Protect applications trusted by millions of users in the Web3 ecosystem.
Combine hands-on security engineering with threat modeling, code reviews, and developer enablement.
Embed security throughout the software development lifecycle to build resilient products.
This company builds products and infrastructure for the Web3 ecosystem, focusing on digital assets, identities, and blockchain technology. It is a globally distributed, remote-first team with a culture of security, autonomy, and innovation.
Investigate smart contracts and identify vulnerabilities across the full protocol lifecycle.
Lead security audits independently using AI as a primary collaborator.
Conduct open-ended research into emerging blockchain technologies and attack vectors.
They are a security-focused research team protecting some of the most important protocols in the blockchain ecosystem. Their team is remote-first, with a culture of collaboration and continuous learning.
Break things on purpose by threat-modeling and reviewing Solidity contracts, Rust blockchain state transition functions, and other critical systems.
Own protocol components from design review through production, ensuring secure architecture and implementation.
Track the adversary, follow industry hacks and exploits, and convert lessons into concrete improvements.
Matter Labs builds private settlement infrastructure using zero-knowledge cryptography for regulated institutions. They are a fully remote team of about 70, backed by a16z and Union Square Ventures, with eight years of production zero-knowledge infrastructure.
Threat model new product features and integrations, hardening systems with effective controls.
Operate and evolve the application security toolchain, keeping it high-signal for developers.
Own day-to-day security operations across the detection stack, triaging and resolving incidents.
Gauntlet builds the financial systems of the future, operating across the entire onchain finance stack to offer vault products for institutional clients. They serve over $1.5B in client TVL and combine traditional finance with crypto-native expertise.
Act as the primary security partner for the Walrus team, providing architectural guidance and embedding security practices throughout the development lifecycle.
Lead security assessments for new features and contribute to ecosystem-wide security initiatives, identifying systemic risks and actionable remediation plans.
Drive a security-by-design culture, leveraging AI and automation to focus on high-impact, complex security research and mentor engineers.
Mysten Labs builds foundational infrastructure to accelerate the adoption of decentralized protocols based on blockchain technologies. They are a well-funded, remote-first team with over $300M in Series B funding from top venture firms, fostering a culture of innovation and growth.
Champion secure-by-default culture by embedding defense-in-depth principles into engineering frameworks and development practices.
Conduct hands-on source code reviews, threat modeling, and security assessments across microservice architectures.
Build automation and frameworks to eliminate repetitive security work and create scalable security capabilities.
Jobgether is a company that uses AI-powered matching to streamline job applications. It is a technology platform connecting candidates with hiring companies, with a focus on efficient and objective candidate review.
Embed security into every phase of the SDLC and champion secure design for Gen AI and agentic AI tools.
Perform secure code reviews, threat modeling, and establish secure API patterns across engineering teams.
Operate the application vulnerability management lifecycle and communicate risk to engineering and business leaders.
GameChanger builds a platform for youth sports, helping families elevate the next generation through community and technology. They are a remote-first, dynamic tech company based in New York City, solving major challenges in youth sports.
Act as an Application Security SME, partnering with Engineering and Product teams to embed security throughout the SDLC.
Lead application security reviews, threat modeling, code reviews, and penetration testing to identify and mitigate risks.
Design and automate security controls across CI/CD pipelines, including SAST, SCA, and other AppSec tooling.
Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries. Headquartered in Madrid, the company operates in 10 countries across Europe, the US, and Latin America, backed by leading investors, and places millions of workers.
Perform application security testing and vulnerability assessments on web applications, APIs, and CI/CD pipelines.
Support DevSecOps tool integration and automation, including security scanning and policy enforcement.
Develop proof-of-concept secure reference implementations and utility applications to demonstrate best practices.
Ardent supports the federal government's most critical national security and defense priorities. They offer competitive pay, comprehensive benefits, and a culture that values dedication and flexibility.
Design and implement new features within the Data Product space, including trust-minimized off-chain computation and aggregation of external data in blockchain environments.
