Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
Partner with security engineering to turn findings into actionable defense improvements.
Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.
Validate vulnerabilities and configuration weaknesses to determine practical exploitability and develop realistic attack paths across web, cloud, identity, and infrastructure.
Conduct purple-team exercises and translate offensive findings into actionable improvements for detection and response.
Backblaze is the object storage leader in the open cloud movement, providing cloud storage services to businesses, developers, and individuals. Founded in 2007 and publicly traded since 2021, the company generates over $136M in annual recurring revenue, manages over three billion gigabytes of data for 500K+ customers in 175+ countries, and fosters a culture centered on diversity, equity, and inclusion.
Design and build red team agents, architecting harnesses, tools, and MCP servers to encode offensive tradecraft.
Drive full-chain attack operations across Windows, Active Directory, on-prem, cloud, and network surfaces.
Build detection-evasion capabilities, cyber ranges, and benchmarks to verify agent improvements against real defenses.
Cogent is an applied AI lab building AI agents for cybersecurity, using its AI Taskforce to assess petabytes of enterprise data and prevent breaches. Backed by Greylock and Bain Capital Ventures, the team includes experts from top universities, leading tech companies, and world-class cybersecurity firms.
Lead advanced security assessments across web applications, APIs, cloud platforms, and enterprise networks.
Conduct red team activities, vulnerability research, and custom tool development to simulate real-world attacks.
Collaborate with cross-functional teams to assess risks, support remediation, and mentor colleagues.
Hitachi Vantara provides data infrastructure for global innovators across industries. As a diverse, global team, they foster an inclusive culture focused on making a real-world impact with data.
Plan, scope, execute, and report on penetration tests across cloud, endpoint, web, and API environments.
Partner with development teams to embed security testing into their release cycles and mature SDLC practices.
Lead quarterly red and purple team operations simulating real-world adversaries to test detection and response.
Group 1001 is a consumer-centric, technology-driven family of insurance companies that delivers value by combining financial strength with deep insurance expertise. The culture emphasizes collaboration, communication, risk management, and striving for outcomes, fostering a supportive work environment.
Conduct comprehensive threat emulation exercises including red team, purple team, and penetration tests.
Collaborate with cross-functional teams to assess and improve security posture through adversary simulation.
Develop custom tools and document findings, risks, and recommendations for technical and business audiences.
TransUnion is a global information and insights company that helps consumers and businesses transact with confidence. With over 12,000 associates in more than 30 countries, it prioritizes work/life flexibility and a culture of innovation.
Design and build production-grade Python reconnaissance workflows to discover and enumerate external-facing assets at scale.
Research and parse messy external data sources to turn unstructured information into actionable attack intelligence.
Automate multi-step attack paths from initial access to post-exploitation, and mentor engineers to raise the bar.
Horizon3 is a fast-growing, remote cybersecurity company that builds NodeZero, an autonomous pentesting platform. The team is a fusion of former special operations cyber operators and startup engineers, committed to a culture of respect, collaboration, and results.
Lead red team assessments and adversary emulation for space and mission systems.
Develop attack plans, test cases, and Rules of Engagement with safety boundaries.
Assess Linux, embedded, cloud, and network systems for exploitable weaknesses.
SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. The company combines innovation and deep technical expertise to uncover vulnerabilities and strengthen operational resilience.
Conduct manual pentests on core systems and AI agents, building automation to expand coverage.
Define how we pentest AI, including LLM applications and agent-generated code.
Triage SAST findings, review code across web/APIs/AWS, and communicate risk to engineers.
We are a financial technology company based in Boston, unlocking capital for small businesses across America with fast, flexible funding. Our remote-first team, recognized as a Best Place to Work, has provided over $4.8 billion to more than 92,000 small businesses since 2012.
Run full kill chains against web, mobile, API, and thick/thin clients, proving exploitability and mapping blast radius.
