Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
Implement automated vulnerability scanning for Docker images and dependencies.
Secure Kubernetes workloads and enforce security policies throughout the CI/CD lifecycle.
Gcore is a global provider of infrastructure and software solutions for AI, cloud, network, and security. With 550+ professionals and 210+ edge locations, we build the foundation that connects the world to AI.
Design, build, and ship secure container technologies from design through production.
Develop image pipelines, registry infrastructure, and developer tooling for security and performance.
Collaborate with product, customers, and engineers while integrating AI-assisted development.
Chainguard develops secure container technologies and open-source tools to help organizations build and deploy software safely. It is a remote-first, fast-growing company with a small autonomous engineering team that values ownership, transparency, and continuous improvement.
Own the technical direction for NodeZero container image build, signing, scanning, and OTA delivery.
Design and operate CI/CD pipelines, image hardening, and release engineering standards at scale.
Mentor engineers and drive architecture decisions across team boundaries for secure product delivery.
Horizon3 is a fast-growing, remote cybersecurity company that helps organizations proactively find, fix, and verify exploitable attack vectors. The team is a fusion of former special operations cyber operators and engineers, focused on respect, collaboration, and results.
Set product security direction across major products and platforms, leading cross-functional initiatives.
Embed security by design into roadmaps and engineering work, with high autonomy.
Drive security assurance programs and mentor engineers across the organization.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Design and maintain CI/CD pipelines for automated build, test, security scanning, and deployment.
Provision and manage cloud infrastructure across development, test, and production environments.
Deploy and support containerized applications using Docker and Kubernetes, including monitoring, troubleshooting, and incident response.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed. Headquartered in Tysons, Virginia, it serves the defense, space, healthcare, and energy sectors with a collaborative, agile culture.
Design, develop, and optimize automated CI/CD pipelines for enterprise applications, microservices, and infrastructure workflows.
Integrate DevSecOps practices including automated security testing, compliance controls, and vulnerability remediation.
Collaborate with cloud, development, and security teams to support containerized workloads on AWS and Kubernetes.
They are a mission-driven technology partner focused on modernizing critical government systems and strengthening secure, reliable digital services. They hire through Jobgether and work with multidisciplinary teams across software engineering, cloud infrastructure, cybersecurity, and operations.
Design, implement, and maintain scalable, secure, and highly available cloud infrastructure.
Develop and optimize containerized applications using Docker and Kubernetes.
Collaborate with development teams to create seamless CI/CD pipelines using GitHub Actions or equivalent tools.
HiddenLayer protects the world's most valuable technologies from adversarial AI attacks with a patent-pending productized solution. As a rapidly growing Series-B startup, the company is fully remote and offers best-in-class benefits, committed to diversity and innovation.
Manage the full vulnerability lifecycle: scan, triage, remediate, and verify across code, containers, and IaC.
Administer SAST, DAST, SCA, and secret scanning tools in CI/CD and investigate alerts.
Monitor logs, SIEM/Wazuh rules, and Cloudflare/WAF configurations for operational security.
Boosta is a holding tech company that creates, develops, and invests in digital businesses with global potential. We collaborate with over 800 specialists worldwide, and TechCore, our service team, includes 50+ professionals handling 300+ projects a year.
Conduct hands-on penetration testing and security assessments for Kubernetes and cloud-native products.
Own vulnerability management from discovery through patch development, release, and verification.
Guide secure engineering practices and threat modeling across the product lifecycle.
They build next-generation Kubernetes and AI infrastructure for organizations operating at scale. The company is fast-growing, open-source-oriented, and values ownership, technical excellence, and measurable impact.
Build and maintain secure, scalable infrastructure across cloud and on-premises environments.
Manage Kubernetes, Docker, and infrastructure automation using Terraform, Pulumi, and CI/CD.
Implement observability and security practices, and lead technical delivery for federal programs.
Our partner builds and maintains secure infrastructure for federal, government, and national security technology programs, including mission-critical AI applications. They are a collaborative organization offering remote work and professional growth, with a focus on reliability, security, and cutting-edge technology.
