Perform threat modeling and secure design reviews for new agent capabilities including tool use, memory systems, and multi-agent orchestration flows.
Research emerging attack surfaces relevant to AI agent platforms and translate findings into actionable mitigations.
Support enterprise customer security reviews and trust conversations related to agent security posture.
Emergence AI is a frontier agentic AI lab advancing safe, autonomous AI for enterprise environments. The team brings experience from leading AI research labs and tech companies, with offices in New York, California, Spain, and India.
Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities.
Develop and refine exploit techniques and collaborate with product management to translate findings into security capabilities.
Publish research through blogs, white papers, and conferences, and contribute to open-source security tools.
Endor Labs secures AI-generated code by providing vulnerability detection and remediation for software supply chains. They are a growing security company with a collaborative, customer-focused culture, backed by $163M in funding and serving major enterprises.
Conduct original threat intelligence research into active email and identity attack campaigns.
Synthesize complex and conflicting data into clear assessments, reports, briefings, and webinars for varied audiences.
Partner with Sales, Customer Success, and Marketing to deliver intelligence that supports customer and prospect decisions.
Abnormal protects the humans behind the world's most critical organizations from AI-powered cybercrime. 5,000 enterprises trust our behavioral AI platform.
Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.
n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.
Monitor and evaluate agentic incidents, performing root-cause analysis across source alerts and pipelines to provide feedback to the AI team.
Define telemetry fields and contextual requirements for analyst-grade investigations, ensuring reliable data across detection surfaces.
Research and onboard telemetry from emerging security vendor APIs, mapping them into a unified security data model.
Zscaler accelerates digital transformation with its Zero Trust Exchange platform, protecting customers from cyberattacks and data loss. With thousands of customers and over 200 data centers globally, it fosters a culture of ownership, collaboration, and ongoing feedback.
Conduct original offensive research against Dia, including prompt injection, sandbox escape, and cross-profile data access.
Threat model new surfaces with engineering teams and review features before they ship.
Build automated vulnerability discovery systems, including fuzzing and AI-assisted hunting pipelines.
The Browser Company is building a better way to use the internet, with a focus on an AI-powered browser called Dia. They are a remote-first team of nearly 100 people who value diversity and craft.
Design and build red team agents, architecting harnesses, tools, and MCP servers to encode offensive tradecraft.
Drive full-chain attack operations across Windows, Active Directory, on-prem, cloud, and network surfaces.
Build detection-evasion capabilities, cyber ranges, and benchmarks to verify agent improvements against real defenses.
Cogent is an applied AI lab building AI agents for cybersecurity, using its AI Taskforce to assess petabytes of enterprise data and prevent breaches. Backed by Greylock and Bain Capital Ventures, the team includes experts from top universities, leading tech companies, and world-class cybersecurity firms.
Own the end-to-end vulnerability response pipeline, from intake and triage to AI-assisted rule generation and public disclosure.
Expand automated WAF protection to ModSecurity and Coraza, validating rules to minimize false positives.
Lead and mentor a small team of security analysts while measuring time-to-protection and coverage metrics.
CloudLinux develops security products, including Imunify360, to protect websites against critical threats. The company operates with a remote-first culture, emphasizing ownership, professional growth, and effective collaboration across distributed teams.
Own and run bug bounty programs and external audit engagements, triaging and validating fixes.
Secure code and software supply chain, including CI/CD defenses, dependency controls, and signing.
Build anti-scam, anti-abuse, and security tooling with static/dynamic analysis and LLM-driven agents.
Mysten Labs builds foundational blockchain infrastructure and products, including Sui and Move, to advance the internet and enable the agent economy. It is a remote-first, world-class team backed by a $300M Series B from leading venture funds.
Build backend services and data pipelines for customer-facing security features.
Integrate machine learning models and large language models into detection and investigation workflows.
Develop AI agents that analyze suspicious activity and support security investigations.
Abnormal protects enterprises from AI-powered cybercrime using a behavioral AI platform. Over 5,000 enterprises trust the company, which has been recognized as a top cybersecurity startup and protects 15% of the Fortune 500.
