Source Job

• Plan and execute red team operations and adversary simulations focused on cloud environments.
• Evaluate security of cloud infrastructure, identity architectures, CI/CD pipelines, and containerized workloads.
• Assess detection and response coverage with blue team and detection engineering.

Motive empowers people who run physical operations with tools to make their work safer, more productive, and more profitable. We serve nearly 100,000 customers, from Fortune 500 enterprises to small businesses, and value diversity and inclusion.

• Plan and execute realistic adversary simulations using threat intelligence to assess security and detection capabilities.
• Hunt for vulnerabilities across AI systems, payment infrastructure, autonomous delivery hardware, and emerging technologies.
• Build custom tools, exploits, and payloads tailored to DoorDash's tech stack and partner with Blue Teams.

DoorDash is a technology and logistics company that empowers local economies by enabling door-to-door delivery for consumers, merchants, and Dashers. The company is growing rapidly and constantly changing, with a culture focused on empathy, diversity, and employee well-being.

• Lead advanced security assessments across web applications, APIs, cloud platforms, and enterprise networks.
• Conduct red team activities, vulnerability research, and custom tool development to simulate real-world attacks.
• Collaborate with cross-functional teams to assess risks, support remediation, and mentor colleagues.

Hitachi Vantara provides data infrastructure for global innovators across industries. As a diverse, global team, they foster an inclusive culture focused on making a real-world impact with data.

• Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
• Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
• Partner with security engineering to turn findings into actionable defense improvements.

Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.

• Conduct manual pentests on core systems and AI agents, building automation to expand coverage.
• Define how we pentest AI, including LLM applications and agent-generated code.
• Triage SAST findings, review code across web/APIs/AWS, and communicate risk to engineers.

We are a financial technology company based in Boston, unlocking capital for small businesses across America with fast, flexible funding. Our remote-first team, recognized as a Best Place to Work, has provided over $4.8 billion to more than 92,000 small businesses since 2012.

• Run full kill chains against web, mobile, API, and thick/thin clients, proving exploitability and mapping blast radius.
• Train the swarm by translating your tradecraft into reasoning and evaluation data for autonomous AI attackers.
• Pressure-test the swarm, build tools, and tell the attack story to engineers and executives.

Armadin builds autonomous proactive security, deploying AI agents that discover and remediate threats before breaches. We're a scrappy, high-ownership team of elite researchers and engineers, led by Kevin Mandia, with startup-level autonomy.

• Lead red team assessments and adversary emulation for space and mission systems.
• Develop attack plans, test cases, and Rules of Engagement with safety boundaries.
• Assess Linux, embedded, cloud, and network systems for exploitable weaknesses.

SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. The company combines innovation and deep technical expertise to uncover vulnerabilities and strengthen operational resilience.

• Break AI and agentic systems and turn research into automated, repeatable attacks for NodeZero.
• Design and execute prompt injection, defense evasion, and tool-use exploitation against AI infrastructure.
• Build and extend LLM-powered applications and microservices, focusing on production safety and reliability.

Horizon3 is a cybersecurity company whose NodeZero platform delivers autonomous pentests to find exploitable attack vectors. It’s a fast-growing, fully remote team of engineers and former special ops operators with a culture of respect and ownership.

• Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, and cloud environments.
• Turn vulnerability research and attacker tradecraft into safe, repeatable automated attack capabilities.
• Validate remediation and collaborate with research, product, and engineering teams.

Horizon3 is a fast-growing remote cybersecurity company that helps organizations proactively find, fix, and verify exploitable attack vectors. Its NodeZero platform delivers autonomous pentests, and the team is a collaborative culture committed to respect, ownership, and results.

• Perform web, mobile application, and internal penetration tests, source code reviews, and threat analysis.
• Support blue teams, research new attack vectors, and stay current with cybersecurity news and trends.
• Train QA and Development teams in standard security testing techniques and secure software development.

Insider One is a platform that unifies marketing and customer engagement tools, powered by AI and an integrated Customer Data Platform. The company is a woman-founded, women-led B2B SaaS unicorn with 1,500+ team members from 50+ nationalities across 30+ offices.

• Design and build production-grade Python reconnaissance workflows to discover and enumerate external-facing assets at scale.
• Research and parse messy external data sources to turn unstructured information into actionable attack intelligence.
• Automate multi-step attack paths from initial access to post-exploitation, and mentor engineers to raise the bar.

Horizon3 is a fast-growing, remote cybersecurity company that builds NodeZero, an autonomous pentesting platform. The team is a fusion of former special operations cyber operators and startup engineers, committed to a culture of respect, collaboration, and results.

• Lead Apollo's multi-year AppSec strategy and shape cross-team roadmaps.
• Set secure design, code review, and AI security standards across engineering.
• Mentor security champions and build automation that scales secure practices.

Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies. Founded in 2015, it has raised ~$250M and is valued at $1.6B, with a culture focused on AI-native innovation and continuous improvement.

• Deliver accurate security assessments of software, code, and firmware, evaluating resilience against AI-driven attacks.
• Build and pressure-test novel AI-enabled security tooling and workflows, then drive adoption across the security org.
• Partner cross-functionally to define and drive Samsara's medium- and long-term AI security strategy.

Samsara provides a Connected Operations Cloud platform that helps organizations improve safety, efficiency, and sustainability of physical operations. As a publicly traded company, they foster a culture of rapid career development and hyper growth, with a high-caliber team.

• Conduct original offensive research against Dia, including prompt injection, sandbox escape, and cross-profile data access.
• Threat model new surfaces with engineering teams and review features before they ship.
• Build automated vulnerability discovery systems, including fuzzing and AI-assisted hunting pipelines.

The Browser Company is building a better way to use the internet, with a focus on an AI-powered browser called Dia. They are a remote-first team of nearly 100 people who value diversity and craft.

• Investigate and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information.
• Translate technical findings into clear attack paths, business impact, and actionable remediation, and drive durable fixes through verified closure.
• Build and operate security tools and integrations using code, APIs, automation, and AI agents, and design controls for agent access and execution.

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. They value diverse perspectives and are an equal opportunity employer.

• Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
• Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
• Partner with DevOps on paved roads for secure-by-default development and lead incident response.

Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.