Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
Partner with DevOps on paved roads for secure-by-default development and lead incident response.
Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.
Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.
Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
Own SOC 2, HIPAA, AI security governance, and incident response.
AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.
Partner with engineering to identify and mitigate security risks before launch, building secure frameworks and libraries that make control adoption easy.
Own identity and secrets management, including credential issuance, rotation, and workload authentication across cloud and Kubernetes environments.
Harden cloud security controls and build security models for AI agents with permission boundaries and tenant isolation.
Fieldguide builds software that automates assurance and audit work for cybersecurity, privacy, and financial audits, helping businesses enable trust. They are a remote-first company backed by top investors and trusted by over 50 of the top 100 accounting and consulting firms, with a values-driven culture.
Lead and grow a team of security engineers focused on protecting cloud-native environments and CI/CD pipelines.
Drive technical strategy, threat modeling, and security automation across multi-cloud infrastructure.
Partner with engineering and DevOps teams to embed secure-by-design principles and manage vulnerability and supply chain security.
Wiz is a cybersecurity company that provides a cloud security platform connecting code, cloud, and runtime to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and now powered by Google, with a culture that values world-class talent.
Protect cloud infrastructure, applications, and customer data across a modern technology environment.
Identify and remediate vulnerabilities directly in application repositories and infrastructure code.
Build and tune SIEM detections, strengthen AWS security controls, and lead incident response.
Cloudbeds is a hospitality technology company providing cloud-based management solutions for lodging businesses. It operates as a remote-first organization with a globally distributed team across 40+ countries and a small, senior security team.
Partner with Fortune 500 customers to address security concerns and accelerate platform adoption.
Develop security reference architectures and perform threat modeling for ServiceNow products and AI services.
Lead security deep dives covering cloud-native architectures, identity, encryption, and AI security controls.
ServiceNow is an AI platform that helps enterprises automate workflows and reinvent business processes. The company serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent work together.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.
Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.
Lead security incident response end-to-end across cloud, identity, and workload logs.
Build and tune SIEM detections in Datadog across AWS, Kubernetes, and Google Workspace.
Automate detection and response tasks using Python and Terraform, and mentor engineers.
Loadsmart is a logistics technology company reinventing freight by helping shippers, brokers, warehouses, and carriers move more with less. It is a growth-stage tech unicorn valued at over $1 billion, with a globally distributed remote team.
Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.
Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Fix vulnerabilities across the stack by writing pull requests in application repositories and Terraform.
Build and tune SIEM detections, mapping coverage to MITRE ATT&CK and reducing false positives.
Lead incident response, harden AWS estate, and automate security workflows with code.
Cloudbeds is a hospitality management platform powering hotels across 150 countries, processing billions in bookings annually. The company is a remote-first team of 650+ across 40+ countries, recognized for innovation and an inclusive culture.
Set product security direction across major products and platforms, leading cross-functional initiatives.
Embed security by design into roadmaps and engineering work, with high autonomy.
Drive security assurance programs and mentor engineers across the organization.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.
Own security solutioning for k0rdent AI across the full stack, from hardware to AI models.
Publish reference architectures and proofs of concept with customers and partners.
Research emerging threats and present to engineers, executives, and conference audiences.
Mirantis, an IREN company, is the Kubernetes-native AI infrastructure company enabling organizations to build scalable, secure infrastructure for AI and data-intensive applications. It is a distributed, world-class team committed to openness and technical excellence.
Own application and product security, including threat modeling, secure code review, and access-control and secrets-exposure flaws.
Design and implement security architecture for an agentic AI software development lifecycle with out-of-band controls.
Secure AWS environment, manage non-human identities, and enforce security tooling across GitHub and SaaS estate.
Oshi Health is a fully remote, cloud-native healthcare platform dedicated to helping people manage chronic GI conditions. It is a growing company with a small cross-functional team, emphasizing a remote-first culture and equity-based compensation.
Serve as deputy to the CISO, representing security to executives, customers, and regulators.
Lead and grow managers and senior engineers across Security Engineering and Security Operations.
Own the security roadmap, including cloud security, detection and response, identity, and platform security.
Abnormal Security uses behavioral AI to protect organizations from sophisticated email and collaboration attacks. Trusted by 5,000 enterprises, the company values security engineering, partnership, and a paved-path approach to reducing risk.
Build and improve vulnerability management tooling and workflows across applications, dependencies, containers, and infrastructure.
Integrate security checks and policy controls into CI/CD and developer workflows.
Partner with engineers to design secure-by-default patterns and translate security risks into remediation plans.
ITHAKA is a nonprofit that expands access to knowledge and education through services like JSTOR, Portico, and Ithaka S+R. It values belonging, evidence, speed, teamwork, and trust, with staff across the United States.