Train the swarm by translating your tradecraft into reasoning and evaluation data for autonomous AI attackers.
Pressure-test the swarm, build tools, and tell the attack story to engineers and executives.
Armadin builds autonomous proactive security, deploying AI agents that discover and remediate threats before breaches. We're a scrappy, high-ownership team of elite researchers and engineers, led by Kevin Mandia, with startup-level autonomy.
The Senior Architect leads offensive security engagements focusing on cloud and AI testing, uncovering vulnerabilities in modern environments.
They serve as technical lead, define testing approach, produce high-quality reports, and present findings to stakeholders.
They develop testing methodologies, research emerging attack techniques, and mentor team members.
Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. We employ more than 1,200 people across the United States and our culture embodies the spirit of a startup with the advantage of a scalable business.
Partner with engineering to identify and mitigate security risks before launch, building secure frameworks and libraries that make control adoption easy.
Own identity and secrets management, including credential issuance, rotation, and workload authentication across cloud and Kubernetes environments.
Harden cloud security controls and build security models for AI agents with permission boundaries and tenant isolation.
Fieldguide builds software that automates assurance and audit work for cybersecurity, privacy, and financial audits, helping businesses enable trust. They are a remote-first company backed by top investors and trusted by over 50 of the top 100 accounting and consulting firms, with a values-driven culture.
Plan and execute authorized red team assessments against government systems, applications, networks, APIs, and cloud environments.
Develop realistic attack scenarios aligned with MITRE ATT&CK and identify exploitable attack paths beyond automated scanning.
Document findings, provide remediation recommendations, and guide less-experienced testers through technical mentoring.
Valiant Solutions provides cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. The firm is a multi-year Washington Business Journal Best Places to Work winner with a distributed, employee-centric culture.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Lead research into GCP attack paths and identity trust relationships.
Design and implement production-quality Python attack capabilities for cloud-native services.
Set technical direction for GCP attack coverage and prioritize with product and engineering teams.
Horizon3 is a fast-growing, remote cybersecurity company that develops the NodeZero autonomous penetration testing platform. The company fosters a culture of respect, collaboration, ownership, and results, with a team comprised of former special operations cyber operators and engineers.
Collaborate with sales to engage clients and architect tailored AI security solutions.
Conduct product demonstrations, PoCs, and technical presentations to prospective clients.
Provide pre- and post-sales support, training, and enablement to clients and internal teams.
HiddenLayer protects the world's most valuable technologies from adversarial AI attacks. The company is a fully remote, fast-growing startup backed by $100M in Series B funding, with a global team and a strong focus on innovation and culture.
Assist OpenTeams in building and deploying AI systems for enterprises and government clients.
Contribute to open source projects and collaborate with global experts across software engineering, data, and DevOps.
Share your skills and interests to be considered for future opportunities in a flexible remote, hybrid, or onsite environment.
OpenTeams helps enterprises and government organizations build, deploy, and operate AI systems they own and control. Founded by Travis Oliphant, creator of NumPy and SciPy, the company values curiosity, ownership, and collaboration.
Own an ambiguous lane of platform work end to end: scope, prototype, experiment, and deliver production-ready code.
Build foundations for AI agents to safely participate in engineering and operations, including permissions, running environments, and auditing.
Keep security, stability, and scale as baseline while traffic grows and agents gain autonomy, reducing single points of failure.
Redox accelerates healthcare's transformation with useful data via a flexible interoperability platform that connects and powers real-time healthcare data exchange. It is a fully remote US-based team of hundreds operating with radical transparency and a strong bias toward ownership.
Build central security systems and automation the whole company relies on.
Secure cloud infrastructure, identity and access across Rain's growing footprint.
Lead external security assessments and drive findings to verified fixes.
Rain is a global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Backed by top investors and valued at $1.95B, Rain is a hypergrowth company with a flat, open culture trusted by over 100 organizations worldwide.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.