Own end-to-end delivery of data products that power the largest market share of DeFi by total value secured.
Build core products with Smart Contracts using Solidity, Move, and Rust.
Chainlink is the industry-standard oracle platform bringing capital markets onchain and powering the majority of decentralized finance. The company has enabled tens of trillions in transaction value and fosters a collaborative, autonomous engineering culture.
Integrate security into the SDLC through automation, testing, and continuous improvement.
Identify, investigate, and remediate application and infrastructure vulnerabilities.
Develop tools and automation in Python, Go, or Terraform to improve security and developer productivity.
Corbalt is a technology company that partners with federal agencies to modernize and operate complex technology ecosystems, building shared platforms and reusable services. They are a remote-first team that values curiosity, kindness, ownership, and continuous learning, with roots in the Healthcare.gov recovery effort.
Partner with product and engineering teams to identify application security risks and frame them as clear business risks, launch options, and recommended next steps.
Read application code, configuration, pull requests, logs, and documentation to understand how systems work and where security risks may exist.
Contribute small code changes, scripts, detections, tests, secure defaults, or automation that improve AppSec workflows and reduce recurring issues.
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. The company is remote-first with a people-first culture, offering competitive benefits and equity rewards.
Lead secure code reviews, threat modeling, and secure design assessments to translate findings into actionable guidance.
Design and integrate application security controls across CI/CD platforms and developer workflows.
Define secure coding standards, reference architectures, and automated security capabilities scalable to engineering teams.
Jobgether is a platform that uses AI-powered matching to connect candidates with job opportunities, ensuring rapid and fair application reviews. They focus on leveraging technology to streamline hiring processes and are committed to data privacy and professional growth.
Identify and remediate high-impact security risks across applications, infrastructure, and production systems.
Integrate security practices into CI/CD pipelines and infrastructure-as-code workflows.
Collaborate with engineering teams to embed security into development and delivery workflows.
The company develops software and AI-powered solutions to support critical business workflows. It is a remote-first, fast-moving organization with a culture focused on ownership, transparency, and continuous improvement.
Own the vulnerability management lifecycle across Glean's technology stack, from discovery through remediation and reporting.
Harden base OS images and secure open-source dependencies and the broader software supply chain.
Integrate SAST, DAST, dependency scanning, and automated security validation into CI/CD pipelines.
Glean is the Work AI platform that helps everyone work smarter with AI. With over 1,000 employees across more than 25 countries, we foster a diverse, inclusive workplace and are recognized as one of the world's most innovative companies.
Build and deploy security tooling across endpoint management, supply-chain, infrastructure, and application layers.
Identify and remediate security gaps across production systems and development pipelines.
Lead incident response end-to-end and partner with engineering on secure design reviews.
Tempo is a layer-1 blockchain built for stablecoins and real-world payments, leveraging expertise from Stripe and Paradigm. We are a team of crypto-optimists moving fast to build infrastructure for onchain economic flows.
Lead technical teams in designing and implementing blockchain-based applications.
Oversee the full software development lifecycle from architecture to deployment.
Drive technical strategy and innovation in Web3 and cryptocurrency technologies.
The company builds innovative products at the intersection of blockchain, cryptocurrency, and digital collectibles. They operate with a fully distributed team and emphasize ownership, collaboration, and continuous learning.
Lead the end-to-end vulnerability management lifecycle across the technology stack.
Harden base operating system images and secure the software supply chain.
Integrate security controls into CI/CD pipelines and establish secure-development practices.
Partner company is a technology organization focused on application security and cloud-native environments. They foster a collaborative, remote-first culture with a focus on continuous improvement and employee wellbeing.
Collaborate with DevOps and engineering teams to embed security throughout the software development lifecycle.
Implement automated security testing, including SAST, DAST, SCA, and container security, and strengthen cloud-native security controls.
Support compliance with PCI-DSS, GDPR, CCPA, and SOC 2, and evaluate secure adoption of AI-assisted coding tools.
Our partner is a technology company in the travel and hospitality industry. They have a collaborative remote culture and value employee development and diversity.