Identify risks through security reviews, code audits, and penetration tests across applications, APIs, and integrations.
Secure our AI layer against prompt injection, excessive permissions, and unauthorized data access.
Define and update secure development practices, and support customer security calls.
Euler is an AI-native partner relationship management (PRM) platform that powers go-to-market partnerships, which drive 30-50% of company revenue. We grew 600% last year, are profitable, and have a culture of ownership and no ego.
Lead and own security across the company, hardening cloud infrastructure and managing vulnerabilities.
Conduct hands-on penetration testing, code review, and incident response for AI-driven systems.
Build automated security controls into existing workflows without slowing delivery.
Zencoder builds and orchestrates AI agents that ship real work, from code to operations. The company keeps a small, highly capable team with a remote-first culture, prioritizing talent and autonomy.
Own the product security research agenda and turn emerging threats into strategy.
Partner with Product, Engineering, and Security leadership to shape roadmap decisions.
Represent Chainguard externally through talks and thought leadership to advance the industry.
Chainguard delivers hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. They are a venture-backed, remote-first company serving Fortune 500 enterprises and global leaders, with a culture focused on customer obsession and intentional action.
Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.
Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.
Lead technical initiatives to strengthen engineering security across Aiwyn's SaaS platform, CI/CD pipelines, and software delivery systems.
Own vulnerability management, threat modeling, and product security, partnering with engineering teams to build secure-by-default practices.
Drive supply chain security, AI security, and security strategy to make security a shared responsibility across engineering.
Aiwyn builds the first complete platform for modern accounting firms, replacing legacy practice management systems with software firms can trust. Backed by top-tier investors, it works with the majority of the Top 500 accounting firms and fosters a culture of ownership, trust, and relentless innovation.
Define the long-term technical vision for AI/LLM offense and drive its integration into NodeZero's autonomous pentesting platform.
Lead research and productization of attacks on LLM applications, agentic systems, and AI infrastructure.
Partner with senior leadership to shape strategy, standards, and execution across engineering teams.
Horizon3 is a fast-growing, remote cybersecurity company building NodeZero, an autonomous pentesting platform. The team is a fusion of Special Operations cyber operators and startup engineers, with a culture of respect, collaboration, and results.
Plan and run authorized red team operations across cloud, Kubernetes, networks, identity systems, SaaS, and internal applications.
Build and maintain AI-assisted testing harnesses for automated offensive security testing.
Work collaboratively with Whatnot’s Blue Team on Purple Team engagements to strengthen security posture.
Whatnot is the largest live shopping platform in North America and Europe. They are one of the fastest growing marketplaces and were named the #1 Best Startup Employer in America, with a culture emphasizing low ego, growth mindset, and high impact.
Analyze incoming threat intelligence, assess its credibility and relevance, and run IOC sweeps across our environment.
Own pieces of work across the threat management lifecycle, turning intel into recommendations for detection, incident response, and vulnerability management.
Develop and test detection rules, build orchestration workflows, and automate triage, enrichment, and response using AI tools.
We build the market-leading enterprise password manager and pioneered Unified Access Management, trusted by over 180,000 businesses. We've surpassed $500M in ARR, made the Forbes Cloud 100, and nurture a remote-first, collaborative culture.
Design and tune detections across cloud, identity, endpoint, and email using detection-as-code practices.
Lead incident response, maintain response plans, and conduct tabletop exercises.
Build AI agents and automation to reduce detection and response times.
We are a technology company delivering financing and software for sustainable solutions like solar panels and energy-efficient home improvements. We have served over 1 million homeowners and facilitated over $30 billion in financing since 2018, with a collaborative and rewarding culture.
Take end-to-end ownership of security across a platform serving 50 million users, spanning application security, GRC, and AI security.
Collaborate closely with engineering leadership and development teams to identify vulnerabilities, strengthen controls, and drive remediation.
Protect AI-powered systems against evolving threats like prompt injection, jailbreaks, and third-party provider vulnerabilities.
They are a rapidly growing AI-powered technology platform serving over 50 million users worldwide. As a scale-up with more than 50 employees, they foster a high-autonomy, execution-focused culture with direct access to leadership.