Design and enforce cloud security controls and IAM policies across multi-account AWS environments.
Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
Develop automated detection and remediation workflows using Python, Bash, or Go and IaC tools.
The Tripadvisor Group connects people to experiences worth sharing, aiming to be the world's most trusted source for travel and experiences. It is a publicly traded company with a global portfolio of travel brands, fostering a culture of collaboration, agility, and traveler-first mindset.
Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.
Wiz is redefining security for the AI era, enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups ever, we are trusted by over 65% of the Fortune 100 and scan over 230 billion files daily, with a culture that values world-class talent and is now powered by Google.
Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization.
Partner with DevOps and CI/CD engineers to embed shift-left security practices throughout the software development lifecycle.
Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.
LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials straight from the browser. Trusted by more than 100,000 businesses and millions of users worldwide, they blend strong security with everyday simplicity in a remote-first, collaborative culture.
Own security of the software build and release pipeline, cloud environments, and AWS identity and access.
Operationalize a 15-domain cloud security framework and CrowdStrike CSPM across all AWS estates.
Mentor a junior cloud security engineer and build paved-road patterns for engineering teams.
Vermont Information Processing is a leading beverage industry technology provider trusted by over 1,600 suppliers for 50+ years. Backed by Warburg Pincus, VIP is investing in security with executive sponsorship and a funded roadmap.
Lead and grow a small security team while owning Canary's security and compliance program end-to-end.
Serve as the primary security voice to customers, partners, and auditors, translating security posture for varied audiences.
Set technical direction for security tooling and stay hands-on in architecture and threat-model reviews.
Canary Technologies is a leading agentic AI platform for hotel and guest management, powering digital infrastructure for over 20,000 hotels in 125+ countries. With nearly $200M raised, they are a top-funded hotel tech company, recognized for growth and workplace excellence.
Design and maintain AWS infrastructure using Terraform and ECS/Fargate, ensuring high availability and security.
Implement and manage CI/CD pipelines with automated deployment and rollback processes.
Collaborate with teams for monitoring, incident response, and security compliance.
Bluelight is a leading software consultancy that designs and develops innovative technology to enhance users' lives. The company is expanding across the United States and Central/South America, fostering a collaborative and enriching work environment where team members can grow and thrive.
Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.
Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
Partner with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.
Supabase is the Postgres development platform, providing a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. With over 540,000 community members and having raised over $1B, our globally distributed team of ~400 people operates across 60+ countries with deep open-source values.
Design, deploy, and manage cloud security solutions to protect AWS and Azure environments.
Perform security assessments, vulnerability remediation, and lead key security programs.
Automate security processes and integrate DevSec practices into the software development lifecycle.
Navitus is a pharmacy benefit manager (PBM) alternative that aims to make medications more affordable by removing cost from the drug supply chain. The company fosters a diverse, creative, and growth-oriented culture.
Own identity, SSO, and device management across Google Workspace and macOS, automating joiner and leaver flows from day one.
Secure cloud and SaaS environments by managing IAM, cloud guardrails, and vulnerability management end to end.
Bring a security perspective to incidents and audits, using AI-assisted workflows to reduce manual work.
Maze is a user research platform that helps product teams build the right products faster by making user insights accessible. With less than 150 team members and a global remote workforce, Maze fosters a culture of transparency and inclusion.
Operate and monitor cybersecurity controls for a FedRAMP- and CJIS-regulated SaaS product in AWS.
Triage security events, investigate threats, and support incident response with root-cause analysis.
Maintain security platforms, vulnerability management, and data protection operations across the environment.
Granicus provides cloud-based technology for government agencies to improve digital services and connect with communities. Over 25 years, they serve 5,500 agencies and 300 million subscribers, with a remote-first, inclusive culture.
Provide strategic and technical leadership of Gemini's Platform Security team, architecting and implementing security solutions alongside engineers.
Align team-wide strategy with business needs and foster trust-centric relationships with partner teams to achieve security outcomes.
Lead development of security policies and KPIs, manage vendor relationships, and serve as escalation point for complex engineering problems.
