Own and run bug bounty programs and external audit engagements, triaging and validating fixes.
Secure code and software supply chain, including CI/CD defenses, dependency controls, and signing.
Build anti-scam, anti-abuse, and security tooling with static/dynamic analysis and LLM-driven agents.
Mysten Labs builds foundational blockchain infrastructure and products, including Sui and Move, to advance the internet and enable the agent economy. It is a remote-first, world-class team backed by a $300M Series B from leading venture funds.
Conduct hands-on application security reviews threat modeling and code audits across the entire stack (backend frontend APIs infrastructure).
Build and improve security automation for vulnerability management including SAST DAST container scanning and secrets detection.
Drive remediation of findings from bug bounty scanners and audits partnering with engineering teams to prioritize and fix.
Close builds a communication-first AI-powered CRM that helps sales teams sell more and faster. With a 120-person 100% remote team they are bootstrapped profitable and focused on eliminating manual data entry for scaling businesses.
Operate and sustain Chainguard's technology platforms across cloud, IAM, and AI.
Implement and maintain access controls, identity policies, and authentication systems.
Support hardening and monitoring of cloud infrastructure and AI/ML pipelines.
Chainguard delivers hardened, secure builds of open source software, helping enterprises build faster and stay compliant. A late-stage venture-backed startup, it serves top companies like OpenAI, and its culture is customer obsessed and down-to-earth.
Design guardrails for AI-powered products and build automated security tooling for an AI-first workforce.
Implement preventive, default-on security controls across cloud and enterprise environments using policy-as-code.
Manage identity and access controls for AI systems and non-human agents, and integrate security tooling with LLM layers.
Rithum is the world's most trusted commerce network, accelerating how brands, suppliers, and retailers deliver seamless e-commerce experiences. More than 40,000 companies trust Rithum, representing over $50 billion in annual GMV, and the culture is remote-first, collaborative, and focused on AI-driven innovation.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Implement and improve security controls across corporate infrastructure and AI solutions.
Develop SIEM/XDR monitoring, vulnerability management, and secure CI/CD baselines.
Validate security weaknesses and automate tasks with Python, PowerShell, and AI tools.
Toogeza is a Ukrainian recruiting company that hires talent and builds teams for tech startups worldwide. The culture values practical engineering skills, independent problem-solving, and translating governance requirements into technical implementation.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Set product security direction across major products and platforms, leading cross-functional initiatives.
Embed security by design into roadmaps and engineering work, with high autonomy.
Drive security assurance programs and mentor engineers across the organization.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.
Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
Partner with DevOps on paved roads for secure-by-default development and lead incident response.
Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.
Own and scale the vulnerability management program, including triage, prioritization, and remediation.
Embed security into the SDLC by integrating automated gates, threat modeling, and design reviews.
Drive cross-team security initiatives and mentor engineers to improve overall posture.
Figure is a blockchain-native capital marketplace for the origination, funding, and trading of tokenized assets. It has over 480 partners, has originated $30 billion in loans, and is recognized as a top fintech company.
Automate security controls by integrating SAST, DAST, and SCA tools into CI/CD pipelines to catch vulnerabilities before production.
Define and drive a developer-friendly Secure SDLC, including threat modeling frameworks like STRIDE and security champions network.
Manage the private bug bounty program, triage reports, lower mean time to mitigation, and conduct code reviews for Java and Python microservices.
VGS is the world's leader in payment tokenization, providing the trust infrastructure for modern commerce and agentic payments. Trusted by Fortune 500 companies and innovative fintechs, VGS stores over 9 billion tokens and processes 10 billion monthly interactions, with a remote-first culture that values curiosity, ownership, collaboration, and continuous learning.
Build scalable demo environments and platform infrastructure to support go-to-market teams.
Develop full-stack automation and interactive product experiences using cloud and CI/CD tools.
Partner with engineering and product teams to drive technical vision for demo capabilities.
1Password provides password management and unified access management solutions for businesses. With over 180,000 business customers and $500M ARR, they are a human-centric, remote-first company that values collaboration and transparency.
Develop core backend infrastructure for blockchain execution and Ethereum scaling.
Tackle distributed systems challenges involving reliability, performance, and scalability.
Strengthen security and drive projects from investigation through implementation.
They build foundational infrastructure for Ethereum scalability, security, and decentralized applications. They are a remote-first, globally distributed team collaborating across research, product, and blockchain engineering.
Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.
G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.
Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.
Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.
Define and evolve AWS infrastructure as code using CDK, applying security and compliance practices for a regulated industry.
Leverage AI-powered development tools to accelerate code generation, testing, and documentation.
Collaborate with product management and engineers to design scalable systems and deliver via continuous delivery pipelines.
Pie Insurance empowers small businesses by making commercial insurance affordable and easy as pie through technology. They are a diverse team of builders, dreamers, and entrepreneurs guided by core values and operating principles.
Own the security program end-to-end, covering CorpSec, SecOps, compliance, and tooling.
Drive SOC 2 audits, manage identity and access, and build detection and observability with Datadog and SentinelOne.
Operate as a hands-on zero-to-one operator on a small team with high autonomy and real ownership.
Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors, Kodex supports over 15,000 government agencies in 190 countries and operates as a fast-growing Series A company with a small, high-autonomy team.
Own and strengthen security across the product stack, partnering with engineering throughout development.
Build security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
Lead security reviews, threat modeling, and drive security compliance programs and incident response.
Early-stage B2B identity and access management company focused on building secure product systems. Small, collaborative team seeking its first dedicated security engineer to help grow the security function.