Lead advanced security assessments across web applications, APIs, cloud platforms, and enterprise networks.
Conduct red team activities, vulnerability research, and custom tool development to simulate real-world attacks.
Collaborate with cross-functional teams to assess risks, support remediation, and mentor colleagues.
Hitachi Vantara provides data infrastructure for global innovators across industries. As a diverse, global team, they foster an inclusive culture focused on making a real-world impact with data.
Execute external network, web application, and API penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities while assessing business and technical risk.
Deliver client-ready reports and communicate remediation guidance to stakeholders.
Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive services. It is trusted by more than 2,400 global organizations and offers a fast-paced, collaborative remote culture.
Plan and execute authorized red team assessments against government systems, applications, networks, APIs, and cloud environments.
Develop realistic attack scenarios aligned with MITRE ATT&CK and identify exploitable attack paths beyond automated scanning.
Document findings, provide remediation recommendations, and guide less-experienced testers through technical mentoring.
Valiant Solutions provides cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. The firm is a multi-year Washington Business Journal Best Places to Work winner with a distributed, employee-centric culture.
Scope, plan, and execute penetration tests across web applications, APIs, networks, wireless, and physical environments.
Lead covert physical entry and social engineering operations against client facilities, including data centers.
Document findings for reproducibility, write actionable reports, and mentor junior testers.
Alpha Origin is a profitable, bootstrapped operational engineering firm that helps operators find where their systems are vulnerable to compromise or failure, then engineer and test fixes. The company is small and high-trust, with direct access to senior leaders and clients, a culture of ownership, and fast scope growth.
Execute internal network and cloud-based SaaS penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities using public or custom-developed exploits.
Deliver clear, client-ready reports with actionable remediation guidance to client stakeholders.
Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive cybersecurity services under A-LIGN, a security and compliance partner trusted by more than 2,400 global organisations. The company works with organisations ranging from small businesses to global enterprises in a fast-paced, collaborative, and remote-first environment.
Lead and execute comprehensive penetration testing and red team exercises across networks, applications, APIs, and AWS cloud environments.
Apply NIST SP 800-115, MITRE ATT&CK, and DHS RVA standards to deliver high-quality, risk-based security assessments.
Mentor junior penetration testers and collaborate with security and infrastructure teams to remediate vulnerabilities and strengthen security posture.
Peraton is a next-generation national security company that delivers trusted mission-critical solutions to protect the nation and allies. The company supports essential government agencies and every branch of the U.S. armed forces, with employees solving the most daunting challenges facing customers.
The Senior Architect leads offensive security engagements focusing on cloud and AI testing, uncovering vulnerabilities in modern environments.
They serve as technical lead, define testing approach, produce high-quality reports, and present findings to stakeholders.
They develop testing methodologies, research emerging attack techniques, and mentor team members.
Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. We employ more than 1,200 people across the United States and our culture embodies the spirit of a startup with the advantage of a scalable business.
Conduct comprehensive threat emulation exercises including red team, purple team, and penetration tests.
Collaborate with cross-functional teams to assess and improve security posture through adversary simulation.
Develop custom tools and document findings, risks, and recommendations for technical and business audiences.
TransUnion is a global information and insights company that helps consumers and businesses transact with confidence. With over 12,000 associates in more than 30 countries, it prioritizes work/life flexibility and a culture of innovation.
Conduct manual pentests on core systems and AI agents, building automation to expand coverage.
Define how we pentest AI, including LLM applications and agent-generated code.
Triage SAST findings, review code across web/APIs/AWS, and communicate risk to engineers.
We are a financial technology company based in Boston, unlocking capital for small businesses across America with fast, flexible funding. Our remote-first team, recognized as a Best Place to Work, has provided over $4.8 billion to more than 92,000 small businesses since 2012.
Conduct application security or network penetration testing using advanced tools and manual techniques.
Produce professional security assessment reports with vulnerability details and remediation recommendations.
Lead client-facing calls throughout engagements and perform proactive research on new threats.
Sophos is a cybersecurity company that delivers threat intelligence and security solutions to organizations worldwide. The company fosters a remote-first culture and values diverse perspectives, encouraging collaboration across locations.
Execute external network, web application, and API penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities and assess attack paths.
Write clear client reports and communicate findings, risk, and remediation guidance.
We are A-LIGN, a technology-enabled cybersecurity company providing offensive and defensive security and compliance services trusted by more than 2,400 global organizations. We are a fast-paced, collaborative team supporting remote work and professional growth.
Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
Partner with security engineering to turn findings into actionable defense improvements.
Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.
Validate vulnerabilities and configuration weaknesses to determine practical exploitability and develop realistic attack paths across web, cloud, identity, and infrastructure.
Conduct purple-team exercises and translate offensive findings into actionable improvements for detection and response.
Backblaze is the object storage leader in the open cloud movement, providing cloud storage services to businesses, developers, and individuals. Founded in 2007 and publicly traded since 2021, the company generates over $136M in annual recurring revenue, manages over three billion gigabytes of data for 500K+ customers in 175+ countries, and fosters a culture centered on diversity, equity, and inclusion.
Lead application security protocols throughout the SDLC.
Partner with engineering teams to embed security into architecture and development.
Perform hands-on security testing of web apps, APIs, and cloud-native services.
K Health is an AI-powered virtual care engine that modernizes the primary care loop using clinical AI and virtual clinics. Founded in 2016 and headquartered in New York City, the company is backed by over $443.5M and aims to build diverse, collaborative teams.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Perform web, mobile application, and internal penetration tests, source code reviews, and threat analysis.
Support blue teams, research new attack vectors, and stay current with cybersecurity news and trends.
Train QA and Development teams in standard security testing techniques and secure software development.
Insider One is a platform that unifies marketing and customer engagement tools, powered by AI and an integrated Customer Data Platform. The company is a woman-founded, women-led B2B SaaS unicorn with 1,500+ team members from 50+ nationalities across 30+ offices.
Plan and run authorized red team operations across cloud, Kubernetes, networks, identity systems, SaaS, and internal applications.
Build and maintain AI-assisted testing harnesses for automated offensive security testing.
Work collaboratively with Whatnot’s Blue Team on Purple Team engagements to strengthen security posture.
Whatnot is the largest live shopping platform in North America and Europe. They are one of the fastest growing marketplaces and were named the #1 Best Startup Employer in America, with a culture emphasizing low ego, growth mindset, and high impact.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Design, operate, and continuously improve application security testing capabilities and pipelines.
Assess application risks, perform security reviews across multiple languages, and assist with penetration testing.
Provide application security guidance and mentorship to development teams as needed.
Esri is a global leader in geographic information system (GIS) technology, helping organizations create positive global change. With a diverse workforce unified under this mission, Esri fosters an inclusive culture that values continuous learning and growth.
Coordinate test readiness activities, including client communication, scheduling, and troubleshooting to ensure engagements start on time.
Conduct advanced manual penetration testing on web applications, APIs, or network environments using tools like Burp Suite and Metasploit.
Produce professional security assessment reports detailing vulnerabilities, exploitation steps, and remediation recommendations for clients.
Sophos is a cybersecurity company that provides AI-driven threat prevention and managed detection and response services to 600,000 organizations globally. The company has a global team and promotes a remote-first culture with employee-led diversity initiatives and wellness programs.