Gemini is a global crypto and Web3 platform founded in 2014 by Cameron and Tyler Winklevoss, offering simple and secure crypto products to individuals and institutions in over 70 countries. As a publicly traded company, it prioritizes security and trust, with a culture of innovation and hypergrowth.
Develop playbooks and address security-related tasks in AWS serverless environments.
Drive improvements in security posture, including application, endpoint, and access management.
Collaborate with product engineering teams to raise the bar for security in CI/CD, dependency management, and secure design reviews.
Stedi is building a new healthcare clearinghouse and RCM engine, accessible via API. With $142 million in funding and a lean, passionate team, they ship products weekly and prioritize automation and eliminating toil.
Support cloud security consulting engagements, including assessments and architecture reviews.
Assist with AWS security configurations and documentation under senior guidance.
Participate in client meetings and contribute to deliverable preparation.
GuidePoint Security provides trusted cybersecurity expertise, solutions and services to help organizations make better decisions and minimize risk. With over 1,300 employees, it is a rapidly growing, privately-held company known for its collaborative culture and mentorship.
Design, deploy, and maintain GCP infrastructure, including Compute Engine, GKE, Cloud Storage, IAM, and Cloud Interconnect, following well-architected principles.
Automate provisioning using Terraform, implement IAM best practices, and partner on security audits and hardening.
Monitor performance, availability, and cost, and support cross-cloud and on-premises networking as needed.
Dragos is the global leader in xOT cybersecurity, protecting critical infrastructure systems that deliver water, power, and healthcare. The remote-first team spans North America, Europe, the Middle East, and APAC, built on authenticity, transparency, and trust.
Design and build security for future infrastructure, partnering with engineering and compliance teams.
Lead AI-native security initiatives, designing autonomous agents for threat detection and incident response.
Devise defense-in-depth frameworks, research threats, and maintain KPIs for a healthy cloud security program.
WeightWatchers is a global digital health company that blends science and community to help millions build sustainable healthy habits. The engineering team drives transformative change through technology, with a culture that thrives on urgency, collaboration, and passion for impactful work.
Design scalable identity and access solutions, including AI agent governance and privileged access workflows.
Codify identity platforms using Terraform and re-architect identity across GCP and AWS.
Mentor engineers and drive cross-functional security initiatives in a remote-first environment.
Our partner is a security and IT company focused on identity and access management. They operate fully remote and foster a culture of autonomy, continuous learning, and knowledge sharing.
Design, build, and maintain automation pipelines for workload packaging, validation, testing, deployment, and monitoring across AWS environments.
Collaborate with data engineers to operationalize workloads within a data lakehouse ecosystem and develop reusable infrastructure-as-code constructs using Terraform, AWS CDK, or CloudFormation.
Ensure pipelines meet enterprise security, compliance, and scalability standards while mentoring junior engineers and contributing to DevSecOps practices.
Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. The company uses AI to review applications and ensure fair, objective candidate evaluation, and operates in a distributed, fully remote environment.
Conduct application and cloud security assessments to identify risks and vulnerabilities.
Collaborate with development teams to integrate security best practices into the SDLC.
Support vulnerability management, incident response, and security awareness education.
Business Wire is a leading global news release distribution service. The company is a large organization with a remote-first culture and offers competitive benefits.
Build and lead a global team of Partner Solutions Architects, driving technical excellence and measurable partner impact.
Lead from the front as a hands-on technical leader, engaging with partners on cloud security across AWS, Azure, and GCP.
Drive partner technical enablement and strategic GTM insertion to ensure partners can confidently deploy and support solutions.
Wiz is a cloud security company that enables teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups, it is trusted by over 65% of the Fortune 100 and scans over 230 billion files daily, with a culture that values world-class talent.
Protect clients' digital assets by designing and implementing security solutions across multi-cloud environments.
Work closely with senior leadership and mentor junior team members while contributing across cybersecurity engineering, GRC, and security strategy.
Take ownership of client relationships and bring people along, adapting between engineering, strategy, and compliance conversations.
Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership. The firm serves startups, mid-market companies, and PE-backed portfolios with a collaborative and entrepreneurial culture.