Execute external network, web application, and API penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities and assess attack paths.
Write clear client reports and communicate findings, risk, and remediation guidance.
We are A-LIGN, a technology-enabled cybersecurity company providing offensive and defensive security and compliance services trusted by more than 2,400 global organizations. We are a fast-paced, collaborative team supporting remote work and professional growth.
Execute penetration testing engagements across web applications, APIs, networks, and cloud environments.
Identify, validate, and document security vulnerabilities with clear proof-of-concepts and remediation guidance.
Collaborate with clients and internal teams through scoping calls, kickoffs, report reviews, and quality assurance.
A security consulting firm that provides penetration testing services for web applications, APIs, networks, and cloud environments. The company fosters a collaborative, remote-first culture with a focus on quality assurance and continuous improvement.
Build automated triage and validation systems for bug bounty findings at scale.
Use LLM/agent-based reasoning to validate complex vulnerabilities and drive root cause.
Develop customer-facing security testing capabilities on the Vercel platform.
Vercel is the agentic infrastructure company that helps builders ship software with speed, security, and exceptional developer experience. Trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide, Vercel is an open, innovative workplace.
Automate security controls by integrating SAST, DAST, and SCA tools into CI/CD pipelines to catch vulnerabilities before production.
Define and drive a developer-friendly Secure SDLC, including threat modeling frameworks like STRIDE and security champions network.
Manage the private bug bounty program, triage reports, lower mean time to mitigation, and conduct code reviews for Java and Python microservices.
VGS is the world's leader in payment tokenization, providing the trust infrastructure for modern commerce and agentic payments. Trusted by Fortune 500 companies and innovative fintechs, VGS stores over 9 billion tokens and processes 10 billion monthly interactions, with a remote-first culture that values curiosity, ownership, collaboration, and continuous learning.
Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, and cloud environments.
Turn vulnerability research and attacker tradecraft into safe, repeatable automated attack capabilities.
Validate remediation and collaborate with research, product, and engineering teams.
Horizon3 is a fast-growing remote cybersecurity company that helps organizations proactively find, fix, and verify exploitable attack vectors. Its NodeZero platform delivers autonomous pentests, and the team is a collaborative culture committed to respect, ownership, and results.
Monitor vulnerability scans and investigate scanning issues across assigned networks.
Validate remediation activities and maintain accurate documentation in ticketing systems.
Collaborate with asset owners to support advisories, exceptions, and attack surface management.
The hiring company is an enterprise organization focused on strengthening its security posture through robust vulnerability management operations. It fosters a collaborative, flexible remote culture with opportunities for professional growth and technical skill development.
Operate and maintain application security scanning tools including SAST, SCA, secrets scanning, and container scanning throughout the SDLC.
Review and triage security findings, validate true positives, and collaborate with engineering teams to prioritize remediation activities.
Support onboarding of new repositories, maintain documentation, and assist with scripting and automation to improve security workflows.
This company is a partner organization with a collaborative security team focused on strengthening application security across a diverse portfolio of digital products and services. It fosters an inclusive, collaborative culture with employee communities and emphasizes learning and development.
Run continuous vulnerability scanning in Tenable and CrowdStrike Falcon to ensure full coverage of cloud assets.
Prioritize findings by real-world risk using exploitability, threat intelligence, and asset context, and validate high-priority findings hands-on.
Automate scan-to-ticket workflows with Python, push validated fixes through Jira, and help define vulnerability management standards and SLAs.
Revinate is the hotel data activation platform that connects and cleans guest data from every system into Rich Guest Profile data, powered by an AI intelligence layer trained on 17 years of hospitality data. Revinate powers 1.1 billion data points across 12,500+ hotels, driving over $24 billion in direct revenue, and is proud to be a Great Place To Work Certified company.
Build and tune the application security scanning program (SAST, DAST, SCA, container and IaC) to surface real risk.
Triage scan, penetration test, and bug bounty findings, prioritizing by risk and tracking remediation to closure.
Partner with engineering on threat modeling, secure-coding standards, and hands-on fixes.
Turquoise Health is a Series C price transparency platform building a more open, efficient healthcare marketplace for finance leaders. They're a remote-first US team backed by top investors, powering transparency for 300+ enterprise organizations.
Review existing RL environments for offensive-security and application-security tasks, confirming vulnerabilities are real, reachable, and solvable with provided context.
