Build and improve vulnerability management tooling and workflows across applications, dependencies, containers, and infrastructure.
Integrate security checks and policy controls into CI/CD and developer workflows.
Partner with engineers to design secure-by-default patterns and translate security risks into remediation plans.
ITHAKA is a nonprofit that expands access to knowledge and education through services like JSTOR, Portico, and Ithaka S+R. It values belonging, evidence, speed, teamwork, and trust, with staff across the United States.
Lead, coach, and develop a team of Security Consultants through regular feedback and performance management.
Drive operational excellence by measuring team performance, identifying automation opportunities, and implementing process improvements.
Act as a subject matter expert in web, network, cloud, or mobile security and handle complex escalations and appeals.
Bugcrowd is a preemptive security platform that unifies exposure discovery, offensive testing, and AI-driven intelligence to help organizations identify and validate real-world risk. Based in San Francisco and New Hampshire and supported by top venture capital firms, the company fosters a diverse, family-like culture with a broad range of backgrounds including musicians, adventurers, and parents.
Lead as the SME for security tools including CASB, vulnerability scanning suite, and EPP, improving tool functionality.
Lead the vulnerability management program, working with the patching team to minimize the attack surface.
Provide security engineering expertise on projects, implement standards, and research advanced security technologies.
First Quality is a family-owned group of companies that produces high-quality personal care and household products for large retailers and healthcare organizations. It employs over 5,000 team members across 8 manufacturing campuses in the U.S. and Canada, maintaining a collaborative culture rooted in humility, unity, and integrity.
Manage vulnerability scanning and monitoring across GCP and applications.
Lead remediation efforts and partner with engineering on larger fixes.
Maintain security logging, monitoring, and incident response readiness.
Blueberry turns every family's living room into a personal pediatric urgent care using home exam kits, concierge access, and AI-enabled pediatricians. They are a mission-driven company focused on improving healthcare access for children.
Own and scale the vulnerability management program, including triage, prioritization, and remediation.
Embed security into the SDLC by integrating automated gates, threat modeling, and design reviews.
Drive cross-team security initiatives and mentor engineers to improve overall posture.
Figure is a blockchain-native capital marketplace for the origination, funding, and trading of tokenized assets. It has over 480 partners, has originated $30 billion in loans, and is recognized as a top fintech company.
Implement and improve security controls across corporate infrastructure and AI solutions.
Develop SIEM/XDR monitoring, vulnerability management, and secure CI/CD baselines.
Validate security weaknesses and automate tasks with Python, PowerShell, and AI tools.
Toogeza is a Ukrainian recruiting company that hires talent and builds teams for tech startups worldwide. The culture values practical engineering skills, independent problem-solving, and translating governance requirements into technical implementation.
Set product security direction across major products and platforms, leading cross-functional initiatives.
Embed security by design into roadmaps and engineering work, with high autonomy.
Drive security assurance programs and mentor engineers across the organization.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.
Own the administration and optimization of security tools like S1, Tanium, Active Directory, Okta, and M365, and fine-tune alerts and automation.
Investigate threats, drive remediation across IT and business teams, and lead incident response from first alert to resolution.
Mentor security analysts, conduct quarterly tabletop exercises, and collaborate with stakeholders to strengthen overall security posture.
Lakeshore creates innovative learning materials and world-class guest experiences for teachers, parents and children. Since 1954, the company has grown into a global community with a thriving e-commerce business, over 50 stores, and a diverse team of inquisitive top talent.
Operate recurring vulnerability and compliance reporting, advise on remediation, and track issues to closure.
Monitor cloud security posture, triage misconfigurations, and support endpoint security compliance.
Build dashboards, automate tasks, and support vendor risk management and data loss prevention.
Harvard Medical School is dedicated to alleviating suffering and improving health through excellence in teaching, learning, discovery, and service, working alongside world-renowned faculty. The Information Technology Department enables this mission by delivering secure and scalable services, fostering a diverse and inclusive community.
Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.
Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.
Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.
Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.
Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.
Manage the full vulnerability lifecycle: scan, triage, remediate, and verify across code, containers, and IaC.
Administer SAST, DAST, SCA, and secret scanning tools in CI/CD and investigate alerts.
Monitor logs, SIEM/Wazuh rules, and Cloudflare/WAF configurations for operational security.
Boosta is a holding tech company that creates, develops, and invests in digital businesses with global potential. We collaborate with over 800 specialists worldwide, and TechCore, our service team, includes 50+ professionals handling 300+ projects a year.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.
symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.
Serve as a key technical leader in protecting a cloud-based fraud prevention platform across AWS, Kubernetes, and Terraform.
Lead security automation, compliance, and certification initiatives including ISO 27001, SOC 2, and PCI DSS.
Strengthen identity management, threat detection, and incident response capabilities in a fast-paced environment.
The company builds a real-time, cloud-based fraud prevention platform for highly regulated industries. It is a fast-growing international technology environment with a collaborative engineering culture.
Lead vulnerability management across enterprise infrastructure, applications, and cloud environments.
Manage POA&Ms and support Authorization to Operate (ATO) processes.
Develop dashboards, metrics, and reports for senior leadership.
Peraton is a next-generation national security company that provides mission capability integration and transformative IT solutions to protect the nation and allies. It serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces, with employees solving daunting challenges for customers.
Own and strengthen security across the product stack, partnering with engineering throughout development.
Build security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
Lead security reviews, threat modeling, and drive security compliance programs and incident response.
Early-stage B2B identity and access management company focused on building secure product systems. Small, collaborative team seeking its first dedicated security engineer to help grow the security function.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.