Design and implement security architecture for AWS workloads aligned with FedRAMP Moderate baseline controls.
Build and maintain security guardrails using AWS-native services (IAM, GuardDuty, Security Hub, Config, CloudTrail, KMS, WAF, Macie, Inspector).
Support ATO activities, continuous monitoring, vulnerability scanning, and incident response.
Peraton is a next-generation national security company providing mission capability integration and IT solutions to protect the nation and allies. It serves as a valued partner to government agencies and every branch of the U.S. armed forces, with a culture focused on solving daunting customer challenges.
Identify and mitigate security gaps in infrastructure to improve resilience and reduce risk.
Harden infrastructure by applying secure-by-default designs across data, endpoints, tools, and processes.
Collaborate with Platform, Engineering, and other Security teams to provide guidance and ad hoc support.
Zapier builds and uses automation to make work more efficient, creative, and human. They are a remote-first, mission-driven company that values diversity, inclusion, and belonging.
Architect, build, and maintain robust GitLab Pipelines for seamless application deployment.
Design and manage infrastructure across AWS GovCloud, edge, and Navy networks using Terraform, Ansible, and GitLab.
Drive containerization, Kubernetes orchestration, and automated security compliance for mission-critical applications.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, the company serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.
Develop and maintain GitLab CI/CD pipelines, including reusable jobs, parent/child pipelines, and integrated security testing.
Build and maintain AWS GovCloud infrastructure using Terraform and Ansible, focusing on secure, resilient, and maintainable solutions.
Automate security controls, troubleshoot complex infrastructure issues, and provide technical guidance across teams.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed, serving federal agencies across defense, space, healthcare, and energy. Headquartered in Tysons, Virginia, LMI focuses on agility and collaboration to deliver impactful results and drive lasting value.
Implement and maintain AWS security configurations across development, staging, and production environments.
Operate SAST, DAST, and SCA tools integrated into CI/CD pipelines to remediate vulnerabilities.
Support compliance efforts such as SOC 2 Type II and ISO 27001 audits and improve security processes.
Pacvue is a leading software suite for eCommerce advertising, sales, and intelligence, helping brands grow on Amazon, Walmart, Instacart, and other marketplaces. The team is energetic, passionate, and focused on innovation, with a mission to help brands and sellers succeed.
Administer AWS GovCloud and Linux infrastructure for a federal client's telecommunications systems.
Support AWS Connect, IAM, CloudWatch, and automation through Infrastructure as Code.
Participate in SAFe Agile ceremonies and an on-call rotation for mission-critical uptime.
They are a rapidly growing federal contractor delivering secure cloud and telecommunication infrastructure for federal clients. The company focuses on mission-critical systems and maintains a collaborative, agile work culture.
Administer and secure enterprise Red Hat Linux and Windows infrastructure, ensuring reliability and compliance.
Perform STIG/SCAP compliance, ACAS vulnerability scanning, and PKI certificate management.
Monitor performance, apply patches, and collaborate with teams to resolve technical issues.
The company provides enterprise IT infrastructure and security services, maintaining critical systems and ensuring compliance with federal standards. The team operates fully remotely, emphasizing cross-functional collaboration and a security-focused culture.
Partner with engineering to identify and mitigate security risks before launch, building secure frameworks and libraries that make control adoption easy.
Own identity and secrets management, including credential issuance, rotation, and workload authentication across cloud and Kubernetes environments.
Harden cloud security controls and build security models for AI agents with permission boundaries and tenant isolation.
Fieldguide builds software that automates assurance and audit work for cybersecurity, privacy, and financial audits, helping businesses enable trust. They are a remote-first company backed by top investors and trusted by over 50 of the top 100 accounting and consulting firms, with a values-driven culture.
Deploy and automate CI/CD pipelines and establish IaC using modern DevSecOps techniques including serverless and Zero Trust patterns.
