Source Job

• Build and operate Lumin's security fabric engineered for reliability and scale across hundreds of environments.
• Design and maintain agentic AI workflows using tools like Claude Code and MCP integrations to automate security platform engineering.
• Write production-quality Python applications and tooling supporting platform operations and AI-assisted workflows.

Lumin Digital is a trailblazer in digital banking solutions, providing cloud-native digital experiences for credit unions and banks. We foster a culture of curiosity, innovation, trust, and respect, with a focus on collaboration and continuous improvement.

• Build tools, automation, and infrastructure for scalable adversarial testing of AI systems.
• Build and maintain realistic security test environments using cloud infrastructure and automation tools like Terraform.
• Collaborate with red teamers and engineers to reproduce, investigate, and remediate vulnerabilities.

10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. They operate in a fast-paced, high-growth startup environment with a collaborative and builder-oriented culture.

• Own our approach to AI and agentic security: guardrails for agentic access to cloud and data, and the security of AI/ML workloads.
• Own our detection platform (Panther): detection strategy and coverage across cloud, container, and SaaS log sources.
• Act as the senior security resource across cloud security and security reviews, mentoring teammates.

SmarterDx is a clinical AI platform that helps health systems capture revenue and improve quality metrics using clinically-validated EHR data. The company is a remote-first team with a small, collaborative engineering culture focused on making healthcare more accurate and effective.

• Design, build, and operate AI security runtime controls across cloud platforms.
• Develop and maintain security solutions for AI interactions, LLMs, and agent workflows.
• Act as senior escalation point for complex AI security incidents.

• Architect and maintain secure, resilient, and optimized cloud environments primarily in GCP, with AWS and Azure.
• Partner with Developer Platform and IAM teams to embed security into architecture and identity strategies.
• Harden cloud platforms against emerging threats, bring a DevOps mindset with Terraform/IaC and Kubernetes, and help secure AI-driven pipelines.

Chainguard is the trusted source for open source software, delivering hardened and secure builds. They are a venture-backed late-stage startup serving Fortune 500 enterprises and global industry leaders.

• Design and implement security capabilities to satisfy FedRAMP KSIs within your team's specialty domains.
• Build automated, repeatable deployments using infrastructure-as-code and CI/CD pipelines.
• Deploy into client environments as a subject-matter expert, integrating and hardening capabilities.

Coalfire is a cybersecurity firm that helps clients navigate the ever-changing cybersecurity landscape through advisory, assessment, and automation. The company is headquartered in Chicago with offices across the U.S. and U.K., and fosters a collaborative team culture of passionate problem-solvers.

• Architect and automate security workflows across CI/CD and compliance operations.
• Integrate and monitor security tooling within automated pipelines.
• Build automation for compliance and ATO artifacts.

Our partner is a technology company that builds secure, automated cloud environments for mission-critical programs. They offer a fully remote work model with a focus on autonomy and work-life balance.

• Embed security into every phase of the SDLC and champion secure design for Gen AI and agentic AI tools.
• Perform secure code reviews, threat modeling, and establish secure API patterns across engineering teams.
• Operate the application vulnerability management lifecycle and communicate risk to engineering and business leaders.

GameChanger builds a platform for youth sports, helping families elevate the next generation through community and technology. They are a remote-first, dynamic tech company based in New York City, solving major challenges in youth sports.

• Partner with engineering teams to review cloud and compute architecture design changes.
• Establish threat models for cloud and compute paved roads to identify security risks.
• Write code for automations that support security requirements like threat detection and incident containment.

Quora operates two platforms: a global knowledge sharing platform with over 300 million monthly unique visitors, and Poe, a platform for AI language models. The company is remote-first with a culture rooted in transparency, idea-sharing, and experimentation.

• Lead security architecture across AWS and colocation, defining secure patterns and controls.
• Partner with engineering teams to threat model, review designs, and promote secure-by-design.
• Develop automated security tooling and guardrails using infrastructure-as-code and AI-assisted workflows.

NMI enables partners with choice, challenging the one-size-fits-all approach to payments. We're a global company with a remote-first culture, fostering diversity and inclusion through initiatives like affinity groups and DEI action teams.

