Build automated triage and validation systems for bug bounty findings at scale.
Use LLM/agent-based reasoning to validate complex vulnerabilities and drive root cause.
Develop customer-facing security testing capabilities on the Vercel platform.
Vercel is the agentic infrastructure company that helps builders ship software with speed, security, and exceptional developer experience. Trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide, Vercel is an open, innovative workplace.
Conduct hands-on application security reviews threat modeling and code audits across the entire stack (backend frontend APIs infrastructure).
Build and improve security automation for vulnerability management including SAST DAST container scanning and secrets detection.
Drive remediation of findings from bug bounty scanners and audits partnering with engineering teams to prioritize and fix.
Close builds a communication-first AI-powered CRM that helps sales teams sell more and faster. With a 120-person 100% remote team they are bootstrapped profitable and focused on eliminating manual data entry for scaling businesses.
Build and operate the Security Observability & Data Platform: ingestion, normalization, retention, and query/detection at TB scale.
Own endpoint security across the fleet: EDR deployment, binary authorization, and hardening baselines with IT.
Lead threat hunting, incident response, and red-team exercises, and turn results into detections and fixes.
We build foundational infrastructure and products for web3, including the Sui blockchain and Move language. We are a remote-first, world-class team with tremendous growth potential, backed by a $300M Series B from top venture funds.
Design and ship code security analyzers blending deterministic detection with AI-driven analysis for vulnerabilities in code and dependencies.
Own initiatives end-to-end as the directly responsible individual, from design to delivery, while mentoring intermediate engineers through review.
Extend dependency parsing, SBOM handling, and automated remediation across GitLab's security analysis platform.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to improve developer productivity and accelerate digital transformation. Trusted by over 50 million users and more than half of the Fortune 100, it fosters a high-performance culture driven by values, AI adoption, and continuous knowledge exchange.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.
Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins, combining custodial wallets, payment orchestration, and issuance. As a 40-person startup, we operate through our own regulated entities with built-in compliance and risk controls.
Automate security controls by integrating SAST, DAST, and SCA tools into CI/CD pipelines to catch vulnerabilities before production.
Define and drive a developer-friendly Secure SDLC, including threat modeling frameworks like STRIDE and security champions network.
Manage the private bug bounty program, triage reports, lower mean time to mitigation, and conduct code reviews for Java and Python microservices.
VGS is the world's leader in payment tokenization, providing the trust infrastructure for modern commerce and agentic payments. Trusted by Fortune 500 companies and innovative fintechs, VGS stores over 9 billion tokens and processes 10 billion monthly interactions, with a remote-first culture that values curiosity, ownership, collaboration, and continuous learning.
Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
Partner with DevOps on paved roads for secure-by-default development and lead incident response.
Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.
Own the security program end-to-end, covering CorpSec, SecOps, compliance, and tooling.
Drive SOC 2 audits, manage identity and access, and build detection and observability with Datadog and SentinelOne.
Operate as a hands-on zero-to-one operator on a small team with high autonomy and real ownership.
Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors, Kodex supports over 15,000 government agencies in 190 countries and operates as a fast-growing Series A company with a small, high-autonomy team.
Apply your cybersecurity expertise to train next-generation AI systems with real-world input.
Analyze, debug, and resolve software bugs and vulnerabilities across diverse codebases.
Perform security audits, penetration testing, and contribute to backend development.
Our client is a venture-backed AI company developing intelligent systems via human expertise and machine learning. They are rapidly growing with over $40 million in funding and a global network of experts.
Act as the directly responsible individual for the team's highest-scope initiatives, shaping long-range technical goals for the static analysis engine.
Set technical direction for AI-assisted tooling that implements, reviews, and validates engine changes, including SAST rules mapped to CWE and OWASP.
Mentor engineers through code review and pairing, and participate in on-call rotations to troubleshoot production and security operations.
GitLab is an intelligent orchestration platform for DevSecOps that helps organizations increase developer productivity, improve operational efficiency, and reduce security and compliance risk. With over 50 million registered users and more than half of the Fortune 100 as customers, GitLab fosters a high-performance, remote-first culture that embraces AI and continuous knowledge exchange.
Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.
n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Lead the Application Security program across all products, embedding security throughout the SDLC.
Integrate AppSec findings into centralized vulnerability workflows, correlating them with asset and exploit intelligence.
Automate security testing pipelines and mentor engineers on secure coding and threat modeling.
ServiceNow is the AI control tower for business reinvention, helping 85% of the Fortune 500 work smarter with its AI platform. The company is building an AI-native culture where technology and talent are unstoppable together.
Develop core backend infrastructure for blockchain execution and Ethereum scaling.
Tackle distributed systems challenges involving reliability, performance, and scalability.
Strengthen security and drive projects from investigation through implementation.
They build foundational infrastructure for Ethereum scalability, security, and decentralized applications. They are a remote-first, globally distributed team collaborating across research, product, and blockchain engineering.
Design and build CI/CD workflow integrations that bring application security into software delivery pipelines and developer environments.
Run discovery sessions and architecture workshops with enterprise customers to align the Snyk platform to their requirements.
Build trusted relationships with technical stakeholders and support implementations from pre-sales through post-sales.
Snyk builds a security platform where AI agents work alongside engineers to find and fix risk at the speed software is built. The company fosters an inclusive culture with global benefits and employee resource groups, aiming to make the digital world safer.
Own the configuration, tuning, and management of our SIEM solution to diagnose unusual threats.
Perform architecture reviews, code reviews, and penetration testing on web and mobile apps.
Build and maintain vulnerability management CI/CD pipeline and collaborate with engineering teams.
Engine is the AI-native platform for intelligent travel, serving over 38,000 customers and nearly 2 million travelers. Recognized as one of Fast Company's Best Workplaces for Innovators (2025) and Built In's Best Places to Work (2020–2026), we have a culture of exponential growth and high-caliber colleagues.
Contribute production-quality code to the application (Node.js and Python), shipping security fixes end-to-end.
Build AI-powered automation and manage a bug bounty program, evaluating and reproducing submissions.
Define secure-by-design patterns and drive security standards across the architecture, including AI-integrated features.
Fast-growing B2B SaaS company serving the life sciences and pharma space. A small, high-impact security team with an engineering-first mindset, building AI-native features.
Shape application security practices by integrating automated safeguards throughout the software development lifecycle.
Collaborate with Security and Engineering teams to identify vulnerabilities early and manage bug bounty programs.
Conduct threat modeling and secure code reviews for Java and Python microservices while fostering developer security ownership.
This partner company protects payment infrastructure and enables secure, scalable digital commerce. It operates as a remote-first, security-focused fintech organization with a fast-moving culture and globally distributed teams.
Review existing RL environments for offensive-security and application-security tasks, confirming vulnerabilities are real, reachable, and solvable with provided context.
For patching and exploit-construction tasks, trace or attempt the intended path and verify grading correctly distinguishes genuine fixes from pattern-matching or workarounds.
Flag inconsistent files, missing context, or ambiguity, and write clear justifications for each accept, reject, or flag decision.
idlexperts is idler's quality assurance network of part-time, remote experts who review reinforcement-learning environments before they reach customers. The culture is flexible, async, and self-directed, with experts expected to work a handful of hours per week and deliver clear written judgments.