Source Job

• Threat model new product features and integrations, hardening systems with effective controls.
• Operate and evolve the application security toolchain, keeping it high-signal for developers.
• Own day-to-day security operations across the detection stack, triaging and resolving incidents.

Gauntlet builds the financial systems of the future, operating across the entire onchain finance stack to offer vault products for institutional clients. They serve over $1.5B in client TVL and combine traditional finance with crypto-native expertise.

• Conduct manual penetration tests against core systems and AI systems, and build AI-assisted tooling to extend testing coverage.
• Help define how we pentest AI, including LLM applications, agents, and agent-generated code.
• Triage findings from SAST tools, fix vulnerabilities, and tune rules to reduce false positives.

Forward Financing is a fintech company that unlocks capital for small businesses across America. Since 2012, they have provided over $4.8 billion in funding to more than 92,000 small businesses and are recognized as a Best Place to Work.

• Build agent-driven workflows for cloud security platforms like FedRAMP High Cloud-Native SIEM and Tier 1 Agentic SOC.
• Develop autonomous AI tools including triage, investigation, and reporting agents using agentic AI frameworks.
• Translate complex systems requirements into production-ready AI solutions following AWS Well-Architected and NIST security controls.

First Due provides transformative, end-to-end software solutions for fire and EMS agencies to improve safety and effectiveness. The company offers a comprehensive benefits package and promotes a fully remote, inclusive work environment.

• Lead threat modeling and security architecture reviews with engineering teams by translating security risks into concrete development actions.
• Architect, build, and maintain security tooling and integrations that make secure development the default in our CI/CD pipelines.
• Design and deploy automated security testing to identify vulnerabilities early in the development process.

Abnormal Security protects the humans behind the world's most critical organizations from AI-powered cybercrime. More than 4,500 enterprises trust its behavioral AI platform.

• Secure cloud infrastructure, applications, APIs, and AI-driven workflows.
• Partner with engineering to embed security controls into production.
• Lead vulnerability management and incident response activities.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. The company is a high-growth startup with a remote-first culture, emphasizing transparency, autonomy, and technical craftsmanship.

• Embed security into the software development lifecycle through threat modeling, secure design reviews, and secure-coding guidance that engineers actually adopt.
• Own application security testing (code review, SAST/DAST, and triage) and drive issues to remediation, not just filing them.
• Harden the software supply chain, build and automate security tooling, and serve as the internal security SME on product and workflow decisions.

Cogent is an Applied AI Lab building the next generation of AI agents for cybersecurity, using AI to assess petabytes of enterprise data and remediate critical breaches. We're backed by Greylock, have experienced rapid growth, and our team includes top minds from Stanford, Deepmind, and leading tech companies.

• Build secure-by-default infrastructure and automation to eliminate entire vulnerability classes across money-moving systems.
• Own application security, threat modeling, and vulnerability disclosure from design review to production.
• Partner with engineering to set security standards, make risk-based decisions, and ship fast without compromising safety.

Flex is building the AI-native private bank for business owners, re-architecting the entire financial system for entrepreneurs. Since launching in 2023, Flex has scaled to nine-figure annualized revenue, raised $100M+ in equity and $300M+ in debt, and operates with a high-bar, low-ego culture focused on speed and execution.

• Lead secure design reviews, threat modeling, and risk assessments for AI-driven products and APIs.
• Embed security practices throughout the software and AI development lifecycle.
• Architect and enforce security controls for AI/ML systems and cloud-native infrastructure.

AlphaSense provides AI-driven market intelligence and search platform trusted by over 6,000 enterprise customers. Founded in 2011, the company has more than 2,000 employees globally with offices in multiple countries.

• Own features end-to-end: from product requirements through data model and API design to production and customer deployment.
• Build on LLMs for real users in regulated healthcare, focusing on evals, guardrails, and failure modes.
• Integrate with healthcare systems like Epic workflows and prior auth logic, managing your feature area's metrics and user feedback.

Foundation Health is an AI operating system for pharmacy, built by a team with firsthand experience, streamlining care coordination and reducing paperwork. With about 70 employees, past product-market fit, and enterprise customers, they are funded with a $20M Series A from Define Ventures and have a public partnership with Amazon Pharmacy.

• Design and implement layered AI guardrails and sandboxing to constrain AI behavior and secure enterprise workflows.
• Partner with users to bake secure-by-default patterns into AI-assisted workflows and maintain an inventory of AI-to-service connections.
• Continuously test guardrails through red-teaming and evaluate new AI tools to find secure ways to enable adoption.

Waabi, founded by AI visionary Raquel Urtasun, is the leader in Physical AI, developing autonomous transportation technology for commercial trucks and robotaxis. Backed by world leaders in AI and automotive, the company has offices in Toronto, San Francisco, Dallas, and Pittsburgh and is growing quickly with a diverse, innovative team.