For patching and exploit-construction tasks, trace or attempt the intended path and verify grading correctly distinguishes genuine fixes from pattern-matching or workarounds.
Flag inconsistent files, missing context, or ambiguity, and write clear justifications for each accept, reject, or flag decision.
idlexperts is idler's quality assurance network of part-time, remote experts who review reinforcement-learning environments before they reach customers. The culture is flexible, async, and self-directed, with experts expected to work a handful of hours per week and deliver clear written judgments.
Lead advanced security assessments across web applications, APIs, cloud platforms, and enterprise networks.
Conduct red team activities, vulnerability research, and custom tool development to simulate real-world attacks.
Collaborate with cross-functional teams to assess risks, support remediation, and mentor colleagues.
Hitachi Vantara provides data infrastructure for global innovators across industries. As a diverse, global team, they foster an inclusive culture focused on making a real-world impact with data.
Execute external network, web application, and API penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities while assessing business and technical risk.
Deliver client-ready reports and communicate remediation guidance to stakeholders.
Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive services. It is trusted by more than 2,400 global organizations and offers a fast-paced, collaborative remote culture.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and dependencies.
Correlate threat intelligence, asset inventory, and environmental context to assess exploitability and reachability.
Automate vulnerability ingestion, analysis, prioritization, and remediation tracking with AI-assisted workflows.
Backblaze is the object storage leader in the open cloud movement, providing purpose-built cloud storage to help customers break free from legacy solutions. Founded in 2007, the company went public in 2021, generates over $136M ARR, manages over three billion gigabytes for 500K+ customers, and fosters a culture of diversity, equity, and inclusion.
Own and run bug bounty programs and external audit engagements, triaging and validating fixes.
Secure code and software supply chain, including CI/CD defenses, dependency controls, and signing.
Build anti-scam, anti-abuse, and security tooling with static/dynamic analysis and LLM-driven agents.
Mysten Labs builds foundational blockchain infrastructure and products, including Sui and Move, to advance the internet and enable the agent economy. It is a remote-first, world-class team backed by a $300M Series B from leading venture funds.
Design, configure, and support ServiceNow Vulnerability Response (VR) to manage the end-to-end vulnerability lifecycle.
Build and maintain remediation workflows, vulnerability groups, assignment rules, and calculators using Flow Designer and other ServiceNow technologies.
Configure and manage vulnerability scanning and security tool integrations via APIs including Qualys, Tenable, Rapid7, Microsoft Defender, and CrowdStrike.
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations minimize risk and make better decisions. Since 2011, the company has grown to over 1,300 employees and serves as a trusted advisor to more than 6,200 customers, with a culture driven by core values and collaboration.
Lead the technical direction of a vulnerability intelligence practice, setting standards for validation and communication.
Research and validate newly disclosed vulnerabilities, including testing proof-of-concept exploits in isolated environments.
Build honeypots, detection methods, and automation to monitor real-world exploitation and deliver actionable intelligence.
They are a cybersecurity intelligence company focused on vulnerability research and real-world risk assessment. They are a remote-friendly international team with a collaborative culture built on openness, inclusion, integrity, and continuous learning.
Partner with product and engineering teams to embed security across application design and development.
Lead threat modeling, secure code reviews, and vulnerability analysis to protect complex systems.
Build automated security guardrails and promote secure coding practices throughout the SDLC.
Quanata is building an AI-native insurance technology platform for the State Farm family of companies. It is a remote-first organization that values veteran hiring, professional growth, and a collaborative culture across the U.S.
Perform web, mobile application, and internal penetration tests, source code reviews, and threat analysis.
Support blue teams, research new attack vectors, and stay current with cybersecurity news and trends.
Train QA and Development teams in standard security testing techniques and secure software development.
Insider One is a platform that unifies marketing and customer engagement tools, powered by AI and an integrated Customer Data Platform. The company is a woman-founded, women-led B2B SaaS unicorn with 1,500+ team members from 50+ nationalities across 30+ offices.
Collaborate across engineering, product, and customer teams to embed security requirements throughout the product lifecycle.
Manage security assessments, third-party risk reviews, and vulnerability disclosure processes, including CVE registration.
Support AI security governance and secure development practices, including monitoring applications and services beyond core engineering.
They are a growing technology organization that develops products with a strong focus on security and responsible AI adoption. The culture is collaborative and innovation-driven, with remote work across Canada, autonomy, and continuous improvement.