Conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities, including the Duo Agent Platform and GitLab Duo Chat, to identify and validate vulnerabilities before they impact the platform or customers.
Develop novel testing methodologies and perform hands-on penetration testing, translating emerging threats into actionable security improvements for the next generation of AI-powered DevSecOps tools.
Collaborate with engineering teams to define security requirements, build tooling and automation for scalable security research, and mentor other team members in security best practices.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. With more than 50 million registered users and over 50% of the Fortune 100 as customers, GitLab fosters a high-performance culture driven by values and continuous knowledge exchange.
Plan and conduct offensive security engagements, effectively communicating findings to stakeholders.
Build scripts, tools, or methodologies to enhance services and stay current with adversary tradecraft.
Serve as a subject matter expert and mentor less experienced staff while contributing to training courses.
SpecterOps provides offensive security assessment services, including red team assessments and penetration tests, for large commercial enterprises. The company fosters a culture of passionate curiosity and continuous improvement, with a remote team that values empathy and transparency.
Plan and execute realistic attack scenarios simulating sophisticated threat actors' TTPs.
Perform penetration testing of networks, applications, and systems using tools like Burp Suite, Metasploit, Cobalt Strike.
Prepare detailed reports and collaborate with blue teams to improve incident detection and response.
Insight Assurance is a global audit firm delivering next-generation cybersecurity and compliance services across SOC 2, ISO 27001, PCI DSS, and more. With 170+ professionals, it is one of the fastest-growing global audit firms serving nearly 2,000 clients.
Design and implement layered AI guardrails and sandboxing to constrain AI behavior and secure enterprise workflows.
Partner with users to bake secure-by-default patterns into AI-assisted workflows and maintain an inventory of AI-to-service connections.
Continuously test guardrails through red-teaming and evaluate new AI tools to find secure ways to enable adoption.
Waabi, founded by AI visionary Raquel Urtasun, is the leader in Physical AI, developing autonomous transportation technology for commercial trucks and robotaxis. Backed by world leaders in AI and automotive, the company has offices in Toronto, San Francisco, Dallas, and Pittsburgh and is growing quickly with a diverse, innovative team.
Plan and conduct offensive security engagements of varying size, scope, and focus.
Communicate findings and recommendations to technical and executive stakeholders through reports and presentations.
Build scripts, tools, or methodologies to enhance offensive services and mentor less experienced staff.
SpecterOps is an offensive security consultancy that delivers red team assessments, penetration tests, and adversary simulation services to large commercial enterprises. The company fosters a culture of passionate curiosity, consistent improvement, empathy, sustainability, humility, and empowerment through transparency.
Lead complex offensive security projects and adversary simulation activities.
Develop stealthy tools and automation to continuously evolve offensive capabilities.
Collaborate with cyber defense and insider threat teams to improve detection and response.
The company operates at the forefront of offensive cybersecurity within a large, complex enterprise environment. They emphasize continuous learning, innovation, and collaboration across diverse teams.
Drive and conduct security testing and penetration tests across applications, infrastructure, and networks to identify exploitable vulnerabilities.
Manage and implement security testing tools and frameworks to simulate real-world attacks and validate security controls.
Design and implement AI-enabled workflows to scale security testing and threat related operations.
Valon is building the AI-native operating system for regulated finance, starting with mortgage servicing. They are a Series C company backed by a16z, managing over $110 billion in loans, with a culture that values security and innovation.
Lead the long-term technical strategy for offensive security, including red teaming and adversary simulations.
Conduct deep-dive vulnerability research and partner with DevOps to build automated security guardrails.
Mentor senior and mid-level engineers to foster a security-minded development culture.
Greenlight is a family technology company that helps families raise financially smart kids through its suite of products including the Greenlight app, debit card, and safety features. With over 6.5 million family members, Greenlight fosters a culture of innovation and collaboration to make family life easier.
Plan and execute red team assessments, penetration tests, and advanced security engagements for large organizations.
Communicate attack paths, findings, and strategic insights to technical and executive stakeholders.
Develop scripts, tools, and methodologies to improve offensive security capabilities and service delivery.
They are a specialized consulting firm focused on adversary simulation and offensive security. They maintain a remote-first culture with an emphasis on continuous improvement, transparency, and empathy.
United StatesCanadaDominican Republic
Unlimited PTO
Conduct manual penetration tests against core systems and AI systems, and build AI-assisted tooling to extend testing coverage.
Help define how we pentest AI, including LLM applications, agents, and agent-generated code.
Triage findings from SAST tools, fix vulnerabilities, and tune rules to reduce false positives.
Forward Financing is a fintech company that unlocks capital for small businesses across America. Since 2012, they have provided over $4.8 billion in funding to more than 92,000 small businesses and are recognized as a Best Place to Work.
Design and implement security controls for AI applications, LLMs, and ML infrastructure.
Develop threat models, incident response, and red-team exercises for AI-specific attacks.
Collaborate with engineering and data science teams to embed security throughout the AI lifecycle.
They secure AI and machine learning systems against advanced threats, including prompt injection and adversarial attacks. This collaborative, inclusive technology firm offers significant career growth opportunities.