Source Job

• Owns product, cloud, engineering, vendor, AI-tooling, and compliance security functions.
• Builds practical guardrails for AI tools, agents, MCPs, data leakage, and automation.
• Understands OWASP, IAM, secrets, cloud security, vulnerability management, CI/CD, incident response, and frameworks like SOC 2, ISO 27001, GDPR, or HIPAA.

PlayPower Labs is a company focused on building practical security functions without slowing down teams. The organization values security sharpness, usefulness, and a product-minded approach, with a culture that balances protection and agility.

• Lead the Security Operations function, owning security monitoring, threat detection, and incident response.
• Drive cloud security initiatives across AWS, Kubernetes, and CI/CD pipelines.
• Support compliance programs like PCI DSS, SOC 2, ISO 27001, and develop security metrics.

DEUNA is a rapidly growing startup revolutionizing global commerce with an AI-powered payments platform that helps large enterprises boost approval rates and reduce costs. It is a multicultural, diverse team distributed throughout LATAM with a startup culture.

• Take ownership of building and scaling comprehensive security, privacy, and compliance programs that protect customer data.
• Lead compliance initiatives such as SOC 2 Type 2 audits and evaluate additional frameworks like ISO 27001 and HIPAA.
• Build scalable automated security processes by replacing manual tasks with scripts, APIs, and AI-powered solutions.

Our partner is a technology company focused on building secure, scalable systems. They operate with a remote, collaborative culture emphasizing ownership, transparency, and continuous improvement, with around 50–300 employees.

• Strengthen company-wide security posture through hands-on engineering, collaboration, and pragmatic standards, focusing on application security, cloud and infrastructure security, and secure development practices.
• Define and implement scalable security standards supporting SOC 2 readiness through practical, automated, and auditable solutions, partnering with Engineering, Infrastructure, IT, Product, Legal, and other teams.
• Build and maintain internal security tools, automation, and services that support secure development, compliance workflows, vulnerability management, and operational visibility.

Later is the world’s most intelligent influencer marketing company, built to give brands the confidence to create unforgettable campaigns by combining real creator relationships, trusted intelligence, and expert guidance. Trusted by leading enterprise brands including Nike, Wayfair, Unilever, and Southwest Airlines, Later bridges creativity and performance so campaigns deliver results.

• Lead security discovery workshops and translate high-level architectural requirements into actionable security roadmaps.
• Design end-to-end cloud security frameworks and document controls for SOC 2 and HITRUST compliance.
• Establish governance and security processes for AI and manage vulnerability remediation with development teams.

Ollion is a global technology partner that helps organizations solve their toughest business challenges in AI, data, and cloud. They are a remote-first, globally distributed team focused on making a world of difference through innovation and collaboration.

• Design and ship scalable security solutions to bridge the gap between security and engineering teams.
• Build cooperative partnerships with product and engineering teams to integrate robust security capabilities at scale.
• Drive security risk reduction through technical leadership, security reviews, and mentorship across engineering teams.

Twilio is a communications platform that delivers innovative solutions to hundreds of thousands of businesses and empowers millions of developers worldwide to craft personalized customer experiences. The company has a remote-first work culture with a strong focus on connection, global inclusion, and diverse experiences, making a global impact each day.

• Own and evolve GameChanger's multi-year security and technology strategy, including prioritization and alignment to business goals.
• Lead, mentor, and grow a team of security and technology operations professionals, setting direction and fostering autonomy.
• Evaluate and mitigate risks across infrastructure, product, and corporate environments, and manage the security operations and incident response program.

GameChanger builds the first and best platform for youth sports experiences, helping families and coaches elevate the next generation. We are a remote-first, dynamic tech company based in New York City, solving some of the biggest challenges in youth sports today.

• Lead a small, high-leverage team of senior and staff security engineers, setting technical direction and growing talent.
• Partner with product and executives to deliver AI-first security capabilities and represent security to customers.
• Turn compliance (ISO 27001, SOC 2) into continuous assurance, protecting customer trust.

Sysdig creates cloud security solutions, including the open standard Falco for threat detection, used by over 60% of the Fortune 500. Recognized as a Best Place to Work and one of Deloitte's fastest-growing companies for the past 5 years, they value diversity and open dialogue.

• Lead a specialized team of security engineers focused on application, cloud, and AI system security.
• Champion shift-left security practices including threat modeling, secure code review, and developer training.
• Define cloud security standards and enforce security for AI systems including LLM-based agents.

Acquia empowers ambitious brands to create digital customer experiences using open source Drupal. Headquartered in Boston, MA, it is a Great Place to Work-Certified company and among the world's top software companies.

• Partner with the CISO to drive security strategy, roadmap, and execution across application security, GRC, and operations.
• Support compliance initiatives including PCI, SOC 2, ISO 27001, DORA, and FedRAMP readiness.
• Serve as a trusted security leader in customer-facing settings, translating technical risks into business language.

