Build secure-by-default infrastructure and automation to eliminate entire vulnerability classes across money-moving systems.
Own application security, threat modeling, and vulnerability disclosure from design review to production.
Partner with engineering to set security standards, make risk-based decisions, and ship fast without compromising safety.
Flex is building the AI-native private bank for business owners, re-architecting the entire financial system for entrepreneurs. Since launching in 2023, Flex has scaled to nine-figure annualized revenue, raised $100M+ in equity and $300M+ in debt, and operates with a high-bar, low-ego culture focused on speed and execution.
Be a technical contributor on a global software engineering team in Product Security, building robust and scalable systems.
Design and implement software and automation tools for security use cases like software supply chain security and AI-powered vulnerability discovery.
Own SRE excellence, CI/CD, and datastore operations for mission-critical security services, ensuring flawless performance.
CrowdStrike is a global leader in cybersecurity, protecting organizations with an AI-native platform to stop breaches. Founded in 2011, the company fosters a culture of flexibility, autonomy, and responsible AI adoption, with a large-scale distributed system processing trillions of events daily.
Apply practical security principles and AI-native workflows to deliver technical solutions to end users and internal teams.
Lead and deliver impactful enhancements for the Data Security team, enforcing security and privacy standards.
Design and implement customer data governance solutions that enable security and privacy by design.
Abnormal protects the humans behind the world's most critical organizations from AI-powered cybercrime. Over 4,500 enterprises trust their behavioral AI platform.
Threat model new product features and integrations, hardening systems with effective controls.
Operate and evolve the application security toolchain, keeping it high-signal for developers.
Own day-to-day security operations across the detection stack, triaging and resolving incidents.
Gauntlet builds the financial systems of the future, operating across the entire onchain finance stack to offer vault products for institutional clients. They serve over $1.5B in client TVL and combine traditional finance with crypto-native expertise.
United States
Unlimited PTO
16w maternity
16w paternity
Lead the technical direction for Security Product Engineering at DoorDash globally.
Set and execute the vision for Proactive Security, Bug Bounty, and Vulnerability Management teams.
Partner cross-functionally to build proactive security controls that enable secure by design practices.
DoorDash is a technology and logistics company that built a scalable delivery network for consumers, merchants, and Dashers. They are growing rapidly and committed to diversity and inclusion.
Get involved early in new products and features, using threat modeling and security design reviews to find problems before they reach production.
Dig into application architecture, APIs, authentication, authorization, data flows, cloud services, and third-party integrations to understand how systems could be attacked.
Own and improve security tooling across the development lifecycle, including SAST, DAST, dependency scanning, and secret scanning.
YipitData is a leading market research and analytics firm for the disruptive economy, raising $475M from The Carlyle Group at a valuation over $1B. They operate globally with offices in the US, APAC, and India, and have been recognized by Inc. as a Best Workplace for three consecutive years, emphasizing transparency, ownership, and continuous mastery.
Integrate security into the SDLC through automation, testing, and continuous improvement.
Identify, investigate, and remediate application and infrastructure vulnerabilities.
Develop tools and automation in Python, Go, or Terraform to improve security and developer productivity.
Corbalt is a technology company that partners with federal agencies to modernize and operate complex technology ecosystems, building shared platforms and reusable services. They are a remote-first team that values curiosity, kindness, ownership, and continuous learning, with roots in the Healthcare.gov recovery effort.
Build and deploy security tooling across endpoint management, supply-chain, infrastructure, and application layers.
Identify and remediate security gaps across production systems and development pipelines.
Lead incident response end-to-end and partner with engineering on secure design reviews.
Tempo is a layer-1 blockchain built for stablecoins and real-world payments, leveraging expertise from Stripe and Paradigm. We are a team of crypto-optimists moving fast to build infrastructure for onchain economic flows.
Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms.
Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation.
Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis.
Binance is a leading global blockchain ecosystem behind the world's largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million users in 100+ countries with a focus on security and innovation.
Embed security into the software development lifecycle through threat modeling, secure design reviews, and secure-coding guidance that engineers actually adopt.
Own application security testing (code review, SAST/DAST, and triage) and drive issues to remediation, not just filing them.
Harden the software supply chain, build and automate security tooling, and serve as the internal security SME on product and workflow decisions.
Cogent is an Applied AI Lab building the next generation of AI agents for cybersecurity, using AI to assess petabytes of enterprise data and remediate critical breaches. We're backed by Greylock, have experienced rapid growth, and our team includes top minds from Stanford, Deepmind, and leading tech companies.
