Investigate and remediate application security vulnerabilities directly in code, implementing fixes and submitting pull requests.
Deploy, configure, and optimize SAST and SCA tools across repositories and CI/CD pipelines, reducing false positives.
Triage and prioritize security findings while collaborating with engineering teams to embed secure coding practices.
Partner company is a technology firm delivering large-scale international projects with a focus on integrating application security into the software development lifecycle. They foster a collaborative, globally distributed engineering culture with an informal environment, open-door policy, and continuous learning opportunities.
Design and ship code security analyzers blending deterministic detection with AI-driven analysis for vulnerabilities in code and dependencies.
Own initiatives end-to-end as the directly responsible individual, from design to delivery, while mentoring intermediate engineers through review.
Extend dependency parsing, SBOM handling, and automated remediation across GitLab's security analysis platform.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to improve developer productivity and accelerate digital transformation. Trusted by over 50 million users and more than half of the Fortune 100, it fosters a high-performance culture driven by values, AI adoption, and continuous knowledge exchange.
Conduct hands-on application security reviews threat modeling and code audits across the entire stack (backend frontend APIs infrastructure).
Build and improve security automation for vulnerability management including SAST DAST container scanning and secrets detection.
Drive remediation of findings from bug bounty scanners and audits partnering with engineering teams to prioritize and fix.
Close builds a communication-first AI-powered CRM that helps sales teams sell more and faster. With a 120-person 100% remote team they are bootstrapped profitable and focused on eliminating manual data entry for scaling businesses.
Design, develop, and maintain end-to-end solutions using primarily Ruby on Rails for the ISPM platform.
Collaborate with security researchers to understand hacking strategies and build scalable solutions to emerging threats.
Be a technical thought leader, providing architectural and design direction while mentoring junior engineers.
Huntress is a remote-first cybersecurity company founded by former NSA operators, making enterprise-grade security accessible to businesses of all sizes. They secure over 6 million endpoints and 16 million identities worldwide, with a culture of standing with customers and each other.
Identify security vulnerabilities and modernization opportunities in legacy web applications.
Remediate security findings and migrate legacy systems to .NET 8+ on AWS.
Develop, test, and maintain secure web applications and services using C#, VB.NET, and VB6.
Blue Coding specializes in hiring excellent developers from Latin America for clients in the US and Canada. Their fully remote team of over 150 engineers, PMs, QA, and designers works across more than 10 countries in the Americas.
Write and ship production code to support the most complex customers on the platform.
Own the technical side of onboarding for strategic accounts, from first scoping call to go-live.
Partner with Sales and Product to turn customer feedback into priorities and help close large deals.
Jeeves is a stablecoin-native banking platform for global enterprises, offering corporate cards, payments, treasury and spend management. With $400M+ raised and customers in 35 countries, it is fast-paced and built for relentless problem-solvers.
Manage the full vulnerability lifecycle: scan, triage, remediate, and verify across code, containers, and IaC.
Administer SAST, DAST, SCA, and secret scanning tools in CI/CD and investigate alerts.
Monitor logs, SIEM/Wazuh rules, and Cloudflare/WAF configurations for operational security.
Boosta is a holding tech company that creates, develops, and invests in digital businesses with global potential. We collaborate with over 800 specialists worldwide, and TechCore, our service team, includes 50+ professionals handling 300+ projects a year.
Automate security controls by integrating SAST, DAST, and SCA tools into CI/CD pipelines to catch vulnerabilities before production.
Define and drive a developer-friendly Secure SDLC, including threat modeling frameworks like STRIDE and security champions network.
Manage the private bug bounty program, triage reports, lower mean time to mitigation, and conduct code reviews for Java and Python microservices.
VGS is the world's leader in payment tokenization, providing the trust infrastructure for modern commerce and agentic payments. Trusted by Fortune 500 companies and innovative fintechs, VGS stores over 9 billion tokens and processes 10 billion monthly interactions, with a remote-first culture that values curiosity, ownership, collaboration, and continuous learning.
Design and build CI/CD workflow integrations that bring application security into software delivery pipelines and developer environments.
Run discovery sessions and architecture workshops with enterprise customers to align the Snyk platform to their requirements.
Build trusted relationships with technical stakeholders and support implementations from pre-sales through post-sales.
Snyk builds a security platform where AI agents work alongside engineers to find and fix risk at the speed software is built. The company fosters an inclusive culture with global benefits and employee resource groups, aiming to make the digital world safer.
Operate and maintain application security scanning tools including SAST, SCA, secrets scanning, and container scanning throughout the SDLC.
