Investigate and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information.
Translate technical findings into clear attack paths, business impact, and actionable remediation, and drive durable fixes through verified closure.
Build and operate security tools and integrations using code, APIs, automation, and AI agents, and design controls for agent access and execution.
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. They value diverse perspectives and are an equal opportunity employer.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Take end-to-end ownership of security across a platform serving 50 million users, spanning application security, GRC, and AI security.
Collaborate closely with engineering leadership and development teams to identify vulnerabilities, strengthen controls, and drive remediation.
Protect AI-powered systems against evolving threats like prompt injection, jailbreaks, and third-party provider vulnerabilities.
They are a rapidly growing AI-powered technology platform serving over 50 million users worldwide. As a scale-up with more than 50 employees, they foster a high-autonomy, execution-focused culture with direct access to leadership.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.
n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.
Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
Partner with DevOps on paved roads for secure-by-default development and lead incident response.
Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.
Fix vulnerabilities across the stack by writing pull requests in application repositories and Terraform.
Build and tune SIEM detections, mapping coverage to MITRE ATT&CK and reducing false positives.
Lead incident response, harden AWS estate, and automate security workflows with code.
Cloudbeds is a hospitality management platform powering hotels across 150 countries, processing billions in bookings annually. The company is a remote-first team of 650+ across 40+ countries, recognized for innovation and an inclusive culture.
Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.
Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Conduct hands-on application security reviews threat modeling and code audits across the entire stack (backend frontend APIs infrastructure).
Build and improve security automation for vulnerability management including SAST DAST container scanning and secrets detection.
Drive remediation of findings from bug bounty scanners and audits partnering with engineering teams to prioritize and fix.
Close builds a communication-first AI-powered CRM that helps sales teams sell more and faster. With a 120-person 100% remote team they are bootstrapped profitable and focused on eliminating manual data entry for scaling businesses.
Operate and manage cloud infrastructure security, threat hunting, logging/alerting, and endpoint security.
Support internal AI security by leveraging HiddenLayer tools and joining customer calls to demonstrate threat hunting.
Manage vulnerability and risk tooling, cloud hardening, and security controls across compliance frameworks.
HiddenLayer protects the world's most valuable technologies from adversarial AI attacks. Founded by AI professionals and security specialists, we have been recognized with prestigious awards and recently raised $100M in Series B funding, achieving 10x revenue growth and 50+ enterprise customers.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Manage the full vulnerability lifecycle: scan, triage, remediate, and verify across code, containers, and IaC.
Administer SAST, DAST, SCA, and secret scanning tools in CI/CD and investigate alerts.
Monitor logs, SIEM/Wazuh rules, and Cloudflare/WAF configurations for operational security.
Boosta is a holding tech company that creates, develops, and invests in digital businesses with global potential. We collaborate with over 800 specialists worldwide, and TechCore, our service team, includes 50+ professionals handling 300+ projects a year.
Own the end-to-end vulnerability and detection lifecycle, from discovery and triage to remediation and reporting.
Lead the VIPR/VMDR function, integrating threat intel, exploit data, and asset context to drive data-backed decisions.
Automate vulnerability scoring and reporting pipelines using Python, PowerShell, REST APIs, and tools like Tenable, Qualys, Rapid7, and Wiz.
ServiceNow is the AI control tower for business reinvention, bringing together AI, data, and workflows to help organizations work smarter. The company's platform serves 85% of the Fortune 500, and it fosters an AI-native culture where technology and talent are unstoppable together.
Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
Own SOC 2, HIPAA, AI security governance, and incident response.
AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.
Work across strategic customer accounts to make Dropzone more trusted and embedded in daily security operations.
Partner with TAMs, Product, and Engineering to review investigations, tune configurations, and refine response workflows.
Translate customer SOC practices into Dropzone behavior, measure impact, and build repeatable playbooks.
Dropzone AI is a venture-backed cybersecurity company using Gen AI to offload repetitive work for security analysts and transform cyber defense. The team has deep experience across cybersecurity, AI/ML, and SaaS product development, with an early-stage, high-ownership remote culture.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Automate security controls by integrating SAST, DAST, and SCA tools into CI/CD pipelines to catch vulnerabilities before production.
Define and drive a developer-friendly Secure SDLC, including threat modeling frameworks like STRIDE and security champions network.
Manage the private bug bounty program, triage reports, lower mean time to mitigation, and conduct code reviews for Java and Python microservices.
VGS is the world's leader in payment tokenization, providing the trust infrastructure for modern commerce and agentic payments. Trusted by Fortune 500 companies and innovative fintechs, VGS stores over 9 billion tokens and processes 10 billion monthly interactions, with a remote-first culture that values curiosity, ownership, collaboration, and continuous learning.
Partner with product portfolios to manage product security, emphasizing AI/ML security and cross-functional collaboration.
Lead security design reviews, threat modeling, and secure code reviews across web, backend, and API stacks.
Integrate AppSec tooling into CI/CD, support secure development practices, and participate in incident response.
Quanata is an insurance technology company building advanced risk prediction and prevention solutions and a full-stack, AI-native insurance platform for State Farm and HiRoad. It is wholly owned by State Farm and fosters an inclusive, positive culture focused on hiring talented people across disciplines.
Own and scale the vulnerability management program, including triage, prioritization, and remediation.
Embed security into the SDLC by integrating automated gates, threat modeling, and design reviews.
Drive cross-team security initiatives and mentor engineers to improve overall posture.
Figure is a blockchain-native capital marketplace for the origination, funding, and trading of tokenized assets. It has over 480 partners, has originated $30 billion in loans, and is recognized as a top fintech company.