Take end-to-end ownership of security across a platform serving 50 million users, spanning application security, GRC, and AI security.
Collaborate closely with engineering leadership and development teams to identify vulnerabilities, strengthen controls, and drive remediation.
Protect AI-powered systems against evolving threats like prompt injection, jailbreaks, and third-party provider vulnerabilities.
They are a rapidly growing AI-powered technology platform serving over 50 million users worldwide. As a scale-up with more than 50 employees, they foster a high-autonomy, execution-focused culture with direct access to leadership.
Own technical security controls for AI usage, including agent identity, tool access, guardrails, and logging.
Partner with AI Enablement, Engineering, DevOps, GRC, and Security to integrate security by design.
Build AI-powered security tooling and lead AI-specific incident response.
Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure, serving financial institutions across 40 countries. With 400+ distributed team members and $400M in funding, we are a diverse, remote-first team opening financial services to everyone.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.
n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.
Lead Apollo's multi-year AppSec strategy and shape cross-team roadmaps.
Set secure design, code review, and AI security standards across engineering.
Mentor security champions and build automation that scales secure practices.
Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies. Founded in 2015, it has raised ~$250M and is valued at $1.6B, with a culture focused on AI-native innovation and continuous improvement.
Conduct manual pentests on core systems and AI agents, building automation to expand coverage.
Define how we pentest AI, including LLM applications and agent-generated code.
Triage SAST findings, review code across web/APIs/AWS, and communicate risk to engineers.
We are a financial technology company based in Boston, unlocking capital for small businesses across America with fast, flexible funding. Our remote-first team, recognized as a Best Place to Work, has provided over $4.8 billion to more than 92,000 small businesses since 2012.
Implement and improve security controls across corporate infrastructure and AI solutions.
Develop SIEM/XDR monitoring, vulnerability management, and secure CI/CD baselines.
Validate security weaknesses and automate tasks with Python, PowerShell, and AI tools.
Toogeza is a Ukrainian recruiting company that hires talent and builds teams for tech startups worldwide. The culture values practical engineering skills, independent problem-solving, and translating governance requirements into technical implementation.
Design guardrails for AI-powered products and build automated security tooling for an AI-first workforce.
Implement preventive, default-on security controls across cloud and enterprise environments using policy-as-code.
Manage identity and access controls for AI systems and non-human agents, and integrate security tooling with LLM layers.
Rithum is the world's most trusted commerce network, accelerating how brands, suppliers, and retailers deliver seamless e-commerce experiences. More than 40,000 companies trust Rithum, representing over $50 billion in annual GMV, and the culture is remote-first, collaborative, and focused on AI-driven innovation.
Lead technical initiatives to strengthen engineering security across Aiwyn's SaaS platform, CI/CD pipelines, and software delivery systems.
Own vulnerability management, threat modeling, and product security, partnering with engineering teams to build secure-by-default practices.
Drive supply chain security, AI security, and security strategy to make security a shared responsibility across engineering.
Aiwyn builds the first complete platform for modern accounting firms, replacing legacy practice management systems with software firms can trust. Backed by top-tier investors, it works with the majority of the Top 500 accounting firms and fosters a culture of ownership, trust, and relentless innovation.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Lead product, cloud, and AI security across Instructure.
Own security architecture, vulnerability management, and release standards.
Support customer security reviews and drive engineering commitments.
Instructure creates intuitive products that simplify learning and personal development, best known for its Canvas learning management system. The company has a flexible, inclusive culture, with competitive benefits and a strong employee recognition program.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Lead technical discovery and turn ambiguous cyber needs into a tractable plan with clear architecture and acceptance criteria.
Build and integrate AI-enabled security workflows using production software, APIs, telemetry, and security systems.
Deploy, operate, and evaluate AI workflows in customer environments, ensuring security, maintainability, and handover.
Eliza is a technology services company and Advanced-tier OpenAI partner that helps organizations build and deploy AI solutions, including generative AI, custom LLM integrations, predictive analytics, and intelligent automation. The company has a collaborative, mission-driven team focused on real-world AI impact and values adaptability, ownership, and hands-on client collaboration.
Investigate and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information.
Translate technical findings into clear attack paths, business impact, and actionable remediation, and drive durable fixes through verified closure.
Build and operate security tools and integrations using code, APIs, automation, and AI agents, and design controls for agent access and execution.
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. They value diverse perspectives and are an equal opportunity employer.
Own the access layer and integration architecture for the Applied AI team's Intelligence Core and external agentic-commerce products.
Define versioned schemas, signed records, authority lease services, and tamper-evident logging for verifiable agent actions.
Lead security-first engineering practices, including least-privilege access, zero raw PII, and evaluation of advanced agent frameworks.
Zerohash is a crypto and stablecoin infrastructure platform that powers digital money services for banks, brokerages, and fintechs. Founded in 2017 and backed by over $280 million in funding, the company is a regulated, compliance-first organization trusted by major financial brands.
Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.
Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.
Serve as senior security engineering partner for AI product initiatives, working side by side with AI engineers from architecture through production.
Design, build, and secure AI-enabled applications, including agents, MCP servers, RAG pipelines, and cloud foundations with identity, data protection, and observability.
Partner with Privacy, Compliance, and Legal to meet healthcare security requirements, and coach developers on secure paved-road patterns.
Abacus Insights is transforming how data and AI work for health plans, helping them break down data silos to create a trusted data foundation. Backed by $100M from top investors, the company is collaborative, bold, and curious, embracing the thoughtful use of AI and automation.
Collaborate with Product Engineering teams throughout the SDLC to identify vulnerabilities through threat modeling, design reviews, and secure code reviews.
Develop and implement end-to-end security solutions to mitigate risks across the product suite.
Drive improvements across Product Security tooling, automation, and the bug bounty program while experimenting with AI-based tools.
Superhuman is an AI productivity platform that integrates with over 1 million apps, offering writing, docs, inbox, and AI assistant products. Founded in 2009, it powers over 40 million people and 50,000 organizations worldwide.