Develop processes, tooling and automation to scale incident management response and mitigate risks.
Collaborate with security, engineering, product, support, and business operations to identify detection use cases.
Maintain security logging platform and stay updated on threats to improve detection mechanisms.
ClickHouse is a leading real-time analytics, data warehousing, observability, and AI workloads company with over 4,000 customers and rapid growth, validated by a $400M Series D funding round. The company values innovation and collaboration, offering a remote-friendly culture with a global team.
Help shape technical direction of security tooling and AppSec practices. - Lead secure design across major engineering projects, from threat modeling through architecture. - Perform advanced offensive security work, chaining vulnerabilities and proving business impact.
Super.com is a fast-paced, high-growth tech company that maximizes lives for customers and employees. It offers a remote-first culture, invests in career progression, and provides generous benefits including unlimited PTO and parental leave.
Design, build, and maintain highly reliable backend services and distributed systems for RapidFort's security platform.
Build systems for processing and analyzing large volumes of security, vulnerability, container, and runtime data.
Solve complex problems involving concurrency, performance, scalability, and distributed processing across Linux, Kubernetes, and cloud environments.
RapidFort is a cybersecurity company focused on securing and optimizing modern software supply chains and cloud-native environments. The company works with enterprise and U.S. public-sector customers in security-sensitive environments, fostering a culture of technical ownership and collaboration.
Proactively hunt for advanced threats and dissect complex fraud vectors using hypothesis-driven threat hunting operations.
Apply and enrich the FT3 taxonomy to standardize threat intelligence across kill chain phases and API endpoints.
Collaborate cross-functionally to integrate threat intelligence, build agentic simulation workflows, and eliminate product vulnerabilities.
Stripe is a financial infrastructure platform for businesses, enabling millions of companies to accept payments and grow revenue. They are a large, global company with a mission to increase the GDP of the internet and a culture of innovation and collaboration.
Own dispute automation features end-to-end, including deadline tracking, evidence collection, and response templates.
Extend dispute lifecycle coverage to new PSPs, building on existing patterns across the first five integrations.
Build components of the native rules engine: velocity rules, blocklists, and device fingerprinting.
Primer is the unified infrastructure for global payments, giving finance and payments teams visibility and control from a single platform. Backed by investors like Sofina, Peak XV, and Accel, Primer is a fully remote company with a culture of collaboration and mission-driven impact.
Lead threat modeling and secure design reviews across C++, Go, and Rust
Build and tune application security testing (SAST, SCA, secret scanning, DAST) and fuzzing harnesses
Operate PSIRT and build security champions program to raise the security bar
Redpanda is a unified platform for agent-data interaction, combining streaming, SQL analytics, and intelligent connectivity with governance for enterprise AI agents. It is a fast-moving, people-first organization with a small, high-trust security team and team members across the globe.
Embed security into every phase of the SDLC and champion secure design for Gen AI and agentic AI tools.
Perform secure code reviews, threat modeling, and establish secure API patterns across engineering teams.
Operate the application vulnerability management lifecycle and communicate risk to engineering and business leaders.
GameChanger builds a platform for youth sports, helping families elevate the next generation through community and technology. They are a remote-first, dynamic tech company based in New York City, solving major challenges in youth sports.
Perform hands-on coding and security implementation, incident response, and threat hunting.
Review and triage security submissions, bug bounty reports, and follow up on remediation.
Write and maintain security policies, communicate risks to non-technical teams, and monitor logs for anomalies.
Eneba is building an open, safe and sustainable marketplace for gamers. The company supports close to 20 million active users and fosters a culture of ownership, growth, and collaboration.
Act as the primary security partner for the Walrus team, providing architectural guidance and embedding security practices throughout the development lifecycle.
Lead security assessments for new features and contribute to ecosystem-wide security initiatives, identifying systemic risks and actionable remediation plans.
Drive a security-by-design culture, leveraging AI and automation to focus on high-impact, complex security research and mentor engineers.
Mysten Labs builds foundational infrastructure to accelerate the adoption of decentralized protocols based on blockchain technologies. They are a well-funded, remote-first team with over $300M in Series B funding from top venture firms, fostering a culture of innovation and growth.
Adversarially test our AI and LLM-backed features.
Build and operate production security services.
Threat model from product designs.
GoodLeap is a technology company that provides financing and software products for sustainable solutions like solar panels and energy-efficient HVAC. With over $30 billion in financing since 2018, the company supports a collaborative culture and backs the nonprofit GivePower.