Source Job

• Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
• Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
• Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.

Wiz is redefining security for the AI era, enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups ever, we are trusted by over 65% of the Fortune 100 and scan over 230 billion files daily, with a culture that values world-class talent and is now powered by Google.

• Design and implement security-focused tooling and guardrails for infrastructure.
• Collaborate with security, SRE, and platform teams to integrate trust principles.
• Build internal automation to reduce developer cognitive load while enforcing security standards.

BlueCloud is a Snowflake Elite Partner that helps enterprises migrate to AI-ready data platforms. With 450+ consultants and 200+ successful transformations, they combine expertise with AI accelerators to deliver results 40-50% faster.

• Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization.
• Partner with DevOps and CI/CD engineers to embed shift-left security practices throughout the software development lifecycle.
• Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.

LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials straight from the browser. Trusted by more than 100,000 businesses and millions of users worldwide, they blend strong security with everyday simplicity in a remote-first, collaborative culture.

• Fix vulnerabilities across the stack by writing pull requests in application repositories and Terraform.
• Build and tune SIEM detections, mapping coverage to MITRE ATT&CK and reducing false positives.
• Lead incident response, harden AWS estate, and automate security workflows with code.

Cloudbeds is a hospitality management platform powering hotels across 150 countries, processing billions in bookings annually. The company is a remote-first team of 650+ across 40+ countries, recognized for innovation and an inclusive culture.

• Develop playbooks and address security-related tasks in AWS serverless environments.
• Drive improvements in security posture, including application, endpoint, and access management.
• Collaborate with product engineering teams to raise the bar for security in CI/CD, dependency management, and secure design reviews.

Stedi is building a new healthcare clearinghouse and RCM engine, accessible via API. With $142 million in funding and a lean, passionate team, they ship products weekly and prioritize automation and eliminating toil.

• Design and enforce cloud security controls and IAM policies across multi-account AWS environments.
• Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
• Develop automated detection and remediation workflows using Python, Bash, or Go and IaC tools.

The Tripadvisor Group connects people to experiences worth sharing, aiming to be the world's most trusted source for travel and experiences. It is a publicly traded company with a global portfolio of travel brands, fostering a culture of collaboration, agility, and traveler-first mindset.

• Lead the technical vision for platform hardening across AWS and GCP, including tier-0 access and secrets services.
• Own the hardening roadmap for critical cloud infrastructure and drive operational excellence with rigorous on-call practices.
• Mentor a global team of engineers and partner cross-functionally to build secure-by-default controls.

DoorDash is a technology and logistics company building the most reliable delivery network for consumers, merchants, and dashers. The company is growing rapidly and fosters a culture of learning, customer obsession, and inclusive leadership.

• Own security of the software build and release pipeline, cloud environments, and AWS identity and access.
• Operationalize a 15-domain cloud security framework and CrowdStrike CSPM across all AWS estates.
• Mentor a junior cloud security engineer and build paved-road patterns for engineering teams.

Vermont Information Processing is a leading beverage industry technology provider trusted by over 1,600 suppliers for 50+ years. Backed by Warburg Pincus, VIP is investing in security with executive sponsorship and a funded roadmap.

• Drive offensive security through pen tests, red-team engagements, and threat modeling across Docker products and infrastructure.
• Partner with engineering to implement secure architecture, automated reviews, and vulnerability management.
• Build offensive tooling, develop exploits, and support incident response and security education.

Docker builds tools for developers to build, share, and run applications, including Docker Desktop, Docker Hub, and Docker Scout. It is a globally distributed, remote-first team trusted by 20M+ monthly users, focused on secure container development.

• Own and evolve Orca’s FedRAMP environment across AWS GovCloud, Azure Government, and GCP, including infrastructure code, production health, and incident response.
• Design automation to make compliance a byproduct of system operation, covering continuous validation, drift detection, and evidence collection.
• Serve as the technical interface to federal customers, agency security teams, and assessors, leading authorization efforts and security reviews.

Orca Security is a cloud security innovation leader that invented agentless technology for comprehensive cloud security. The company is a unicorn with a $1.8 billion valuation, backed by top investors, and fosters a respectful and transparent culture.

