Validate vulnerabilities and configuration weaknesses to determine practical exploitability and develop realistic attack paths across web, cloud, identity, and infrastructure.
Conduct purple-team exercises and translate offensive findings into actionable improvements for detection and response.
Backblaze is the object storage leader in the open cloud movement, providing cloud storage services to businesses, developers, and individuals. Founded in 2007 and publicly traded since 2021, the company generates over $136M in annual recurring revenue, manages over three billion gigabytes of data for 500K+ customers in 175+ countries, and fosters a culture centered on diversity, equity, and inclusion.
Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
Partner with security engineering to turn findings into actionable defense improvements.
Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.
Run full kill chains against web, mobile, API, and thick/thin clients, proving exploitability and mapping blast radius.
Train the swarm by translating your tradecraft into reasoning and evaluation data for autonomous AI attackers.
Pressure-test the swarm, build tools, and tell the attack story to engineers and executives.
Armadin builds autonomous proactive security, deploying AI agents that discover and remediate threats before breaches. We're a scrappy, high-ownership team of elite researchers and engineers, led by Kevin Mandia, with startup-level autonomy.
Define the long-term technical vision for AI/LLM offense and drive its integration into NodeZero's autonomous pentesting platform.
Lead research and productization of attacks on LLM applications, agentic systems, and AI infrastructure.
Partner with senior leadership to shape strategy, standards, and execution across engineering teams.
Horizon3 is a fast-growing, remote cybersecurity company building NodeZero, an autonomous pentesting platform. The team is a fusion of Special Operations cyber operators and startup engineers, with a culture of respect, collaboration, and results.
Deliver end-to-end threat intelligence enablement and technical onboarding, optimizing customer digital footprints and alert rules for noise-free monitoring.
Develop custom automation scripts, AI agents, and SOAR playbooks to streamline security workflows and enhance platform adoption.
Drive customer retention through proactive engagement, churn risk analysis, and adaptive threat reporting.
SOCRadar provides Extended Threat Intelligence (XTI) solutions that help organizations proactively secure their attack surfaces and gain visibility into surface, deep, and dark web threats. The company is focused on innovation, global expansion, and delivering automation-enabled security to enterprises worldwide.
Design and build production-grade Python reconnaissance workflows to discover and enumerate external-facing assets at scale.
Research and parse messy external data sources to turn unstructured information into actionable attack intelligence.
Automate multi-step attack paths from initial access to post-exploitation, and mentor engineers to raise the bar.
Horizon3 is a fast-growing, remote cybersecurity company that builds NodeZero, an autonomous pentesting platform. The team is a fusion of former special operations cyber operators and startup engineers, committed to a culture of respect, collaboration, and results.
Conduct original offensive research against Dia, including prompt injection, sandbox escape, and cross-profile data access.
Threat model new surfaces with engineering teams and review features before they ship.
Build automated vulnerability discovery systems, including fuzzing and AI-assisted hunting pipelines.
The Browser Company is building a better way to use the internet, with a focus on an AI-powered browser called Dia. They are a remote-first team of nearly 100 people who value diversity and craft.
Lead advanced security assessments across web applications, APIs, cloud platforms, and enterprise networks.
Conduct red team activities, vulnerability research, and custom tool development to simulate real-world attacks.
Collaborate with cross-functional teams to assess risks, support remediation, and mentor colleagues.
Hitachi Vantara provides data infrastructure for global innovators across industries. As a diverse, global team, they foster an inclusive culture focused on making a real-world impact with data.
Break AI and agentic systems and turn research into automated, repeatable attacks for NodeZero.
Design and execute prompt injection, defense evasion, and tool-use exploitation against AI infrastructure.
Build and extend LLM-powered applications and microservices, focusing on production safety and reliability.
Horizon3 is a cybersecurity company whose NodeZero platform delivers autonomous pentests to find exploitable attack vectors. It’s a fast-growing, fully remote team of engineers and former special ops operators with a culture of respect and ownership.
Work across strategic customer accounts to make Dropzone more trusted and embedded in daily security operations.
Partner with TAMs, Product, and Engineering to review investigations, tune configurations, and refine response workflows.
Translate customer SOC practices into Dropzone behavior, measure impact, and build repeatable playbooks.
Dropzone AI is a venture-backed cybersecurity company using Gen AI to offload repetitive work for security analysts and transform cyber defense. The team has deep experience across cybersecurity, AI/ML, and SaaS product development, with an early-stage, high-ownership remote culture.
Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.
Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Lead technical discovery and turn ambiguous cyber needs into a tractable plan with clear architecture and acceptance criteria.
Build and integrate AI-enabled security workflows using production software, APIs, telemetry, and security systems.
Deploy, operate, and evaluate AI workflows in customer environments, ensuring security, maintainability, and handover.
Eliza is a technology services company and Advanced-tier OpenAI partner that helps organizations build and deploy AI solutions, including generative AI, custom LLM integrations, predictive analytics, and intelligent automation. The company has a collaborative, mission-driven team focused on real-world AI impact and values adaptability, ownership, and hands-on client collaboration.
Investigate and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information.
Translate technical findings into clear attack paths, business impact, and actionable remediation, and drive durable fixes through verified closure.
Build and operate security tools and integrations using code, APIs, automation, and AI agents, and design controls for agent access and execution.
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. They value diverse perspectives and are an equal opportunity employer.
Conduct manual pentests on core systems and AI agents, building automation to expand coverage.
Define how we pentest AI, including LLM applications and agent-generated code.
Triage SAST findings, review code across web/APIs/AWS, and communicate risk to engineers.
We are a financial technology company based in Boston, unlocking capital for small businesses across America with fast, flexible funding. Our remote-first team, recognized as a Best Place to Work, has provided over $4.8 billion to more than 92,000 small businesses since 2012.
Investigate complex cyber abuse escalations across ransomware, malware, exploits, and data exfiltration threats.
Profile threat actors and campaigns using telemetry, external intel, and MITRE ATT&CK tradecraft.
Mentor junior investigators, review casework, and deliver high-fidelity labels for AI safety classifiers.
TaskUs is a provider of outsourced digital services and next-generation customer experience for fast-growing technology companies. With approximately 60,000 employees across 23 locations worldwide, the company maintains a People First culture focused on employee well-being and internal mobility.
Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities.
Develop and refine exploit techniques and collaborate with product management to translate findings into security capabilities.
Publish research through blogs, white papers, and conferences, and contribute to open-source security tools.
Endor Labs secures AI-generated code by providing vulnerability detection and remediation for software supply chains. They are a growing security company with a collaborative, customer-focused culture, backed by $163M in funding and serving major enterprises.
Leverage your sysadmin background to set up research environments, manage lab infrastructure, and ensure tooling stability.
Assist in simulating threats (Red) while documenting detection gaps and defensive improvements (Blue).
Perform data collection, log analysis, and initial vulnerability triaging to support Senior Researchers.
Cobalt is a leading provider of penetration testing as a service, connecting businesses with a global network of security researchers. The company fosters a passionate, rapidly expanding culture with mentorship and growth opportunities.
Provide security support for infrastructure and end-user systems, including macOS endpoints and cloud environments.
Manage AI governance, vulnerability management, and endpoint security across a global remote team.
Handle vendor security assessments, audit observations, and third-party app reviews.
Gurobi Optimization empowers customers to expand their use of mathematical optimization technology for smarter decision-making. They are a small company with employees across 16 countries, fostering a collaborative and innovative culture.