Work on client consulting projects to design and implement cloud native security architectures across AWS, GCP, and Azure.
Contribute to internal labs and open source projects, with a focus on threat modelling, supply chain security, and DevSecOps practices.
Collaborate with a team of SANS authors and engineers to deliver pragmatic security solutions for highly regulated industries.
ControlPlane is a London-based consultancy specialising in cloud-native, Kubernetes, and open source solutions, helping organisations secure complex cloud infrastructures with secure-by-design principles. As a successful start-up, we are a dynamic, cutting-edge, and passionate team that values employee wellbeing, progression, and open source community engagement.
Build and improve vulnerability management tooling and workflows across applications, dependencies, containers, and infrastructure.
Integrate security checks and policy controls into CI/CD and developer workflows.
Partner with engineers to design secure-by-default patterns and translate security risks into remediation plans.
ITHAKA is a nonprofit that expands access to knowledge and education through services like JSTOR, Portico, and Ithaka S+R. It values belonging, evidence, speed, teamwork, and trust, with staff across the United States.
Design and implement software supply chain security controls across build and release pipelines.
Secure GitHub and GitLab environments, implement SBOM generation, and integrate vulnerability scanning into CI/CD.
Align security practices with SLSA, NIST SSDF, and NIST SP 800-218 while collaborating with security and engineering teams.
New Era Technology securely connects people, places, and information with end-to-end technology solutions at scale. With a global team of over 3,000 professionals, it fosters a team-oriented culture focused on personal and professional development.
Design and build Kubernetes tooling and APIs for orchestrating virtual machine workloads.
Develop tooling to inspect, convert, and package VM images for secure, air-gapped environments.
Collaborate with Product, UX, and Mission Heroes to turn operational needs into reliable product capabilities.
Defense Unicorns delivers secure software delivery solutions for mission-focused customers, streamlining deployment so they can focus on critical challenges. The team is composed of innovators, software engineers, and veterans with decades of experience across the federal market.
Monitor production and SaaS environments, respond to alerts, and proactively investigate potential issues.
Execute deployments and CI/CD workflows, troubleshoot failed workloads, and perform remediation procedures.
Own operational requests, participate in incident response, and improve automation, monitoring, and documentation.
RapidFort helps organisations secure their software supply chains, reduce software vulnerabilities, and minimise the attack surface of containerised applications. They are a cybersecurity company focused on container security and operate with a globally distributed team.
Integrate cybersecurity through the SDLC, focusing on app sec, CI/CD security, and container security.
Conduct vulnerability assessments with DoD tools, DISA STIGs, SRGs, and implement secure OS configs.
Serve as GitLab security reviewer and support RMF artifacts and mitigation strategies.
Millennium is a cybersecurity company delivering Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering for national security missions. It is part of the Markon enterprise with an elite team of over 300 professionals.
Develop and maintain automated CI/CD pipelines and Infrastructure as Code templates for secure software delivery.
Work with Docker, Kubernetes, and AWS to standardize deployments and improve platform reliability.
Collaborate with development, security, and infrastructure teams to embed DevSecOps practices and troubleshoot issues.
The partner company is a technology-driven organization focused on cloud infrastructure, platform engineering, and secure software delivery. It promotes a collaborative culture and operates with a fully remote workforce.
Architect and deliver major features for Chainguard Containers from concept to production.
Stay hands-on writing code and lead small sub-teams of engineers.
Work across teams and with AI agents to build secure container infrastructure.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. It is a venture-backed company with Fortune 500 customers and a remote-first culture.
Design and build paved paths for privileged access and secrets management on top of access management and secret storage platforms.
Build self-service tooling, SDKs, and Terraform modules to enable just-in-time access and short-lived credentials.
Partner with engineering teams to integrate security services into Kubernetes, CI/CD, and cloud environments across DoorDash, Wolt, and Deliveroo.
DoorDash is a technology and logistics company that operates a multi-sided marketplace connecting consumers, merchants, and dashers. They are building a large, inclusive team focused on empowering local economies.