Source Job

• Lead and mature cybersecurity compliance programs including SOC 2 Type 2 and ISO 27001 readiness.
• Drive cloud and application security across AWS and Azure, integrating secure SDLC and DevSecOps practices.
• Manage corporate IT operations, identity and access, and build the cybersecurity team as the organization grows.

Genea is a leader in property technology, providing cloud-based physical security, submeter billing, and on-demand HVAC solutions to over 1 million users across 39 countries. It has been recognized as a Top Workplace from 2021-2025 with a 4.3 Glassdoor rating, fostering a team-oriented and transparent culture.

• Own and mature preventative security capabilities across cloud, SaaS, endpoint, identity, network, and data environments.
• Translate broad security objectives into concrete technical requirements, controls, tooling, and implementation plans.
• Partner across Engineering, Platforms, Product, and business teams to continuously strengthen security posture as we scale.

Backstory is the leading AI answers platform for sales teams, helping modern sales teams ask questions and get the right answer in real time. Backed by top investors like Andreessen Horowitz and ICONIQ Capital, Backstory is based in San Francisco and has been recognized by Gartner, Forrester, and the Forbes AI 50.

• Lead and grow a team of security engineers focused on protecting cloud-native environments and CI/CD pipelines.
• Drive technical strategy, threat modeling, and security automation across multi-cloud infrastructure.
• Partner with engineering and DevOps teams to embed secure-by-design principles and manage vulnerability and supply chain security.

Wiz is a cybersecurity company that provides a cloud security platform connecting code, cloud, and runtime to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and now powered by Google, with a culture that values world-class talent.

• Serve as deputy to the CISO, representing security to executives, customers, and regulators.
• Lead and grow managers and senior engineers across Security Engineering and Security Operations.
• Own the security roadmap, including cloud security, detection and response, identity, and platform security.

Abnormal Security uses behavioral AI to protect organizations from sophisticated email and collaboration attacks. Trusted by 5,000 enterprises, the company values security engineering, partnership, and a paved-path approach to reducing risk.

• Lead the technical vision for platform hardening across AWS and GCP, including tier-0 access and secrets services.
• Own the hardening roadmap for critical cloud infrastructure and drive operational excellence with rigorous on-call practices.
• Mentor a global team of engineers and partner cross-functionally to build secure-by-default controls.

DoorDash is a technology and logistics company building the most reliable delivery network for consumers, merchants, and dashers. The company is growing rapidly and fosters a culture of learning, customer obsession, and inclusive leadership.

• Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
• Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
• Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.

Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.

• Lead Carrot's security strategy and roadmap, aligning corporate and product security with business priorities.
• Own GRC, incident response, cloud and application security, and compliance certifications including SOC 2 and HITRUST.
• Represent security posture to enterprise customers and partner with Engineering to embed secure practices across the platform.

Carrot is a global fertility and family care platform providing intelligent clinical guidance and comprehensive support. Trusted by more than 1,000 employers and health plans, it serves millions of members across 195 countries and is celebrated for its innovative, inclusive, and mission-driven culture.

• Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
• Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
• Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.

Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.

• Lead and manage the Product Security team, shaping a risk-driven security program in partnership with the Director of Security.
• Guide engineering teams to own their security health, with automation handling first-pass findings and Security validating rather than fixing.
• Act as incident manager of record, delegated approver, and drive monthly and quarterly security posture reporting.

LaunchDarkly provides a feature management platform that helps developers release software safely and efficiently through gradual rollouts and targeted experiences. The company values high trust, transparency, and a humble, collaborative team culture.

• Define and execute a comprehensive platform security strategy aligned with business goals and risk priorities.
• Embed security practices into software delivery, guiding teams through secure design and deployment.
• Build and mentor high-performing security and engineering teams to enable secure innovation at scale.

Pax8 is a global AI and cloud marketplace connecting service providers with technology vendors for SMBs. It has over 47,000 IT partners and 800,000 SMBs, fostering a culture of collaboration, innovation, and growth.

• Implement and configure security applications and infrastructure to support corporate policies and federal and state regulations.
• Serve as an information security subject matter expert, including familiarity with cloud implementations.
• Lead infrastructure security assessments and incident response efforts across networking, servers, databases, and applications.

KnitWell Group is a specialty retail operating company comprising iconic American brands such as Ann Taylor, Chico's, LOFT, and Talbots. Our associates are innovators who thrive through collaboration and are dedicated to excellence, creating fashion that makes customers feel good.

• Improve cloud security posture through practical, scalable policy engineering.
• Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
• Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.

UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.

• Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
• Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
• Own SOC 2, HIPAA, AI security governance, and incident response.

AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.

• Own the enterprise-wide security strategy, protecting information assets across corporate and product environments.
• Ensure compliance with federal and state regulations, while leading audits and improving disaster recovery programs.
• Collaborate with leadership to embed operational rigor and security best practices across a transforming organization.

Pluralsight provides a learning platform dedicated to accelerating technology skills for today's tech workforce. The company is mission-driven and fosters a culture of inclusion, belonging, and continuous learning.

• Own security architecture across Azure and AWS, covering tenant design, network segmentation, and workload isolation.
• Raise the engineering bar with hardened infrastructure-as-code modules, secure defaults, and policy-as-code signals at commit time.
• Own vulnerability and exposure management end to end, delivering findings as pull requests, not tickets.

One Identity enables organizations to secure, manage, monitor, protect, and analyze information and infrastructure to drive innovation. With a globally distributed team, we build enterprise products at scale and foster a collaborative, improvement-driven culture.

• Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
• Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
• Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.

Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.

• Lead and execute Delinea's Product Security Program, including secure design reviews, threat modeling, and security consulting.
• Collaborate with Enterprise Architecture, Development, DevOps, and Cloud engineering teams to balance security with business objectives.
• Define baseline cloud, container, application, and infrastructure security standards and integrate them into CI/CD pipelines.

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, with a cloud-native Identity Security Platform that applies AI-powered context across the entire identity lifecycle. We are a passionate, global team driven by world-class product leadership, outstanding engineers, and strategic investment from TPG, valuing diversity, innovation, and a culture of respect and fairness.

• Perform systems administration, patching, vulnerability scanning, and remediation for AWS and GCP cloud workloads.
• Configure and maintain security tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring.
• Support 24x7 on-call rotation and collaborate with security analysts to deliver secure solutions for FedRAMP and FISMA customers.

Quantum Sky is a technology company that engineers solutions for cyber, networks, software, and quantum for mission-driven clients. They foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role.

• Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
• Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
• Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.

Wiz is redefining security for the AI era, enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups ever, we are trusted by over 65% of the Fortune 100 and scan over 230 billion files daily, with a culture that values world-class talent and is now powered by Google.

• Establish and enforce a unified security posture across GCP and OCI, including guardrails, IAM policies, and centralized monitoring.
• Validate cloud deployments meet FedRAMP High, FISMA, and NIST 800-53 requirements, working with governance and audit teams.
• Identify vulnerabilities, policy deviations, and architectural risks, and drive remediation.

Latitude is a growing Service-Disabled Veteran Owned company within the Federal Sector, working with various federal clients across multiple agencies. They foster a remote work-from-home culture, invest in employee growth, and strive for innovation to break through technology and government barriers.