Define and drive the security strategy for a global fintech platform.
Lead incident response, threat detection, and compliance across cloud and application environments.
Build and scale a security team and embed security into the software development lifecycle.
This company operates a global financial technology platform supporting cross-border payments and digital financial services. It is a fast-growing organization with a fully remote culture and a focus on security as a strategic business enabler.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Serve as mentor to other Security Engineers and lead application security reviews and threat modeling.
Drive automated security testing and bug bounty program to position 6sense as an industry leader.
Collaborate with engineering teams to reproduce, triage, and address application security vulnerabilities.
6sense's mission is to multiply growth, retention, and efficiency for companies. They have a growth mindset culture with values like Win as One Team and Stay Curious, and offer numerous learning and development initiatives.
Own application and product security, including threat modeling, secure code review, and access-control and secrets-exposure flaws.
Design and implement security architecture for an agentic AI software development lifecycle with out-of-band controls.
Secure AWS environment, manage non-human identities, and enforce security tooling across GitHub and SaaS estate.
Oshi Health is a fully remote, cloud-native healthcare platform dedicated to helping people manage chronic GI conditions. It is a growing company with a small cross-functional team, emphasizing a remote-first culture and equity-based compensation.
Partner with product teams to ensure security is embedded throughout the product development lifecycle.
Conduct threat modeling, architecture reviews, and source code analysis to identify and mitigate vulnerabilities.
Automate security processes and drive cross-team projects to closure.
Affirm exists to give people a clear, predictable way to pay over time with no hidden fees, building honest financial products. It is a remote-first company that values information security, transparency, and flexibility, with a strong culture of care.
Investigate and remediate application security vulnerabilities directly in code, implementing fixes and submitting pull requests.
Deploy, configure, and optimize SAST and SCA tools across repositories and CI/CD pipelines, reducing false positives.
Triage and prioritize security findings while collaborating with engineering teams to embed secure coding practices.
Partner company is a technology firm delivering large-scale international projects with a focus on integrating application security into the software development lifecycle. They foster a collaborative, globally distributed engineering culture with an informal environment, open-door policy, and continuous learning opportunities.
Conduct security architecture reviews and risk assessments for proposed IT solutions.
Evaluate designs to identify security risks, threats, and gaps in controls.
Act as a trusted security advisor to technical teams and leadership.
Kyndryl runs and reimagines mission-critical technology systems for the world's leading businesses. It has a global workforce and a culture focused on flexibility, support, and well-being.
Own and scale the vulnerability management program, including triage, prioritization, and remediation.
Embed security into the SDLC by integrating automated gates, threat modeling, and design reviews.
Drive cross-team security initiatives and mentor engineers to improve overall posture.
Figure is a blockchain-native capital marketplace for the origination, funding, and trading of tokenized assets. It has over 480 partners, has originated $30 billion in loans, and is recognized as a top fintech company.
Operate and maintain application security scanning tools including SAST, SCA, secrets scanning, and container scanning throughout the SDLC.
Review and triage security findings, validate true positives, and collaborate with engineering teams to prioritize remediation activities.
Support onboarding of new repositories, maintain documentation, and assist with scripting and automation to improve security workflows.
This company is a partner organization with a collaborative security team focused on strengthening application security across a diverse portfolio of digital products and services. It fosters an inclusive, collaborative culture with employee communities and emphasizes learning and development.
Shape security architecture and engineering practices across products, services, and global infrastructure, ensuring secure-by-default development.
Lead security reviews, threat modeling, and vulnerability management for high-risk features while building scalable security tools.
Mentor engineers, scale security champions programs, and drive systemic remediation across multi-team initiatives.
The company builds and maintains a broad portfolio of products, services, and global infrastructure with a strong focus on secure-by-default engineering practices. It supports hundreds of engineers in an agile, remote-first environment with a strong emphasis on collaboration and technical quality.
Manage vulnerability triage from SCA, container scanning, and external reports, collaborating with engineering on remediation.
Conduct threat modeling and security reviews with R&D teams, turning findings into prioritized actions.
Build internal security tooling, including a CVE registry and LLM-assisted code analysis workflows.
Camunda provides an enterprise platform for agentic orchestration, enabling organizations to coordinate AI agents, people, and systems across business processes. Trusted by over 700 organizations, including 9 of the top 10 US banks, Camunda is a fully remote, AI-first company named one of GP Bullhound's Top 100 Next Unicorns and a Great Place to Work.
Shape application security practices by integrating automated safeguards throughout the software development lifecycle.
Collaborate with Security and Engineering teams to identify vulnerabilities early and manage bug bounty programs.
Conduct threat modeling and secure code reviews for Java and Python microservices while fostering developer security ownership.
This partner company protects payment infrastructure and enables secure, scalable digital commerce. It operates as a remote-first, security-focused fintech organization with a fast-moving culture and globally distributed teams.
Lead and define security strategy for a globally distributed technology organization.
Manage application security, infrastructure protection, and incident response.
Collaborate with engineering teams to embed security throughout the development lifecycle.
They are a globally distributed technology organization building a SaaS platform with AI-powered tools and integrations. They operate as a lean, high-trust remote team that values collaboration, autonomy, and innovation.
Lead hands-on security assessments for cloud, application, and infrastructure environments.
Manage technical projects end-to-end and deliver practical security solutions.
Work directly with clients and engineering teams to communicate findings and drive improvements.
Jobgether is an AI-powered job platform that matches candidates with hiring companies using objective review processes. It supports fully remote recruitment and emphasizes autonomy, technical excellence, and human-led final hiring decisions.
Embed security into every stage of the SDLC ensuring secure-by-design systems.
Lead secure code reviews across TypeScript/Node.js services and modern frontend stacks.
Drive threat modeling and own the vulnerability management lifecycle.
SpinQuest is a social casino platform that blends social gaming with innovative currency mechanics. Founded in 2025, we have grown into a recognized name in social gaming with a community-first approach and original content.
Partner with engineering and product teams to review architecture, assess security risks, and drive secure-by-default practices.
Build and maintain security tooling, automate workflows, and strengthen application security across the SDLC.
Lead cross-functional security projects, promote security awareness, and support bug bounty and vulnerability research.
They are a remote-first security company that helps organizations identify and address vulnerabilities before they become serious threats. The team is collaborative and fast-paced, valuing initiative, continuous learning, and diverse perspectives.
You will build a recurring product security review program, threat-modeling new features and auditing high-risk areas.
You will improve application security testing by combining static analysis, dependency scanning, and dynamic testing.
You will own vulnerability intake and remediation, triaging findings from HackerOne, scanners, and internal research.
Close builds a communication-first, AI-powered CRM that automates busywork so sales teams can focus on selling. They are a bootstrapped, profitable 130-person company with a 100% remote team, focused on helping small and scaling businesses succeed.
Collaborate with Product Engineering teams throughout the SDLC to identify vulnerabilities through threat modeling, design reviews, and secure code reviews.
Develop and implement end-to-end security solutions to mitigate risks across the product suite.
Drive improvements across Product Security tooling, automation, and the bug bounty program while experimenting with AI-based tools.
Superhuman is an AI productivity platform that integrates with over 1 million apps, offering writing, docs, inbox, and AI assistant products. Founded in 2009, it powers over 40 million people and 50,000 organizations worldwide.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.