Sardine is the leading agentic risk platform for fighting financial crime, integrating data across risk teams to stop fraud and automate AML operations. With over 6 billion profiled devices and 800 million consumers, we maintain a remote-first culture that values performance over hours worked.

• Design and implement security controls across Mable's platform, applications, and infrastructure
• Embed security into the software development lifecycle through design reviews, threat modeling, and code reviews
• Lead vulnerability assessments and coordinate remediation efforts across engineering teams

Mable is one of Australia's leading healthtech platforms connecting people with disability and older Australians with independent support workers. With over 25 million hours of support facilitated since 2014, they have been recognized on AFR's Top 100 and Deloitte Tech Fast 50, fostering a purpose-driven and dynamic team environment.

• Lead a team of security engineers securing cloud infrastructure, data platforms, and access controls.
• Partner with Infrastructure, Data Platform, and Application Security teams to embed security into development.
• Set technical direction, coach engineers, and drive the team's roadmap in alignment with security priorities.

Airbnb is a global hospitality platform connecting hosts and guests with unique stays and experiences. With over 5 million hosts and 2 billion guest arrivals, the company fosters a culture of inclusion and belonging.

• Champion a security-first mindset within Engineering to set the security posture of platform infrastructure.
• Design and build automation that makes compliance evidence continuous and translates HITRUST controls into tests.
• Embed security into the platform by default through guardrails, policy-as-code, and well-documented patterns.

Redox accelerates healthcare transformation with useful data via its interoperability platform. The fully remote US-based team operates with radical transparency and ownership.

• Own our approach to AI and agentic security: guardrails for agentic access to cloud and data, and the security of AI/ML workloads.
• Own our detection platform (Panther): detection strategy and coverage across cloud, container, and SaaS log sources.
• Act as the senior security resource across cloud security and security reviews, mentoring teammates.

SmarterDx is a clinical AI platform that helps health systems capture revenue and improve quality metrics using clinically-validated EHR data. The company is a remote-first team with a small, collaborative engineering culture focused on making healthcare more accurate and effective.

• Lead security strategy and develop scalable practices to protect systems, products, and customers.
• Partner with engineering teams to improve resilience, reduce risk, and embed security into development.
• Manage security incidents, evaluate emerging technologies, and build a high-performing security team.

The company is a fast-growing technology firm focused on innovation and engineering excellence. It operates with a distributed international team and emphasizes trust, autonomy, and ownership.

• Design and automate controls, detection mechanisms, and tooling to improve Information Security of Algolia's infrastructure and products.
• Partner with engineering and product teams to integrate Information Security into new features, systems, and development pipelines.
• Conduct Information Security risk assessments and threat models of core systems, services, and third-party vendors.

Algolia is a pioneer and market leader in AI Search, empowering 17,000+ businesses with blazing-fast, predictive search experiences. The company raised $150M in Series D funding, quadrupling its valuation to $2.25B, and has a global team with offices in Paris, NYC, London, Sydney, and Bucharest.

• Own security technical controls including SIEM, vulnerability management, cloud hardening, and secrets management.
• Manage security-critical IT operations including endpoint hardening and SaaS app security.
• Drive security program and compliance by automating evidence collection and implementing technical controls.

CollegeVine deploys powerful AI agents in complex, regulated industries, starting with higher education to automate administrative workflows. The company is a venture-backed, fully remote startup with a diverse team based primarily in the US and worldwide.

• Define and drive Morpho's security strategy across corporate, IT, cloud, application, supply chain, identity, incident response, threat intelligence, and counterparty security.
• Build and lead the security function by hiring and developing a team while staying hands-on with threat modeling, architecture review, and incident response.
• Represent Morpho's security posture externally to partners and institutions, and internally to leadership, partnering with engineering and integration teams.

Morpho is a leading Decentralized Finance (DeFi) lending protocol that raised funding from major investors to build an open credit network for borrowing and lending on-chain. With over $10 billion in deposits, Morpho is scaling its team to become the global open credit network, emphasizing a high-support, low-ego culture that navigates uncertainty in a nascent market.

• Define, build, and scale a world-class Security Operations function within a globally distributed technology environment.
• Lead incident response, threat detection, and security engineering practices across the organization.
• Collaborate with engineering and leadership teams to embed security best practices into development and operations workflows.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies globally. It is a small to medium-sized company with a distributed team, focusing on innovation and automation in recruitment.

• Lead the global cyber security strategy, governance, and operations to protect clients, systems, data, and brand reputation across all regions.
• Define and execute the Information Security Management System (ISMS) aligned to ISO 27001, SOC2, and TISAX, while managing enterprise risk and compliance.
• Serve as the senior authority on cyber risk, advising the CTO, Board, and customers, and act as executive incident commander for major cyber events.

JD Power is a proven leader in business-critical data and intelligence, powering auto-related decisions with proprietary data, advanced analytics, and deep industry expertise. The company is a global corporation with a diverse workforce and a culture focused on innovation, collaboration, and trust.