• Design and build security for future infrastructure, partnering with engineering and compliance teams.
• Lead AI-native security initiatives, designing autonomous agents for threat detection and incident response.
• Devise defense-in-depth frameworks, research threats, and maintain KPIs for a healthy cloud security program.

WeightWatchers is a global digital health company that blends science and community to help millions build sustainable healthy habits. The engineering team drives transformative change through technology, with a culture that thrives on urgency, collaboration, and passion for impactful work.

• Be a technical contributor on a global software engineering team in Product Security, building robust and scalable systems.
• Design and implement software and automation tools for security use cases like software supply chain security and AI-powered vulnerability discovery.
• Own SRE excellence, CI/CD, and datastore operations for mission-critical security services, ensuring flawless performance.

CrowdStrike is a global leader in cybersecurity, protecting organizations with an AI-native platform to stop breaches. Founded in 2011, the company fosters a culture of flexibility, autonomy, and responsible AI adoption, with a large-scale distributed system processing trillions of events daily.

• Design, build, and optimize secure CI/CD pipelines within GitLab, enforcing DevSecOps principles through automated vulnerability scanning and compliance gates.
• Manage and scale AWS infrastructure, optimizing workloads on EKS, EC2, S3, and RDS.
• Establish comprehensive monitoring, logging, and alerting systems across EKS and EC2 nodes to ensure maximum uptime.

LMI is a digital solutions provider that accelerates government impact with innovation and speed, offering commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, the company serves defense, space, healthcare, and energy sectors, focusing on agility and collaboration.

• Design, prototype, and deploy technical controls to close high-impact abuse vectors.
• Translate empirical attacker evidence into precise technical requirements and control specifications.
• Collaborate with cross-functional teams to run experiments and build regression testing suites.

Stripe is a financial infrastructure platform for businesses, enabling millions of companies to accept payments and grow revenue. It is a large company with a mission-driven culture focused on increasing the GDP of the internet.

• Deploy and automate CI/CD pipelines and establish IaC using modern DevSecOps techniques including serverless and Zero Trust patterns.
• Own the POAM process end to end, develop plans of action with target dates, track progress, and close findings proactively.
• Conduct Security Impact Analyses (SIAs) to achieve and maintain ATO, and maintain a live dashboard for all security findings.

Oddball brings quality software to the federal space, aiming to improve the daily lives of millions. It is a small company that values learning, growth, and making a big impact.

• Design, build, and maintain CI/CD pipelines for secure application delivery.
• Automate infrastructure provisioning and deploy cloud services using AWS and Terraform.
• Integrate security controls and enforce cybersecurity standards in development and deployment.

LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors, helping agencies navigate complexity.

• Partner with engineering teams on architecture reviews, threat modeling, and secure design to translate risks into practical recommendations.
• Improve security tooling, strengthen SDLC and CI/CD controls, and serve as a GCP security subject matter expert.
• Drive vulnerability management, coordinate penetration testing, and enable engineers through documentation and mentorship.

Doppel builds an AI-native platform for social engineering defense, protecting executives, employees, customers, and brands from phishing, impersonation, and fraud across digital channels. Backed by Andreessen Horowitz and Bessemer Venture Partners, it is a rapidly growing Series C startup with a team focused on cybersecurity expertise and startup velocity.

• Apply practical security principles and AI-native workflows to deliver technical solutions to end users and internal teams.
• Lead and deliver impactful enhancements for the Data Security team, enforcing security and privacy standards.
• Design and implement customer data governance solutions that enable security and privacy by design.

Abnormal protects the humans behind the world's most critical organizations from AI-powered cybercrime. Over 4,500 enterprises trust their behavioral AI platform.

• Design and operate secure, scalable cloud infrastructure on AWS/EKS.
• Develop and maintain CI/CD pipelines and automated deployment processes.
• Champion observability and SRE practices, including monitoring and performance improvements.

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, they deliver future-ready solutions.

• Build and deploy security tooling across endpoint management, supply-chain, infrastructure, and application layers.
• Identify and remediate security gaps across production systems and development pipelines.
• Lead incident response end-to-end and partner with engineering on secure design reviews.

Tempo is a layer-1 blockchain built for stablecoins and real-world payments, leveraging expertise from Stripe and Paradigm. We are a team of crypto-optimists moving fast to build infrastructure for onchain economic flows.