Manage vulnerability scanning and monitoring across GCP and applications.
Lead remediation efforts and partner with engineering on larger fixes.
Maintain security logging, monitoring, and incident response readiness.
Blueberry turns every family's living room into a personal pediatric urgent care using home exam kits, concierge access, and AI-enabled pediatricians. They are a mission-driven company focused on improving healthcare access for children.
Own production uptime, deployments, health checks, error logging, alerting, and on-call response.
Build and maintain the developer platform including CI, test suites, build scripts, and documentation.
Manage access, security, compliance, and vendor dependencies across the company.
Walrus is the leader in B2B payment verification, helping prevent fraud in the multi-trillion-dollar B2B payments industry. We are a tight-knit, early-stage team backed by leading fintech VCs and led by PhD computer scientists and security researchers.
Lead and mature Affirm's Security Third Party Program, designing and implementing scalable processes and controls.
Own pre-launch security due diligence for third parties supporting international expansion and M&A.
Drive automation with Python and agentic coding tools to replace manual GRC work with code-defined workflows.
Affirm provides clear, predictable buy now, pay later financial products with no hidden fees. It is a remote-first company that values security, transparency, and care, offering flexible benefits and an inclusive culture.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Support incident management and improve secure development lifecycle.
Streamline customer security questionnaires and develop disaster recovery plans.
Automate and optimize cloud infrastructure with GCP, Kubernetes, and observability tools.
Federato is an AI-native platform bringing agentic AI to the insurance policy lifecycle. The company has raised $180M, with powerful product-market fit, and is growing fast globally with an advanced AI team.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Own identity, device management, and detection engineering to secure the entire company.
Lead IT operations, including onboarding, offboarding, and vendor management with automation.
Write detections, automate responses, and serve as first responder for security incidents.
AIOS is building the world’s first full-stack AI doctor, serving 200k patients monthly via Bolt Pharmacy. The company has grown from $7M to $100M in 6 months, is profitable, and is a young, founder-led company with an intense, mission-driven culture.
Partner with engineering to identify and mitigate security risks before launch, building secure frameworks and libraries that make control adoption easy.
Own identity and secrets management, including credential issuance, rotation, and workload authentication across cloud and Kubernetes environments.
Harden cloud security controls and build security models for AI agents with permission boundaries and tenant isolation.
Fieldguide builds software that automates assurance and audit work for cybersecurity, privacy, and financial audits, helping businesses enable trust. They are a remote-first company backed by top investors and trusted by over 50 of the top 100 accounting and consulting firms, with a values-driven culture.
Own corporate security and identity infrastructure, including Google Workspace, SSO/SCIM, MDM/EDR, and access reviews.
Lead security compliance programs like SOC 2, manage customer security reviews, and maintain incident response.
Collaborate with managed IT partners, vendors, and auditors to keep security priorities working and risks managed.
Sofar Ocean is building the world's largest real-time ocean sensor network, using Spotter buoys and software like Wayfinder to turn ocean data into decisions for shipping, government, and defense customers. The company is a team of about 100 based in San Francisco and is growing fast.
Design, develop, test, deploy, and monitor high-performance services and APIs.
Develop applications in Golang and Python on top of a modern cloud-focused platform.
Develop and maintain services using AWS native products such as Kinesis, DynamoDB, and S3, as well as GCP native products.
Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. It protects billions of high-risk interactions for enterprises, backed by top investors and recognized as one of the most influential software companies.
Improve cloud security posture through practical, scalable policy engineering.
Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.
UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.
Implement and improve security controls across corporate infrastructure and AI solutions.
Develop SIEM/XDR monitoring, vulnerability management, and secure CI/CD baselines.
Validate security weaknesses and automate tasks with Python, PowerShell, and AI tools.
Toogeza is a Ukrainian recruiting company that hires talent and builds teams for tech startups worldwide. The culture values practical engineering skills, independent problem-solving, and translating governance requirements into technical implementation.
Design and build paved paths for privileged access and secrets management on top of access management and secret storage platforms.
Build self-service tooling, SDKs, and Terraform modules to enable just-in-time access and short-lived credentials.
Partner with engineering teams to integrate security services into Kubernetes, CI/CD, and cloud environments across DoorDash, Wolt, and Deliveroo.
DoorDash is a technology and logistics company that operates a multi-sided marketplace connecting consumers, merchants, and dashers. They are building a large, inclusive team focused on empowering local economies.
Lead hands-on security assessments for cloud, application, and infrastructure environments.
Manage technical projects end-to-end and deliver practical security solutions.
Work directly with clients and engineering teams to communicate findings and drive improvements.
Jobgether is an AI-powered job platform that matches candidates with hiring companies using objective review processes. It supports fully remote recruitment and emphasizes autonomy, technical excellence, and human-led final hiring decisions.
Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.
Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.
Design, build, and deploy AI agents and automations to investigate and triage alerts, write detections as code, and automate routine security operations.
Run AI-driven threat hunting and turn visibility gaps into new detection capabilities.
Conduct incident response from detection through post-incident review, coordinating with engineering, IT, and managed SOC partners.
ŌURA empowers individuals to own their inner potential through award-winning wearable rings that provide insights into readiness, activity, and sleep. As a quickly growing company, ŌURA values team well-being and fosters a culture of health and empowerment.
Design and build security guardrails, automation, and detection across AWS, GCP, and Azure.
Secure IaC, CI/CD pipelines, and software supply chain with policy as code and least-privilege IAM.
Partner with platform, infrastructure, and compliance teams to drive security findings to remediation.
Tessera Labs is a technology company focused on securing cloud infrastructure across AWS, GCP, and Azure. The culture emphasizes a DevOps mindset, automation, and close collaboration with engineering and compliance teams.
Lead research into GCP attack paths and identity trust relationships.
Design and implement production-quality Python attack capabilities for cloud-native services.
Set technical direction for GCP attack coverage and prioritize with product and engineering teams.
Horizon3 is a fast-growing, remote cybersecurity company that develops the NodeZero autonomous penetration testing platform. The company fosters a culture of respect, collaboration, ownership, and results, with a team comprised of former special operations cyber operators and engineers.
Design, build, and operate secure, cost-efficient infrastructure in a multi-cloud environment (AWS and Azure).
Develop and evolve infrastructure as code for repeatable, auditable, and scalable system provisioning.
Partner with product and application engineering teams and participate in an on-call rotation.
Abnormal AI is an AI-native behavioral security platform protecting enterprises from advanced threats by analyzing communication and access behavior. It protects over 25% of the Fortune 500 and fosters a fast-paced, remote-first culture.