Lead and scale security at BioRender, setting the vision for AI-powered product security.
Partner with engineering to evolve secure development practices and maintain SOC 2 and ISO 27001.
Own customer-facing security narrative and build a company-wide security culture.
BioRender is a science communication platform helping researchers create and share scientific figures. It is a remote-first, Y Combinator-backed SaaS company with a collaborative culture and millions of users worldwide.
Own the security program end-to-end, covering CorpSec, SecOps, compliance, and tooling.
Drive SOC 2 audits, manage identity and access, and build detection and observability with Datadog and SentinelOne.
Operate as a hands-on zero-to-one operator on a small team with high autonomy and real ownership.
Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors, Kodex supports over 15,000 government agencies in 190 countries and operates as a fast-growing Series A company with a small, high-autonomy team.
Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.
n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.
Own and drive the SOC 2 compliance program, including annual audits and certification.
Manage the risk register, vendor risk, BCP/DR, and policy lifecycles.
Lead customer security reviews and respond to complex security questionnaires.
Bluesight creates groundbreaking solutions that increase efficiency, safety, and visibility for health systems, hospital pharmacies, and pharmaceutical manufacturers. It is a high-growth healthcare IT company with a start-up vibe and over 3,000 customers.
Own the full security program, from application and infrastructure security to vulnerability management and incident response.
Maintain SOC 2 and drive future certifications like ISO 27001, managing evidence collection, auditors, and control assessments.
Oversee corporate IT, identity management, data privacy, and vendor security to build customer trust and support enterprise sales.
FullEnrich provides B2B data enrichment by orchestrating 20+ premium data providers to deliver complete contact information for sales and go-to-market teams. Founded in Paris and now headquartered in San Francisco, the company serves 6,000+ customers and is a team of 50+ across the US, Europe, LATAM, and Israel, with a fast-paced, ownership-driven culture.
Lead product, cloud, and AI security across Instructure.
Own security architecture, vulnerability management, and release standards.
Support customer security reviews and drive engineering commitments.
Instructure creates intuitive products that simplify learning and personal development, best known for its Canvas learning management system. The company has a flexible, inclusive culture, with competitive benefits and a strong employee recognition program.
Lead technical initiatives to strengthen engineering security across Aiwyn's SaaS platform, CI/CD pipelines, and software delivery systems.
Own vulnerability management, threat modeling, and product security, partnering with engineering teams to build secure-by-default practices.
Drive supply chain security, AI security, and security strategy to make security a shared responsibility across engineering.
Aiwyn builds the first complete platform for modern accounting firms, replacing legacy practice management systems with software firms can trust. Backed by top-tier investors, it works with the majority of the Top 500 accounting firms and fosters a culture of ownership, trust, and relentless innovation.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.
SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company is well capitalized, growing quickly, and serves 13 of the top 15 U.S. banks.
Own and strengthen security across the product stack, partnering with engineering throughout development.
Build security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
Lead security reviews, threat modeling, and drive security compliance programs and incident response.
Early-stage B2B identity and access management company focused on building secure product systems. Small, collaborative team seeking its first dedicated security engineer to help grow the security function.
Partner with Fortune 500 customers to address security concerns and accelerate platform adoption.
Develop security reference architectures and perform threat modeling for ServiceNow products and AI services.
Lead security deep dives covering cloud-native architectures, identity, encryption, and AI security controls.
ServiceNow is an AI platform that helps enterprises automate workflows and reinvent business processes. The company serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent work together.
Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.
Collaborate across engineering, product, and customer teams to embed security requirements throughout the product lifecycle.
Manage security assessments, third-party risk reviews, and vulnerability disclosure processes, including CVE registration.
Support AI security governance and secure development practices, including monitoring applications and services beyond core engineering.
They are a growing technology organization that develops products with a strong focus on security and responsible AI adoption. The culture is collaborative and innovation-driven, with remote work across Canada, autonomy, and continuous improvement.
Own security across engineering platform, infrastructure, and production systems.
Lead incident response end-to-end, including detection, runbooks, and tabletop exercises.
Establish security posture across IAM, secrets management, network segmentation, and monitoring.
Helius builds core infrastructure for Solana, enabling developers to create crypto-powered applications. They are a small, senior, fully remote team backed by Haun Ventures, Founders Fund, and Foundation Capital, obsessed with performance and scalability in decentralized systems.
Own corporate security and identity infrastructure, including Google Workspace, SSO/SCIM, MDM/EDR, and access reviews.
Lead security compliance programs like SOC 2, manage customer security reviews, and maintain incident response.
Collaborate with managed IT partners, vendors, and auditors to keep security priorities working and risks managed.
Sofar Ocean is building the world's largest real-time ocean sensor network, using Spotter buoys and software like Wayfinder to turn ocean data into decisions for shipping, government, and defense customers. The company is a team of about 100 based in San Francisco and is growing fast.
Lead and own security across the company, hardening cloud infrastructure and managing vulnerabilities.
Conduct hands-on penetration testing, code review, and incident response for AI-driven systems.
Build automated security controls into existing workflows without slowing delivery.
Zencoder builds and orchestrates AI agents that ship real work, from code to operations. The company keeps a small, highly capable team with a remote-first culture, prioritizing talent and autonomy.
Lead Carrot's security strategy and roadmap, aligning corporate and product security with business priorities.
Own GRC, incident response, cloud and application security, and compliance certifications including SOC 2 and HITRUST.
Represent security posture to enterprise customers and partner with Engineering to embed secure practices across the platform.
Carrot is a global fertility and family care platform providing intelligent clinical guidance and comprehensive support. Trusted by more than 1,000 employers and health plans, it serves millions of members across 195 countries and is celebrated for its innovative, inclusive, and mission-driven culture.
Develop and implement enterprise security strategy, governance, and risk management across the organization.
Lead HIPAA compliance, AI security, and security operations, including incident response and customer trust.
Build a high-performing security team, embedding security-by-design across products, cloud, and infrastructure.
Insurity provides configurable, cloud-native insurance software that helps organizations capitalize on new opportunities. As the largest cloud-based software provider for the P&C market, it is trusted by 22 of the top 25 carriers and values innovation, teamwork, and continuous learning.
Lead external compliance exams (SOC 2, ISO 27001) end-to-end, including evidence, auditor negotiation, and readiness.
Own customer security diligence, questionnaires, audits, and trust-center content while setting response standards.
Manage third-party risk operations and the agent platform for automated customer and vendor assessments.
Chainguard provides hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. It is a venture-backed company serving Fortune 500 enterprises and global industry leaders like OpenAI and Snowflake.
Own technical security controls for AI usage, including agent identity, tool access, guardrails, and logging.
Partner with AI Enablement, Engineering, DevOps, GRC, and Security to integrate security by design.
Build AI-powered security tooling and lead AI-specific incident response.
Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure, serving financial institutions across 40 countries. With 400+ distributed team members and $400M in funding, we are a diverse, remote-first team opening financial services to everyone.