Source Job

• Lead security initiatives across infrastructure, applications, cloud, and enterprise deployments to ensure a strong security posture.
• Conduct penetration testing, vulnerability assessments, and security reviews to proactively identify and mitigate risks.
• Collaborate with engineering, DevOps, and machine learning teams to embed security best practices into products and processes.

The company develops innovative AI-driven products for highly regulated environments. They operate with a startup culture, emphasizing collaboration, autonomy, and continuous improvement.

• Partner with engineering and product teams to identify application security risks and provide practical mitigation recommendations.
• Analyze code, configurations, and logs to detect vulnerabilities and improve security workflows.
• Communicate security risks clearly to technical and non-technical stakeholders and drive scalable solutions.

• Identify and remediate vulnerabilities across the product ecosystem using code reviews and automation.
• Integrate security tools and practices into CI/CD pipelines to ensure secure development.
• Collaborate with engineering teams to apply threat modeling and secure-by-design principles.

They are a partner company specializing in digital product security. The team size is not specified, but the culture emphasizes trust, collaboration, and remote work.

• Investigate and resolve customer technical issues across cloud security posture management, vulnerability scanning, and threat detection in AWS, Azure, and GCP environments.
• Troubleshoot cloud connector and integration failures, including IAM, network connectivity, and API authentication issues.
• Design and implement automation leveraging AI agents to improve triage accuracy and resolution efficiency.

Wiz provides an AI-powered cloud security platform that connects code, cloud, and runtime to secure cloud and AI applications, trusted by over 65% of the Fortune 100. As one of the fastest-growing startups, powered by Google, Wiz has a culture that values world-class talent and encourages creative thinking.

• Own the vulnerability management program, prioritizing and driving a culture of ownership across business units.
• Drive metrics and program review to transparently communicate performance and accountability.
• Provide expert leadership to highly visible, multi-faceted projects while coordinating across teams and geographies.

We empower organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity of our customers and trusted alliance of elite hackers with our patented data and AI-powered Security Knowledge Platform. We are based in San Francisco and New Hampshire, supported by General Catalyst and others, and we foster a diverse and inclusive culture.

• Manage the vulnerability management program end-to-end, including scanning and remediation.
• Collaborate with developers on secure architecture, threat modeling, and code dependency reviews.
• Oversee bug bounty programs, security tools, incident response, and compliance frameworks.

RainFocus provides an industry-disrupting event management platform for Fortune 500 companies like Adobe, Cisco, and IBM. The company is well-funded, rapidly growing, and fosters a culture of innovation, teamwork, and fun.

• Analyze, assess, reproduce, and triage incoming security vulnerability reports from the bug bounty program.
• Communicate clearly with security researchers and drive the lifecycle of submissions through to resolution.
• Understand root causes of vulnerabilities and advise on mitigation strategies to improve security posture.

Stripe is a financial infrastructure platform for businesses, enabling millions of companies to accept payments, grow revenue, and accelerate new business opportunities. As a large, mission-driven company, Stripe fosters a culture of passion, grit, and integrity with diverse perspectives.

• Take ownership of protecting product, users, and collaborators as a Security Engineer on a fast-growing AI dating platform.
• Perform weekly code reviews, coordinate security audits, and maintain risk register to ensure safety of AI-generated content.
• Monitor emerging AI security threats, manage IT access and device security, and run phishing simulations company-wide.

EverAI builds the world's largest AI companionship platform, redefining relationships for millions with a proprietary moderation system, EverGuard. With 50 million users in two years, the team of about 100 is enthusiastic, passionate, and hardworking, led by experienced entrepreneurs.

• Implement and enable Tenable's Exposure Management solutions to help organizations manage cyber risks.
• Onboard Tenable technologies, following industry standards, to deliver customized solutions addressing vulnerabilities.
• Provide consultative advice and build positive client relationships to ensure ongoing satisfaction and partnership.

Tenable is an exposure management company that helps organizations understand and reduce cyber risk. With over 40,000 clients globally, including 65% of the Fortune 500, the company fosters a culture of belonging, respect, and excellence.

• You'll lead the VIPR & VMDR function, integrating vulnerability intelligence, detection, and response for customers across APJ/APAC.
• You'll operate and tune vulnerability detection tools like Tenable, Qualys, and Rapid7, and automate pipelines using Python and REST APIs.
• You'll build risk dashboards and executive briefings, and collaborate with Customer Success and Security Engineering to improve remediation metrics.

ServiceNow is the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter. The company fosters an AI-native culture where technology and talent are unstoppable together.

