Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Operate and maintain application security scanning tools including SAST, SCA, secrets scanning, and container scanning throughout the SDLC.
Review and triage security findings, validate true positives, and collaborate with engineering teams to prioritize remediation activities.
Support onboarding of new repositories, maintain documentation, and assist with scripting and automation to improve security workflows.
This company is a partner organization with a collaborative security team focused on strengthening application security across a diverse portfolio of digital products and services. It fosters an inclusive, collaborative culture with employee communities and emphasizes learning and development.
Conduct security assessments using SAST, DAST, and SCA tools.
Perform code reviews and provide secure coding guidance to development teams.
Implement and maintain GitHub Advanced Security and CI/CD security integration.
Hims & Hers is a health and wellness platform providing personalized care to help people feel great. They are a public company with a talent-first flexible/remote work culture, committed to diversity, ethics, and belonging.
Automate security controls by integrating SAST, DAST, and SCA tools into CI/CD pipelines to catch vulnerabilities before production.
Define and drive a developer-friendly Secure SDLC, including threat modeling frameworks like STRIDE and security champions network.
Manage the private bug bounty program, triage reports, lower mean time to mitigation, and conduct code reviews for Java and Python microservices.
VGS is the world's leader in payment tokenization, providing the trust infrastructure for modern commerce and agentic payments. Trusted by Fortune 500 companies and innovative fintechs, VGS stores over 9 billion tokens and processes 10 billion monthly interactions, with a remote-first culture that values curiosity, ownership, collaboration, and continuous learning.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Embed security practices into the SDLC, implementing SAST, SCA, and secret scanning controls in CI/CD pipelines.
Harden AWS infrastructure and infrastructure-as-code, including IAM, Terraform, VPCs, and KMS.
Lead a Security Champions program, conduct threat modeling, and define security standards for APIs and critical features.
The company is a fast-growing technology organization focused on application and cloud security. It fosters a collaborative, remote-first culture with technical autonomy and a focus on developer empowerment.
Integrate and automate application security tools (SAST, DAST, SCA) into CI/CD pipelines.
Conduct threat modeling, secure code reviews, and manage the bug bounty program.
Build a Security Champions network and deliver secure coding training to empower developers.
They are a payment technology platform supporting modern commerce and financial innovation. They operate as a remote-first, globally distributed company with a strong focus on security, collaboration, and developer enablement.
Lead technical discovery and advise on solution design for application security.
Own proof-of-value engagements from defining success criteria through technical validation.
Partner with account executives on complex sales and travel up to 20% for customer meetings.
We are an application security SaaS company at Series C/D stage, helping organizations build effective application security programs. Our collaborative team supports mid-market sales cycles and values engineering depth in customer conversations.
Become an expert in the application security platform and integrate it into customer CI/CD pipelines, developer workflows, and security programs.
Lead technical discovery, diagnose customer issues, and advise on solution design.
Own proof-of-value cycles from success criteria through environment configuration and technical validation.
The company operates in the application security space, serving digital native and mid-market customers. The team size and specific culture are not mentioned in the posting.
Become an expert in the platform and guide customers through integrating it into CI/CD pipelines and developer workflows.
Lead technical discovery, diagnose customer issues, and advise on solution design.
Own proof-of-value cycles from success criteria and environment configuration through technical validation.
A developer-focused application security platform helping organizations embed security into their development workflows. The company supports mid-market sales and fosters a collaborative, technical culture.
Build and maintain CI/CD pipelines for platform releases
Embed automated security scanning and policy enforcement into every release
Apply Zero Trust principles and policy-as-code across the platform
Oddball believes that the best products are built when companies understand and value the things they are working on. They are a small company focused on bringing quality software to the federal space, valuing learning, growth, and making a big impact.
Investigate and remediate application security vulnerabilities directly in code, implementing fixes and submitting pull requests.
Deploy, configure, and optimize SAST and SCA tools across repositories and CI/CD pipelines, reducing false positives.
Triage and prioritize security findings while collaborating with engineering teams to embed secure coding practices.
Partner company is a technology firm delivering large-scale international projects with a focus on integrating application security into the software development lifecycle. They foster a collaborative, globally distributed engineering culture with an informal environment, open-door policy, and continuous learning opportunities.
Shape application security practices by integrating automated safeguards throughout the software development lifecycle.
Collaborate with Security and Engineering teams to identify vulnerabilities early and manage bug bounty programs.
Conduct threat modeling and secure code reviews for Java and Python microservices while fostering developer security ownership.
This partner company protects payment infrastructure and enables secure, scalable digital commerce. It operates as a remote-first, security-focused fintech organization with a fast-moving culture and globally distributed teams.
Design and implement software supply chain security controls across build and release pipelines.
Secure GitHub and GitLab environments, implement SBOM generation, and integrate vulnerability scanning into CI/CD.
Align security practices with SLSA, NIST SSDF, and NIST SP 800-218 while collaborating with security and engineering teams.
New Era Technology securely connects people, places, and information with end-to-end technology solutions at scale. With a global team of over 3,000 professionals, it fosters a team-oriented culture focused on personal and professional development.
Lead technical discovery and design solutions for customer CI/CD and security programs.
Own proof-of-value engagements from success criteria to configuration and outcomes.
Partner with account executives and communicate technical differentiation to stakeholders.
A cybersecurity company focused on application security, offering a platform that helps teams integrate security into developer workflows and CI/CD pipelines. The team is seeking a technical lead for pre-sales engagements, indicating an engineering-driven and customer-focused culture.
Lead the technical side of sales cycles, guiding customers through integration with CI/CD pipelines and application security programs.
Build deep product expertise, conduct technical discovery, and own proof-of-value projects for customers.
Partner with account executives on complex sales cycles and improve demonstrations, automation, and educational resources.
They are a Series D application security company supporting digital native and mid-market customers. The team is remote-first and collaborates closely with account executives on complex sales cycles.
Integrate cybersecurity through the SDLC, focusing on app sec, CI/CD security, and container security.
Conduct vulnerability assessments with DoD tools, DISA STIGs, SRGs, and implement secure OS configs.
Serve as GitLab security reviewer and support RMF artifacts and mitigation strategies.
Millennium is a cybersecurity company delivering Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering for national security missions. It is part of the Markon enterprise with an elite team of over 300 professionals.
Design and build CI/CD workflow integrations that bring application security into software delivery pipelines and developer environments.
Run discovery sessions and architecture workshops with enterprise customers to align the Snyk platform to their requirements.
Build trusted relationships with technical stakeholders and support implementations from pre-sales through post-sales.
Snyk builds a security platform where AI agents work alongside engineers to find and fix risk at the speed software is built. The company fosters an inclusive culture with global benefits and employee resource groups, aiming to make the digital world safer.
Lead application security protocols throughout the SDLC.
Partner with engineering teams to embed security into architecture and development.
Perform hands-on security testing of web apps, APIs, and cloud-native services.
K Health is an AI-powered virtual care engine that modernizes the primary care loop using clinical AI and virtual clinics. Founded in 2016 and headquartered in New York City, the company is backed by over $443.5M and aims to build diverse, collaborative teams.
Partner with engineering and product teams to review architecture, assess security risks, and drive secure-by-default practices.
Build and maintain security tooling, automate workflows, and strengthen application security across the SDLC.
Lead cross-functional security projects, promote security awareness, and support bug bounty and vulnerability research.
They are a remote-first security company that helps organizations identify and address vulnerabilities before they become serious threats. The team is collaborative and fast-paced, valuing initiative, continuous learning, and diverse perspectives.