Integrate and automate application security tools (SAST, DAST, SCA) into CI/CD pipelines.
Conduct threat modeling, secure code reviews, and manage the bug bounty program.
Build a Security Champions network and deliver secure coding training to empower developers.
They are a payment technology platform supporting modern commerce and financial innovation. They operate as a remote-first, globally distributed company with a strong focus on security, collaboration, and developer enablement.
Shape application security practices by integrating automated safeguards throughout the software development lifecycle.
Collaborate with Security and Engineering teams to identify vulnerabilities early and manage bug bounty programs.
Conduct threat modeling and secure code reviews for Java and Python microservices while fostering developer security ownership.
This partner company protects payment infrastructure and enables secure, scalable digital commerce. It operates as a remote-first, security-focused fintech organization with a fast-moving culture and globally distributed teams.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Partner with product and engineering teams to embed security across application design and development.
Lead threat modeling, secure code reviews, and vulnerability analysis to protect complex systems.
Build automated security guardrails and promote secure coding practices throughout the SDLC.
Quanata is building an AI-native insurance technology platform for the State Farm family of companies. It is a remote-first organization that values veteran hiring, professional growth, and a collaborative culture across the U.S.
Investigate and remediate application security vulnerabilities directly in code, implementing fixes and submitting pull requests.
Deploy, configure, and optimize SAST and SCA tools across repositories and CI/CD pipelines, reducing false positives.
Triage and prioritize security findings while collaborating with engineering teams to embed secure coding practices.
Partner company is a technology firm delivering large-scale international projects with a focus on integrating application security into the software development lifecycle. They foster a collaborative, globally distributed engineering culture with an informal environment, open-door policy, and continuous learning opportunities.
Embed security practices into the SDLC, implementing SAST, SCA, and secret scanning controls in CI/CD pipelines.
Harden AWS infrastructure and infrastructure-as-code, including IAM, Terraform, VPCs, and KMS.
Lead a Security Champions program, conduct threat modeling, and define security standards for APIs and critical features.
The company is a fast-growing technology organization focused on application and cloud security. It fosters a collaborative, remote-first culture with technical autonomy and a focus on developer empowerment.
Build and tune the application security scanning program (SAST, DAST, SCA, container and IaC) to surface real risk.
Triage scan, penetration test, and bug bounty findings, prioritizing by risk and tracking remediation to closure.
Partner with engineering on threat modeling, secure-coding standards, and hands-on fixes.
Turquoise Health is a Series C price transparency platform building a more open, efficient healthcare marketplace for finance leaders. They're a remote-first US team backed by top investors, powering transparency for 300+ enterprise organizations.
Conduct hands-on application security reviews threat modeling and code audits across the entire stack (backend frontend APIs infrastructure).
Build and improve security automation for vulnerability management including SAST DAST container scanning and secrets detection.
Drive remediation of findings from bug bounty scanners and audits partnering with engineering teams to prioritize and fix.
Close builds a communication-first AI-powered CRM that helps sales teams sell more and faster. With a 120-person 100% remote team they are bootstrapped profitable and focused on eliminating manual data entry for scaling businesses.
Contribute production-quality code to the application (Node.js and Python), shipping security fixes end-to-end.
Build AI-powered automation and manage a bug bounty program, evaluating and reproducing submissions.
Define secure-by-design patterns and drive security standards across the architecture, including AI-integrated features.
Fast-growing B2B SaaS company serving the life sciences and pharma space. A small, high-impact security team with an engineering-first mindset, building AI-native features.
Lead the Application Security program across all products, embedding security throughout the SDLC.
Integrate AppSec findings into centralized vulnerability workflows, correlating them with asset and exploit intelligence.
Automate security testing pipelines and mentor engineers on secure coding and threat modeling.
ServiceNow is the AI control tower for business reinvention, helping 85% of the Fortune 500 work smarter with its AI platform. The company is building an AI-native culture where technology and talent are unstoppable together.
Own and mature Cleo's SSDLC, including threat modeling, design reviews, and automated security scanning.
Run risk-based triage for product vulnerabilities, penetration testing, and the CVE lifecycle.
Own product security posture, customer-facing advisories, and secure-by-default configurations.
