Source Job

Global

  • Own security end to end: focus on APIs and third-party integrations, securing authentication, secrets handling, and threat modeling.
  • Manage WAF, traffic monitoring, and incident response; lead security incidents as escalation point.
  • Work with engineering on secure development practices, penetration testing, and compliance with ISO 27001 and regulations.

API Security AWS Threat Modeling Incident Response Python

20 jobs similar to Information Security Lead

Jobs ranked by similarity.

LATAM

  • Define and own a risk-based security strategy for a financial platform, prioritizing by real threat and business impact.
  • Lead incident response, application security, cloud and infrastructure hardening, and compliance programs like SOC 2.
  • Build and mentor a security team and security champions network, embedding security as an enabler across engineering.

Airtm is a financial-infrastructure company building the future of the online-work economy with stablecoin-based cross-border payment solutions. It is a fast-growing, mission-driven engineering organization focused on empowering digital entrepreneurs in the Global South.

Brazil

  • Define and drive the security strategy for a global fintech platform.
  • Lead incident response, threat detection, and compliance across cloud and application environments.
  • Build and scale a security team and embed security into the software development lifecycle.

This company operates a global financial technology platform supporting cross-border payments and digital financial services. It is a fast-growing organization with a fully remote culture and a focus on security as a strategic business enabler.

$129,280–$161,600/yr
US

  • Lead, coach, and develop a team of Security Consultants through regular feedback and performance management.
  • Drive operational excellence by measuring team performance, identifying automation opportunities, and implementing process improvements.
  • Act as a subject matter expert in web, network, cloud, or mobile security and handle complex escalations and appeals.

Bugcrowd is a preemptive security platform that unifies exposure discovery, offensive testing, and AI-driven intelligence to help organizations identify and validate real-world risk. Based in San Francisco and New Hampshire and supported by top venture capital firms, the company fosters a diverse, family-like culture with a broad range of backgrounds including musicians, adventurers, and parents.

Global 4w PTO

  • Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
  • Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
  • Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.

Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.

$171,100–$222,880/yr
UK

  • Lead and define security strategy for a globally distributed technology organization.
  • Manage application security, infrastructure protection, and incident response.
  • Collaborate with engineering teams to embed security throughout the development lifecycle.

They are a globally distributed technology organization building a SaaS platform with AI-powered tools and integrations. They operate as a lean, high-trust remote team that values collaboration, autonomy, and innovation.

$0–$185,800/yr
Global 26w maternity 26w paternity

  • Design and build security solutions across application security, infrastructure, and AI agentic systems.
  • Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
  • Develop AI governance standards and security review agents to protect user trust.

Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.

$200,000–$250,000/yr
US

  • Mature and lead Security & Threat Operations, setting the operating model and roadmap for threat detection, investigation, and incident response.
  • Own detection engineering, monitoring, digital risk, exposure management, and security controls across AWS and corporate environments.
  • Act as Incident Commander during significant security incidents and partner with engineering, DevOps, and product teams to drive defensive improvements.

DriveWealth is a global B2B fintech that democratizes investing through an API-powered trading platform. The company blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street.

US 4w PTO

  • Lead application security protocols throughout the SDLC.
  • Partner with engineering teams to embed security into architecture and development.
  • Perform hands-on security testing of web apps, APIs, and cloud-native services.

K Health is an AI-powered virtual care engine that modernizes the primary care loop using clinical AI and virtual clinics. Founded in 2016 and headquartered in New York City, the company is backed by over $443.5M and aims to build diverse, collaborative teams.

Netherlands

  • Serve as a key technical leader in protecting a cloud-based fraud prevention platform across AWS, Kubernetes, and Terraform.
  • Lead security automation, compliance, and certification initiatives including ISO 27001, SOC 2, and PCI DSS.
  • Strengthen identity management, threat detection, and incident response capabilities in a fast-paced environment.

The company builds a real-time, cloud-based fraud prevention platform for highly regulated industries. It is a fast-growing international technology environment with a collaborative engineering culture.

$97,155–$120,650/yr
UK

  • You'll lead security projects across our programme, including third-party security, governance, and vulnerability management.
  • You'll represent Security in product launches and help teams identify and manage risks.
  • You'll write security policies, mentor analysts, and keep up with emerging threats.