• Design and implement security controls across applications, cloud infrastructure, and development environments.
• Conduct architecture reviews, threat modeling, and security assessments for new products.
• Identify, prioritize, and remediate vulnerabilities across the technology stack.

SignalFire partners with top early-stage startups that are shaping the future of technology. They have a portfolio of over 200 innovative companies across AI, cybersecurity, healthtech, fintech, developer tools, and enterprise SaaS.

• Oversee daily vulnerability identification, triage, and reporting across AWS cloud assets and AI/LLM application stacks.
• Leverage ACAS (Tenable.sc) and AWS security tools to evaluate threat vectors and ensure compliance with DISA STIG benchmarks.
• Translate complex technical findings into actionable remediation guidance and executive briefings for government stakeholders.

Dark Wolf is a cybersecurity firm specializing in vulnerability management and cloud security for federal and DoD systems. The company maintains a collaborative, mission-focused culture with a team of cybersecurity professionals.

• Lead bug bounty program strategy and vulnerability management initiatives.
• Collaborate with engineering and security teams to drive remediation efforts.
• Conduct code reviews and develop security tooling to improve efficiency.

This company operates a global technology platform. It values security, collaboration, and continuous learning, with a team dedicated to protecting user privacy and safety.

• Define security requirements and design application architectures following a secure-by-default approach.
• Conduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile apps.
• Implement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale.

Prima is a motor insurance company that uses data and technology to provide a great experience for drivers. They are trusted by over 5 million drivers and have over 350 engineers in their Engineering department, fostering a culture of curiosity and collaboration.

• Proactively identify and drive security improvements across the product and platform.
• Partner with engineering teams to threat model new features and review designs early in development.
• Build and improve security tooling, libraries, and workflows to make secure development the default path.

Fellow is an AI meeting assistant that helps teams record, transcribe, summarise, and act on their meetings. We are a Series A company backed by major venture firms, with a remote-first culture and a growing team.

• Lead and mentor an internal red team, establishing scalable offensive security practices.
• Conduct advanced penetration testing and adversarial simulations across cloud infrastructure and AI environments.
• Research emerging attack techniques and collaborate with detection teams during purple team exercises.

They operate a cutting-edge cloud platform that supports advanced AI workloads. The company is remote-first, emphasizes innovation and continuous improvement, and has a collaborative international team.

• Partner with engineering, product, and DevOps teams to integrate security practices throughout the SDLC, focusing on cloud-native environments and automated pipelines.
• Design, implement, and maintain security tooling and gates within CI/CD pipelines covering SAST, DAST, SCA, secrets detection, and container scanning.
• Lead threat modeling, conduct application security assessments including code review and manual penetration testing, and triage bug bounty reports.

Hyland is the pioneer of the Content Innovation Cloud, delivering ubiquitous enterprise intelligence to organizations. With a team of nearly 4,000 employees, the company fosters an employee-centric culture focused on community impact and innovation.

• Own our approach to AI and agentic security: guardrails for agentic access to cloud and data, and the security of AI/ML workloads.
• Own our detection platform (Panther): detection strategy and coverage across cloud, container, and SaaS log sources.
• Act as the senior security resource across cloud security and security reviews, mentoring teammates.

SmarterDx is a clinical AI platform that helps health systems capture revenue and improve quality metrics using clinically-validated EHR data. The company is a remote-first team with a small, collaborative engineering culture focused on making healthcare more accurate and effective.

• Conduct comprehensive penetration tests across applications, APIs, cloud environments, and infrastructure to identify vulnerabilities.
• Assess security controls in multi-cloud environments (AWS, GCP) and review Infrastructure as Code configurations.
• Collaborate with engineering teams to improve security practices and create high-quality technical documentation.

The company develops and secures products in a multi-cloud environment, focusing on cybersecurity. It fosters a collaborative and inclusive culture that encourages innovation and technical excellence.

• Lead complex Global Vulnerability Management workstreams to advance Threat Exposure Management capabilities and transition to a Continuous Threat Exposure Management model.
• Conduct hands-on vulnerability research, technical analysis, and security validation to eliminate false positives, characterize exploitability, and provide actionable remediation guidance.
• Partner across Information Security and engineering teams to evolve platforms, integrations, and automation for improved discovery, prioritization, and remediation outcomes.

Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand, delivering innovative gaming hardware and network services to over 100 million people worldwide. As a subsidiary of Sony Group Corporation, SIE is a dynamic and entertainment-focused organization that values innovation, excellence, and employee empowerment.