• Build production-ready AI-powered products integrating LLMs, RAG, and agentic workflows into real-world financial processes.
• Develop scalable event-driven microservices and APIs with Node.js, TypeScript, and modern React frontends.
• Architect cloud-native systems on AWS and implement monitoring, evaluation, and observability for production AI systems.

Aveni is redefining how financial institutions use AI by building production-ready agentic systems that replace fragmented processes. Backed by investors including Puma Private Equity, the company completed one of Scotland's largest Series A rounds and is scaling its team to meet growing demand.

• Own the security boundary of Percy, including vault enclave and sandbox isolation for AI agents processing live PII.
• Assess and harden encryption, key management, access control, and the append-only audit ledger across AWS Nitro Enclaves.
• Drive product-security controls for SOC 2, PCI DSS, and GDPR audits, and run technical pentests.

Footprint builds Percy, an AI agent that automates financial crime investigations for banks and fintechs. Backed by QED, Index, and Box Group, the company is small, senior, and ships fast, having 5x'd revenue last year.

• Embed security into every phase of the SDLC and champion secure design for Gen AI and agentic AI tools.
• Perform secure code reviews, threat modeling, and establish secure API patterns across engineering teams.
• Operate the application vulnerability management lifecycle and communicate risk to engineering and business leaders.

GameChanger builds a platform for youth sports, helping families elevate the next generation through community and technology. They are a remote-first, dynamic tech company based in New York City, solving major challenges in youth sports.

• Write, tune, and maintain detections in a modern SIEM across cloud, container, and SaaS log sources.
• Run cloud security operations in AWS, triage alerts, and help execute incident-response playbooks.
• Build and extend security-automation tooling with code fluency in Python or TypeScript.

SmarterDx uses clinical AI to help health systems capture the full value of patient care. They are a remote-first team with a mission to make healthcare more accurate and sustainable.

• Lead the security design, implementation, and controls for Jasper’s AI infrastructure and AI-powered internal workflows.
• Own threat modeling for AI-specific risks and design controls for validating, logging, and auditing AI outputs.
• Build security tooling and automated checks to let internal teams adopt AI capabilities without slowing down.

Jasper is the marketing agents platform that helps enterprises orchestrate AI agents for marketing execution. Founded in 2021, Jasper has team members across the U.S., Australia, and France, and is trusted by hundreds of enterprises including nearly 20% of the Fortune 500.

• Help shape technical direction of security tooling and AppSec practices. - Lead secure design across major engineering projects, from threat modeling through architecture. - Perform advanced offensive security work, chaining vulnerabilities and proving business impact.

Super.com is a fast-paced, high-growth tech company that maximizes lives for customers and employees. It offers a remote-first culture, invests in career progression, and provides generous benefits including unlimited PTO and parental leave.

• Proactively identify and drive security improvements across the product and platform.
• Partner with engineering teams to threat model new features and review designs early in development.
• Build and improve security tooling, libraries, and workflows to make secure development the default path.

Fellow is an AI meeting assistant that helps teams record, transcribe, summarise, and act on their meetings. We are a Series A company backed by major venture firms, with a remote-first culture and a growing team.

• Build core capabilities for SoSafe's Agentic AI Platform, including agent runtimes, model routing, and tool registries.
• Develop production-grade platform services and developer tooling using Node.js, TypeScript, NestJS, and React.
• Design reusable AI infrastructure enabling engineering teams to deploy and operate AI agents securely at scale.

SoSafe is a human risk management provider that uses behavioral science and data-driven learning to improve cybersecurity. Backed by leading VCs like Highland Europe and Global Founders Capital, it is one of the fastest-growing security awareness scale-ups worldwide.

• Hunt for and close security vulnerabilities across Counterpart Assistant using custom tooling and AI-driven frameworks.
• Harden systems, services, and endpoints while establishing strong security monitoring and safeguarding PHI.
• Raise the security bar by reviewing critical pull requests, running training, and mentoring engineers on secure coding practices.

Counterpart Health, a subsidiary of Clover Health, builds an AI-enabled primary care tool called Counterpart Assistant that helps physicians diagnose and manage chronic conditions earlier. The company employs a remote-first culture with a diverse and inclusive team focused on transforming healthcare at scale.

• Develop secure, well-tested TypeScript features for the Duo Client SDK, solving technical problems of moderate scope.
• Ship improvements with minimal guidance, write tests, and contribute to code reviews and design discussions.
• Design durable public APIs with clear interfaces, versioning, and backward compatibility for external consumers.

GitLab provides an intelligent DevSecOps platform that helps organizations increase developer productivity and accelerate digital transformation. With over 50 million registered users and trust from more than 50% of the Fortune 100, GitLab fosters a high-performance, values-driven culture where team members embrace AI and collaborate asynchronously in a fully remote environment.