• Own cloud and platform security end to end across AWS and Azure, including architecture, detection, and response.
• Build self-serve security tooling and guardrails to replace manual processes and reduce risk.
• Partner with engineering teams to embed security into CI/CD pipelines and product development.

Ada is an AI customer service platform that enables enterprise companies to deliver instant, proactive, and personalized customer experiences. Established in 2016, the Canadian company has powered over 5.5 billion interactions for brands like Square and YETI, backed by over $250M in funding from top-tier investors.

• Build and harden secure CI/CD pipelines with security gates to catch issues before production.
• Lead security architecture reviews and threat models for Kubernetes-based workloads on GCP and AWS.
• Harden container images, Kubernetes configurations, and cloud IAM to minimize attack surface.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. The company is venture-backed by leading investors and serves Fortune 500 enterprises, with a culture that values customer obsession, intentional action, and trust.

• Own Primer's internal developer platform end to end, including CI/CD pipelines, deployment workflows, and self-service tooling.
• Build the human-AI development loop, creating tooling and automation for coding agent workflows.
• Treat developer productivity as a measurable system, using frameworks like DORA to identify and fix delivery bottlenecks.

Primer provides a unified infrastructure for global payments, enabling finance and payments teams to reduce complexity and capture revenue. Backed by top investors like Sofina and Accel, they operate as a remote-first, async culture with high autonomy and low bureaucracy.

• Design, build, and operate reliable infrastructure supporting AI-powered products.
• Own and improve Kubernetes environments and cloud infrastructure.
• Enhance production reliability through observability, automation, and incident response.

The company builds advanced AI-driven products and services. It values engineering excellence, autonomy, and individual contribution, with a global team of skilled engineers.

• Design and implement cloud security posture and automation to protect customer trust.
• Enable cyber resilience and lead zero trust initiatives across the infrastructure.
• Collaborate with engineering teams to enhance reliability and security of cloud systems.

Mercury is a fintech company providing banking and financial services for startups, focusing on simplicity and security. With a team of around 500 employees, the culture is collaborative, innovative, and values diversity.

• Design and build scalable, secure cloud infrastructure and deployment pipelines.
• Own infrastructure end-to-end, including architecture, provisioning, deployment, and operation.
• Lead technical design discussions and contribute to infrastructure and platform architecture decisions.

VulnCheck is the Exploit Intelligence Company, delivering structured exploit intelligence for cybersecurity. Founded in 2021, the company has a transparent, collaborative, and supportive culture with a team of experts.

• Design, deploy, and manage scalable cloud infrastructure across AWS and Azure, including EC2, S3, RDS, and Kubernetes.
• Automate cloud resources using Terraform, CloudFormation, and PowerShell, while implementing security controls and monitoring.
• Collaborate with development teams to integrate CI/CD pipelines and support containerized workloads with Docker and Kubernetes.

Mind Computing supports the Department of Veterans Affairs by providing cloud engineering and DevOps solutions. The company fosters a collaborative culture with a focus on security, reliability, and innovation, though the team size is not specified.

• Designs, engineers, and automates secure enterprise cloud environments supporting mission-critical government workloads.
• Provides technical leadership across AWS GovCloud, cloud architecture, infrastructure automation, container platforms, and CI/CD.
• Develops standardized hosting models and integrates AWS IaaS, PaaS, and SaaS capabilities with enterprise applications.

True Zero Technologies is a veteran-owned small business that enables people and technology to drive quality outcomes. With a people-first culture, it has been recognized as a Best Place to Work in 2023 and 2025, and made the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025.

• Build agent-driven workflows for cloud security platforms like FedRAMP High Cloud-Native SIEM and Tier 1 Agentic SOC.
• Develop autonomous AI tools including triage, investigation, and reporting agents using agentic AI frameworks.
• Translate complex systems requirements into production-ready AI solutions following AWS Well-Architected and NIST security controls.

First Due provides transformative, end-to-end software solutions for fire and EMS agencies to improve safety and effectiveness. The company offers a comprehensive benefits package and promotes a fully remote, inclusive work environment.

• Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization.
• Use your knowledge of security architecture to help engineers build and securely operate products and services from the ground up.
• Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.

LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials. Trusted by more than 100,000 businesses and millions of users worldwide, LastPass blends strong security with everyday simplicity.