized workloads.
Assess detection and response coverage with blue team and detection engineering.
Motive empowers people who run physical operations with tools to make their work safer, more productive, and more profitable. We serve nearly 100,000 customers, from Fortune 500 enterprises to small businesses, and value diversity and inclusion.
Validate vulnerabilities and configuration weaknesses to determine practical exploitability and develop realistic attack paths across web, cloud, identity, and infrastructure.
Conduct purple-team exercises and translate offensive findings into actionable improvements for detection and response.
Backblaze is the object storage leader in the open cloud movement, providing cloud storage services to businesses, developers, and individuals. Founded in 2007 and publicly traded since 2021, the company generates over $136M in annual recurring revenue, manages over three billion gigabytes of data for 500K+ customers in 175+ countries, and fosters a culture centered on diversity, equity, and inclusion.
Perform web, mobile application, and internal penetration tests, source code reviews, and threat analysis.
Support blue teams, research new attack vectors, and stay current with cybersecurity news and trends.
Train QA and Development teams in standard security testing techniques and secure software development.
Insider One is a platform that unifies marketing and customer engagement tools, powered by AI and an integrated Customer Data Platform. The company is a woman-founded, women-led B2B SaaS unicorn with 1,500+ team members from 50+ nationalities across 30+ offices.
Plan and execute realistic adversary simulations using threat intelligence to assess security and detection capabilities.
Hunt for vulnerabilities across AI systems, payment infrastructure, autonomous delivery hardware, and emerging technologies.
Build custom tools, exploits, and payloads tailored to DoorDash's tech stack and partner with Blue Teams.
DoorDash is a technology and logistics company that empowers local economies by enabling door-to-door delivery for consumers, merchants, and Dashers. The company is growing rapidly and constantly changing, with a culture focused on empathy, diversity, and employee well-being.
Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, and cloud environments.
Turn vulnerability research and attacker tradecraft into safe, repeatable automated attack capabilities.
Validate remediation and collaborate with research, product, and engineering teams.
Horizon3 is a fast-growing remote cybersecurity company that helps organizations proactively find, fix, and verify exploitable attack vectors. Its NodeZero platform delivers autonomous pentests, and the team is a collaborative culture committed to respect, ownership, and results.
Execute penetration testing engagements across web applications, APIs, networks, and cloud environments.
Identify, validate, and document security vulnerabilities with clear proof-of-concepts and remediation guidance.
Collaborate with clients and internal teams through scoping calls, kickoffs, report reviews, and quality assurance.
A security consulting firm that provides penetration testing services for web applications, APIs, networks, and cloud environments. The company fosters a collaborative, remote-first culture with a focus on quality assurance and continuous improvement.
Lead red team assessments and adversary emulation for space and mission systems.
Develop attack plans, test cases, and Rules of Engagement with safety boundaries.
Assess Linux, embedded, cloud, and network systems for exploitable weaknesses.
SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. The company combines innovation and deep technical expertise to uncover vulnerabilities and strengthen operational resilience.
Execute internal network and cloud-based SaaS penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities using public or custom-developed exploits.
Deliver clear, client-ready reports with actionable remediation guidance to client stakeholders.
Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive cybersecurity services under A-LIGN, a security and compliance partner trusted by more than 2,400 global organisations. The company works with organisations ranging from small businesses to global enterprises in a fast-paced, collaborative, and remote-first environment.
Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
Partner with security engineering to turn findings into actionable defense improvements.
Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.
Execute external network, web application, and API penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities while assessing business and technical risk.
Deliver client-ready reports and communicate remediation guidance to stakeholders.
Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive services. It is trusted by more than 2,400 global organizations and offers a fast-paced, collaborative remote culture.
Conduct manual pentests on core systems and AI agents, building automation to expand coverage.
Define how we pentest AI, including LLM applications and agent-generated code.
Triage SAST findings, review code across web/APIs/AWS, and communicate risk to engineers.
We are a financial technology company based in Boston, unlocking capital for small businesses across America with fast, flexible funding. Our remote-first team, recognized as a Best Place to Work, has provided over $4.8 billion to more than 92,000 small businesses since 2012.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Execute external network, web application, and API penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities and assess attack paths.
Write clear client reports and communicate findings, risk, and remediation guidance.
We are A-LIGN, a technology-enabled cybersecurity company providing offensive and defensive security and compliance services trusted by more than 2,400 global organizations. We are a fast-paced, collaborative team supporting remote work and professional growth.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Design and build production-grade Python reconnaissance workflows to discover and enumerate external-facing assets at scale.
Research and parse messy external data sources to turn unstructured information into actionable attack intelligence.
Automate multi-step attack paths from initial access to post-exploitation, and mentor engineers to raise the bar.
Horizon3 is a fast-growing, remote cybersecurity company that builds NodeZero, an autonomous pentesting platform. The team is a fusion of former special operations cyber operators and startup engineers, committed to a culture of respect, collaboration, and results.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Lead application security protocols throughout the SDLC.
Partner with engineering teams to embed security into architecture and development.
Perform hands-on security testing of web apps, APIs, and cloud-native services.
K Health is an AI-powered virtual care engine that modernizes the primary care loop using clinical AI and virtual clinics. Founded in 2016 and headquartered in New York City, the company is backed by over $443.5M and aims to build diverse, collaborative teams.
Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.
symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.
Lead Apollo's multi-year AppSec strategy and shape cross-team roadmaps.
Set secure design, code review, and AI security standards across engineering.
Mentor security champions and build automation that scales secure practices.
Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies. Founded in 2015, it has raised ~$250M and is valued at $1.6B, with a culture focused on AI-native innovation and continuous improvement.
Design, deploy, and maintain Microsoft cloud security technologies including Purview, Defender for Cloud, and Entra ID.
Apply a red-team mindset to identify weaknesses and improve security posture.
Act as a trusted security advisor to internal teams and customers on governance and data protection.
Patch My PC provides an enterprise solution for automating and managing third-party updates in Microsoft ConfigMgr, Intune, and WSUS. The fully remote crew of 150 GIF-loving humans supports over 10,000 customers and more than 32 million devices.