We're Monzo, a digital bank on a mission to make money work for everyone, offering personal and business accounts, savings, investments, and more. We've grown a lot in the UK over the last 10 years and pride ourselves on award-winning customer service and a diverse, welcoming team.

$173,000–$255,000/yr
US Unlimited PTO

  • Partner with product teams to ensure security is embedded throughout the product development lifecycle.
  • Conduct threat modeling, architecture reviews, and source code analysis to identify and mitigate vulnerabilities.
  • Automate security processes and drive cross-team projects to closure.

Affirm exists to give people a clear, predictable way to pay over time with no hidden fees, building honest financial products. It is a remote-first company that values information security, transparency, and flexibility, with a strong culture of care.

UK

  • Lead Olo's Blue Team, providing strategic and technical oversight for information protection, incident detection and response, and security services.
  • Own and optimize security programs, including vulnerability management, threat hunting, and non-event driven security reviews.
  • Collaborate cross-functionally with customers, partners, and internal teams to strengthen security posture and mitigate risks.

Olo is a leading restaurant technology provider offering digital ordering, payment, and guest engagement solutions for the restaurant industry. It processes millions of orders daily on its open SaaS platform and is trusted by over 800 restaurant brands and 400+ integration partners.

$225,250–$265,000/yr
US

  • Lead the Partner Integrations team shipping NodeZero's first-party security integrations.
  • Own the integration roadmap, API contracts, and certification pipeline.
  • Grow a 6-7 engineer team and drive reliability and backwards compatibility.

Horizon3 is a remote cybersecurity company providing the NodeZero autonomous pentesting platform to help organizations find and fix attack vectors. The team is a fusion of special ops cyber operators and engineers, with a culture of respect, collaboration, and ownership.

$230,000–$334,000/yr
US Canada

  • Lead the Infrastructure Security team to secure 1Password's cloud-native platform, setting strategic direction and priorities.
  • Work with engineering teams to embed security into system design, including AI and agentic technologies.
  • Build and grow a team of security engineers, ensuring accountability and professional development.

1Password is a cybersecurity company that provides password management and unified access management solutions to over 180,000 businesses. With over $500M in ARR and a spot on the Forbes Cloud 100 for four consecutive years, the company fosters a collaborative, fast-paced culture focused on innovation and human-centric security.

$150,000–$180,000/yr
US 20w maternity 12w paternity

  • Lead security architecture across cloud, platform, and AI systems.
  • Drive threat modeling, vulnerability management, and incident response.
  • Embed automated security testing into CI/CD and infrastructure-as-code.

Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.

UK Unlimited PTO

  • Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
  • Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
  • Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.

G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.

$170,000–$190,000/yr
US Unlimited PTO

  • Own application and product security, including threat modeling, secure code review, and access-control and secrets-exposure flaws.
  • Design and implement security architecture for an agentic AI software development lifecycle with out-of-band controls.
  • Secure AWS environment, manage non-human identities, and enforce security tooling across GitHub and SaaS estate.

Oshi Health is a fully remote, cloud-native healthcare platform dedicated to helping people manage chronic GI conditions. It is a growing company with a small cross-functional team, emphasizing a remote-first culture and equity-based compensation.

South Africa

  • Own end-to-end technical integration design for customer onboarding, ensuring alignment with Entersekt platform standards.
  • Provide API/SDK guidance and define integration specifications, data flows, and authentication configurations.
  • Lead technical testing, fault diagnosis, and go-live readiness while engaging directly with customer technical teams.

Entersekt is a leader in digital banking fraud prevention and payment security, providing mobile authentication and 3D Secure solutions to financial institutions globally. With over 16 years of history, recent Accel-KKR investment, and 210 million active users protected, the company fosters a collaborative culture focused on cutting-edge technology and growth.

US

  • Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
  • Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
  • Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.

Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.

$175,000–$230,000/yr
North America Unlimited PTO

  • Shape application security practices by integrating automated safeguards throughout the software development lifecycle.
  • Collaborate with Security and Engineering teams to identify vulnerabilities early and manage bug bounty programs.
  • Conduct threat modeling and secure code reviews for Java and Python microservices while fostering developer security ownership.

This partner company protects payment infrastructure and enables secure, scalable digital commerce. It operates as a remote-first, security-focused fintech organization with a fast-moving culture and globally distributed teams.