Review and triage security findings, validate true positives, and collaborate with engineering teams to prioritize remediation activities.
Support onboarding of new repositories, maintain documentation, and assist with scripting and automation to improve security workflows.
This company is a partner organization with a collaborative security team focused on strengthening application security across a diverse portfolio of digital products and services. It fosters an inclusive, collaborative culture with employee communities and emphasizes learning and development.
Take end-to-end ownership of security across a platform serving 50 million users, spanning application security, GRC, and AI security.
Collaborate closely with engineering leadership and development teams to identify vulnerabilities, strengthen controls, and drive remediation.
Protect AI-powered systems against evolving threats like prompt injection, jailbreaks, and third-party provider vulnerabilities.
They are a rapidly growing AI-powered technology platform serving over 50 million users worldwide. As a scale-up with more than 50 employees, they foster a high-autonomy, execution-focused culture with direct access to leadership.
Partner closely with engineering to refine architecture and drive security investment while prioritizing velocity.
Build secure 'paved roads' and tooling to eradicate entire vulnerability classes, not just fix bugs one by one.
Own cross-functional product security projects end to end, and amplify impact through automation and feedback loops.
Bugcrowd is a preemptive security platform that unifies exposure discovery and assessment, offensive testing, and AI-driven intelligence to help organizations avoid real-world risk. Founded in 2012 and based in San Francisco, Bugcrowd is a VC-backed company with a diverse, inclusive culture where people feel like family.
Own and run bug bounty programs and external audit engagements, triaging and validating fixes.
Secure code and software supply chain, including CI/CD defenses, dependency controls, and signing.
Build anti-scam, anti-abuse, and security tooling with static/dynamic analysis and LLM-driven agents.
Mysten Labs builds foundational blockchain infrastructure and products, including Sui and Move, to advance the internet and enable the agent economy. It is a remote-first, world-class team backed by a $300M Series B from leading venture funds.
Partner with engineering and product teams to review architecture, assess security risks, and drive secure-by-default practices.
Build and maintain security tooling, automate workflows, and strengthen application security across the SDLC.
Lead cross-functional security projects, promote security awareness, and support bug bounty and vulnerability research.
They are a remote-first security company that helps organizations identify and address vulnerabilities before they become serious threats. The team is collaborative and fast-paced, valuing initiative, continuous learning, and diverse perspectives.
Lead and mature Affirm's Security Third Party Program, designing and implementing scalable processes and controls.
Own pre-launch security due diligence for third parties supporting international expansion and M&A.
Drive automation with Python and agentic coding tools to replace manual GRC work with code-defined workflows.
Affirm provides clear, predictable buy now, pay later financial products with no hidden fees. It is a remote-first company that values security, transparency, and care, offering flexible benefits and an inclusive culture.
Own the configuration, tuning, and management of our SIEM solution to diagnose unusual threats.
Perform architecture reviews, code reviews, and penetration testing on web and mobile apps.
Build and maintain vulnerability management CI/CD pipeline and collaborate with engineering teams.
Engine is the AI-native platform for intelligent travel, serving over 38,000 customers and nearly 2 million travelers. Recognized as one of Fast Company's Best Workplaces for Innovators (2025) and Built In's Best Places to Work (2020–2026), we have a culture of exponential growth and high-caliber colleagues.
Process security requests, access management, and vulnerability assessments.
Identify and help mitigate security issues, misconfigurations, and vulnerabilities.
Support identity and access management and assist with incident response.
Quadcode is a fintech company delivering advanced financial products, including a trading platform offered as SaaS to other brokers. We're a global team of 500+ creative and tech-driven people with a positive and friendly atmosphere.
Own and ship backend features from requirements to production using Ruby/Rails, Go, or other modern languages.
Collaborate with Product Management, Frontend, Infrastructure, and Security in an asynchronous, remote environment.
Write maintainable, secure, and observable code while leveraging AI to accelerate daily engineering work.
GitLab is an intelligent orchestration platform for DevSecOps, helping organizations ship better, more secure software faster. Trusted by more than 50 million users and 50% of the Fortune 100, it fosters a remote-first, high-performance culture built on values and AI-driven collaboration.
Develop secure, well-tested features using Ruby on Rails and GraphQL to improve GitLab's source code experience.
Design and maintain backend services and APIs while supporting production reliability through performance tuning and observability.
Collaborate with cross-functional teams and use AI agents to speed delivery while critically reviewing their output.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to improve developer productivity and security. Trusted by over 50 million users and most of the Fortune 100, it fosters a high-performance culture built on shared values, AI adoption, and continuous knowledge exchange.