Cleo provides secure data integration and managed file transfer solutions for enterprise businesses. With over 4,000 clients and a 99% retention rate, the company promotes a supportive, life-work balanced culture.
Lead technical discovery and advise on solution design for application security.
Own proof-of-value engagements from defining success criteria through technical validation.
Partner with account executives on complex sales and travel up to 20% for customer meetings.
We are an application security SaaS company at Series C/D stage, helping organizations build effective application security programs. Our collaborative team supports mid-market sales cycles and values engineering depth in customer conversations.
Lead application security protocols throughout the SDLC.
Partner with engineering teams to embed security into architecture and development.
Perform hands-on security testing of web apps, APIs, and cloud-native services.
K Health is an AI-powered virtual care engine that modernizes the primary care loop using clinical AI and virtual clinics. Founded in 2016 and headquartered in New York City, the company is backed by over $443.5M and aims to build diverse, collaborative teams.
Educate customers on application security and software supply chain security through engaging demos.
Serve as a technical expert on Endor Labs' product suite and shape solutions with engineering.
Guide customers through onboarding and adoption to ensure they achieve security and development goals.
Endor Labs provides security solutions for AI-generated code, using a patented code context graph to identify and fix exploitable vulnerabilities. Founded by Varun Badhwar, the company has raised $163M and serves major customers like OpenAI and SpaceX, fostering a mission-driven, collaborative culture.
Build and maintain secure CI/CD pipelines, embedding security testing and controls into software development and deployment.
Strengthen application and cloud-native security across Kubernetes and containerized environments, identifying risks and implementing practical controls.
Manage CVE and vulnerability lifecycles, supporting prioritization and working with application teams on mitigation and remediation.
Redcare Pharmacy is Europe's leading online pharmacy, driven by dedicated teams and cutting-edge innovation. The company fosters an enjoyable and collaborative working environment where every employee feels comfortable and motivated to contribute to the vision: 'Until every human has their health.'
Design and build CI/CD workflow integrations that bring application security into software delivery pipelines and developer environments.
Run discovery sessions and architecture workshops with enterprise customers to align the Snyk platform to their requirements.
Build trusted relationships with technical stakeholders and support implementations from pre-sales through post-sales.
Snyk builds a security platform where AI agents work alongside engineers to find and fix risk at the speed software is built. The company fosters an inclusive culture with global benefits and employee resource groups, aiming to make the digital world safer.
Work with engineering teams to run security assessments and threat models for cloud-native and SaaS products.
Review cloud application architectures, build automation for security controls, and participate in incident response.
Communicate security risks to technical and non-technical audiences and champion improvements to security processes.
Atlassian provides collaboration software solutions designed to help teams work better together. The company has a global, inclusive culture where the unique contributions of all employees create success.
Conduct code and container vulnerability assessments using DoD scanning tools, DISA STIGs, and SRGs.
Apply SAST and DAST methodologies and integrate security controls into CI/CD pipelines.
Serve as GitLab security reviewer and coordinate remediation of security findings across teams.
This partner company supports cybersecurity and secure software delivery within U.S. Department of Defense and Navy environments. The organization offers a fully remote, mission-focused culture with opportunities to collaborate across engineering and program teams.
Contribute to secure-by-design practices and maturing SAST, SCA, and DAST programs.
Develop Secure AI Development Lifecycle and AI-assisted threat modeling framework.
Mentor engineers on secure coding and foster cross-functional collaboration.
Spring Health is a global mental health company using an AI-native platform to deliver personalized mental health support. The company reaches over 170 million people worldwide and fosters a culture of innovation, collaboration, and commitment to eliminating barriers to mental health.
Deliver Application Security services including assessments, threat modeling, and source code reviews for web, mobile, AI, and thick client applications.
Perform AI/LLM and agentic security assessments, including prompt injection, model bypass, and tool-calling exploitation, mapped to OWASP Top 10 for LLM and Agentic Applications.
Build and extend AI-driven tooling and automation harnesses to improve testing coverage, consistency, and efficiency.
GuidePoint Security provides trusted cybersecurity expertise, solutions, and services to help organizations make better decisions and minimize risk. With over 1,300 employees, it is a rapidly growing, profitable, privately-held value added reseller focused exclusively on information security.