Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.
Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.
Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins, combining custodial wallets, payment orchestration, and issuance. As a 40-person startup, we operate through our own regulated entities with built-in compliance and risk controls.
Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
Partner with DevOps on paved roads for secure-by-default development and lead incident response.
Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.
Fix vulnerabilities across the stack by writing pull requests in application repositories and Terraform.
Build and tune SIEM detections, mapping coverage to MITRE ATT&CK and reducing false positives.
Lead incident response, harden AWS estate, and automate security workflows with code.
Cloudbeds is a hospitality management platform powering hotels across 150 countries, processing billions in bookings annually. The company is a remote-first team of 650+ across 40+ countries, recognized for innovation and an inclusive culture.
Act as part vCISO and account manager, guiding clients through security and compliance programs.
Assess security posture, provide recommendations, and design programs using NIST, SOC 2, and ISO 27001.
Liaise with auditors and internal teams to translate programs into policies, procedures, and configurations.
Oneleet provides a platform for companies to build, manage, and monitor cybersecurity programs and achieve SOC 2 and ISO 27001. It raised a $33M Series A and is a fast-growing, remote-first team with an opinionated culture.
Own corporate security and identity infrastructure, including Google Workspace, SSO/SCIM, MDM/EDR, and access reviews.
Lead security compliance programs like SOC 2, manage customer security reviews, and maintain incident response.
Collaborate with managed IT partners, vendors, and auditors to keep security priorities working and risks managed.
Sofar Ocean is building the world's largest real-time ocean sensor network, using Spotter buoys and software like Wayfinder to turn ocean data into decisions for shipping, government, and defense customers. The company is a team of about 100 based in San Francisco and is growing fast.
Serve as deputy to the CISO, representing security to executives, customers, and regulators.
Lead and grow managers and senior engineers across Security Engineering and Security Operations.
Own the security roadmap, including cloud security, detection and response, identity, and platform security.
Abnormal Security uses behavioral AI to protect organizations from sophisticated email and collaboration attacks. Trusted by 5,000 enterprises, the company values security engineering, partnership, and a paved-path approach to reducing risk.
Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.
n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.
Own identity, SSO, and device management across Google Workspace and macOS, automating joiner and leaver flows from day one.
Secure cloud and SaaS environments by managing IAM, cloud guardrails, and vulnerability management end to end.
Bring a security perspective to incidents and audits, using AI-assisted workflows to reduce manual work.
Maze is a user research platform that helps product teams build the right products faster by making user insights accessible. With less than 150 team members and a global remote workforce, Maze fosters a culture of transparency and inclusion.
Implement and improve preventive security controls across enterprise systems, translating security requirements into operational protections.
Build and maintain security automation using Python, Go, APIs, and Terraform to enforce controls and reduce manual work.
Partner with security, IT, and platform teams to validate controls, troubleshoot complex implementations, and drive security improvements.
Databricks is the data and AI company, providing a unified platform to build and scale data and AI applications, analytics, and agents. With 20,000+ organizations worldwide and offices in 30+ locations, it fosters a diverse and inclusive culture.
Own identity and endpoint security, including access management, device standards, and risk assessments.
Administer SSO, enforce MFA, manage MDM/EDR, and automate security workflows.
Act as a first responder for incidents, conduct vendor reviews, and build scalable security processes.
Squads is a financial technology company building products and APIs for the stablecoin economy. More than 450 teams use Squads Multisig to secure over $10 billion in value.
Monitor security systems, logs, and alerts to detect and respond to threats.
Run vulnerability scans and coordinate remediation with IT and engineering.
Maintain compliance with SOC 2 and support security awareness programs.
Power Digital is an AI-native growth firm combining talent and proprietary technology to help brands drive measurable business outcomes. With a people-first culture, the company values diversity and collaboration, using its AI operating system Omega to amplify capacity for strategy, creativity, and analysis.
Lead as the SME for security tools including CASB, vulnerability scanning suite, and EPP, improving tool functionality.
Lead the vulnerability management program, working with the patching team to minimize the attack surface.
Provide security engineering expertise on projects, implement standards, and research advanced security technologies.
First Quality is a family-owned group of companies that produces high-quality personal care and household products for large retailers and healthcare organizations. It employs over 5,000 team members across 8 manufacturing campuses in the U.S. and Canada, maintaining a collaborative culture rooted in humility, unity, and integrity.
Deploy and automate CI/CD pipelines and establish IaC using modern DevSecOps techniques including serverless and Zero Trust patterns.
Own the POAM process end to end, develop plans of action with target dates, track progress, and close findings proactively.
Conduct Security Impact Analyses (SIAs) to achieve and maintain ATO, and maintain a live dashboard for all security findings.
Oddball brings quality software to the federal space, aiming to improve the daily lives of millions. It is a small company that values learning, growth, and making a big impact.
Work across strategic customer accounts to make Dropzone more trusted and embedded in daily security operations.
Partner with TAMs, Product, and Engineering to review investigations, tune configurations, and refine response workflows.
Translate customer SOC practices into Dropzone behavior, measure impact, and build repeatable playbooks.
Dropzone AI is a venture-backed cybersecurity company using Gen AI to offload repetitive work for security analysts and transform cyber defense. The team has deep experience across cybersecurity, AI/ML, and SaaS product development, with an early-stage, high-ownership remote culture.
Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
Own SOC 2, HIPAA, AI security governance, and incident response.
AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.
Lead and manage the Product Security team, shaping a risk-driven security program in partnership with the Director of Security.
Guide engineering teams to own their security health, with automation handling first-pass findings and Security validating rather than fixing.
Act as incident manager of record, delegated approver, and drive monthly and quarterly security posture reporting.
LaunchDarkly provides a feature management platform that helps developers release software safely and efficiently through gradual rollouts and targeted experiences. The company values high trust, transparency, and a humble, collaborative team culture.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.
Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.
Design and implement cybersecurity controls for satellite software, ground systems, and mission infrastructure.
Develop secure software practices including threat modeling, code reviews, and vulnerability management.
Monitor networks for cyber threats, lead incident response, and support compliance with NIST 800-171 and CMMC.
Muon Space is an end-to-end Space Systems Provider that designs, builds, and operates LEO satellite constellations delivering mission-critical data. Founded in 2021, the company is based in Silicon Valley and offers a comprehensive benefits package including equity, medical, dental, vision, 401k, paid vacation, and parental leave.