Own the POAM process end to end, develop plans of action with target dates, track progress, and close findings proactively.
Conduct Security Impact Analyses (SIAs) to achieve and maintain ATO, and maintain a live dashboard for all security findings.
Oddball brings quality software to the federal space, aiming to improve the daily lives of millions. It is a small company that values learning, growth, and making a big impact.
Build and maintain AWS GovCloud infrastructure including ECS/Fargate, DynamoDB, S3, VPC, IAM, and CloudWatch using Terraform.
Design and run CI/CD pipelines for container builds, vulnerability scanning, and deployment with release versioning.
Implement tamper-evident storage, monitoring, alerting, and incident response to support ATO and federal security requirements.
Broadway Ventures is a Service-Disabled Veteran-Owned Small Business and HUBZone federal contractor providing program management, technology, and consulting solutions to government and private clients. As a small business, it emphasizes integrity, collaboration, and tailored innovation as a trusted partner.
Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
Own SOC 2, HIPAA, AI security governance, and incident response.
AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.
Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.
Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.
Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.
Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins, combining custodial wallets, payment orchestration, and issuance. As a 40-person startup, we operate through our own regulated entities with built-in compliance and risk controls.
Serve as principal cybersecurity advisor and custodian of the system security authorization package in eMASS.
Author and maintain RMF artifacts including SSP, SAR, and POA&Ms, coordinating remediation with technical teams.
Conduct STIG reviews, vulnerability management, and support DevSecOps workflows in AWS cloud environments.
LMI is a digital solutions provider that accelerates government impact with innovation and speed, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.
Own and improve WellBeam's AWS infrastructure, delivery pipelines, and production reliability with a security-first mindset.
Lead SOC 2 and HIPAA technical controls, vulnerability management, and security operations as the internal security lead.
Build observability, automate deployments, and strengthen backup, disaster recovery, and incident response across the platform.
WellBeam is a healthcare interoperability platform connecting health systems, physicians, and post-acute providers. It is a remote-first team offering flexible working hours, competitive compensation, and regular company offsites.
Design, build, and operate secure AWS infrastructure following the Well-Architected Framework.
Serve as Linux SME and administer Windows Server, Nutanix, and container platforms like Rancher and ECS Anywhere.
Own SMTP relay, SSL/TLS certificate lifecycle, and support HITRUST and SOC 2 compliance.
Verisys transforms provider data, workforce data, and relationship management for healthcare and life sciences. Serving more than 400 organizations, it is the largest outsourced credentials verification organization in the US and fosters a culture of innovation, community impact, and career growth.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Collaborate with Development and Architecture teams to build complex, highly available cloud environments.
Provide Level 3 technical support and act as SME for implementing infrastructure for our core product.
Design and maintain secure, scalable infrastructure while documenting best practices and performing root cause analysis.
Smile Digital Health provides a FHIR-based data liberation platform that helps healthcare stakeholders collect and exchange data, impacting patients in over 20 countries. The company ranked #19 on Deloitte's Technology Fast 50 for 2024 and fosters a culture of respect, inclusion, and authenticity.
Fix vulnerabilities across the stack by writing pull requests in application repositories and Terraform.
Build and tune SIEM detections, mapping coverage to MITRE ATT&CK and reducing false positives.
Lead incident response, harden AWS estate, and automate security workflows with code.
Cloudbeds is a hospitality management platform powering hotels across 150 countries, processing billions in bookings annually. The company is a remote-first team of 650+ across 40+ countries, recognized for innovation and an inclusive culture.
Lead and grow a team of security engineers focused on protecting cloud-native environments and CI/CD pipelines.
Drive technical strategy, threat modeling, and security automation across multi-cloud infrastructure.
Partner with engineering and DevOps teams to embed secure-by-design principles and manage vulnerability and supply chain security.
Wiz is a cybersecurity company that provides a cloud security platform connecting code, cloud, and runtime to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and now powered by Google, with a culture that values world-class talent.