Source Job

• Leads product security work across Black Duck's portfolio, including architecture reviews, threat models, vulnerability triage, and customer-facing security inquiries.
• Maintains detection content in CrowdStrike NG-SIEM and Sumo Logic, contributes to SOAR automations, and coordinates vulnerability fixes with engineering teams.
• Acts as an informal technical resource for less experienced team members, explains complex security topics to diverse stakeholders, and documents runbooks and SOPs.

Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. A recognized pioneer in application security with industry-leading tools and services, they partner with teams to maximize security and quality in DevSecOps.

• Own the Application Security product strategy and roadmap, from tooling to governance.
• Drive delivery of security solutions with engineering and cross-functional teams.
• Lead tool procurement, risk prioritization, and executive communication.

Zeta Global is an AI-powered marketing cloud that helps marketers acquire and retain customers using advanced AI and consumer data. Founded in 2007, the company is headquartered in New York City with offices worldwide, employing a diverse team focused on innovation and inclusion.

• Own and articulate the multi-year product vision and strategy for key Delinea PAM solutions, aligning to company objectives and market opportunity.
• Translate strategy into a prioritized roadmap and backlog, making trade-off decisions with agile teams to deliver iterative, measurable value.
• Partner with Engineering, QA, and Support teams to ensure high-quality releases and timely feature delivery.

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to govern interactions across the modern enterprise. With a global team, world-class product leadership, and strategic investment from TPG, they value diversity, innovation, and a culture of respect and fairness.

• Success Planning & Value: Drive business success planning by partnering with customers, pre-sales, and post-sales teams to align on requirements, goals, and challenges.
• Customer Advocacy: Act as the voice of the customer within the organization, advocating for customer needs and requirements to internal teams.
• Issue Management: Collaborate with Technical Support and Customer Engineering teams to ensure timely resolution to customer issues.

We are the trusted source for open source, delivering hardened and secure builds. We are venture-backed and serve Fortune 500 enterprises and global industry leaders.

• Support product roadmap execution and coordinate feature development with engineering teams in a cloud environment.
• Gather and synthesize customer, sales, and market feedback to inform product decisions and identify improvements.
• Write and maintain product requirements, user stories, and acceptance criteria for BloodHound Enterprise SaaS features.

SpecterOps is a cybersecurity company that develops BloodHound Enterprise, a defensive Attack Path Management solution for Active Directory. They are a remote-first organization with a culture of passionate curiosity, consistent improvement, empathy, sustainability, humility, and empowerment through transparency.

• Define and drive AI-forward product strategy for SpyCloud's investigations capabilities, enabling security teams to uncover, understand, and act on cybercriminal activity using intelligent, automated workflows.
• Partner closely with Engineering, Design, Data Science, and Go-to-Market teams to deliver innovative AI-driven features that help customers investigate threats faster and reduce manual effort.
• Own the product vision, strategy, and roadmap for the AI-powered Investigations product portfolio, balancing long-term vision with customer needs and business priorities.

SpyCloud transforms recaptured darknet data to disrupt cybercrime, offering automated identity threat protection solutions that use advanced analytics and AI to accelerate investigations and protect identities. Headquartered in Austin, TX, SpyCloud employs over 250 cybersecurity experts focused on protecting businesses and consumers from stolen identity data.

• Partner with engineering teams to perform security reviews, threat modeling, and risk assessments for product features and APIs.
• Develop and maintain scalable security tools and automation pipelines for vulnerability detection across the SDLC.
• Contribute to security architecture reviews and support bug bounty programs and incident response.

Lime is a global leader in micromobility on a mission to make transportation shared, affordable, and carbon-free. A Time Magazine 100 Most Influential Company, Lime has powered over a billion rides in 30 countries and is a fast-paced, lean, remote-first team.

• Provide strong leadership as a security thought leader across Delinea's product offerings.
• Perform end-to-end security architecture reviews and threat modeling.
• Maintain and mature Product Security tooling such as SAST, SCA, DAST, ASPM.

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization. They are a global team of passionate problem-solvers, with a culture of innovation, respect, and fairness.

• Own key security domains such as vulnerability management, application security, API security, and supply chain security.
• Partner with engineering teams to integrate security into design reviews, threat modeling, CI/CD pipelines, and developer workflows.
• Develop and improve security tooling and automation to reduce manual effort and leverage AI for triage and detection.

NinjaTrader is an industry-leading trading platform and futures broker that empowers traders with award-winning software and brokerage services. Since 2003, the company has grown to over 2 million users and is the number one rated futures brokerage worldwide, fostering a dynamic culture focused on social connection, professional development, and employee recognition.

• Own the end-to-end roadmap for the Teramind Endpoint Agent across Windows, macOS, and Linux.
• Translate business vision into engineering reality by synthesizing signals from customers, sales, and executive strategy.
• Build for enterprise resilience: tamper-proof, undetectable, and reliable under the most demanding conditions.

Teramind is a global leader in workforce intelligence, insider risk management, and data loss prevention. Used by thousands of companies across 60+ countries, we are a fully-remote team that has thrived since 2014, fostering a forward-thinking and inclusive culture.

• Partner with engineering teams to perform security reviews, threat modeling, and risk assessments for product features, APIs, mobile applications, and backend services.
• Develop and maintain scalable security tools and pipelines to automate vulnerability detection, dependency scanning, and security testing across the software development lifecycle.
• Serve as a product security point of contact for incidents, contributing to investigation, root-cause analysis, and post-incident improvement.

Lime is a global leader in micromobility, on a mission to build a future where transportation is shared, affordable, and carbon-free. A Time Magazine 100 Most Influential Company, Lime has powered more than one billion rides across 30 countries and is a fast-paced, lean, remote-first company.

• Partner with product and engineering teams to identify application security risks and recommend mitigations.
• Read application code, configuration, and pull requests to understand security risks and suggest improvements.
• Contribute to vulnerability management, automation, and security tooling to scale AppSec efforts.

Affirm is reinventing credit to make it more honest and friendly, providing consumers the flexibility to buy now and pay later without hidden fees. We are a remote-first company with a culture centered on people, transparency, and offering competitive benefits including health coverage and flexible spending.

• Define and enforce security requirements for software products, features, and components.
• Design, perform, and maintain security analysis on commercial products throughout the product lifecycle.
• Collaborate with cross-functional teams to perform vulnerability management and implement mitigation strategies.

symplr is revolutionizing healthcare operations with a platform that drives effective, efficient, and connected workflows. The company is remote-first with employees across the US, India, and the Netherlands, and values teamwork, customer focus, and integrity.

• Lead technical implementations and drive adoption of Chainguard images for commercial customers, ensuring secure software development.
• Partner with account teams to understand customer goals and drive account strategies for value realization and retention.
• Collaborate with Product and Engineering to surface customer requirements and maintain high-quality standards.

Chainguard provides hardened, secure, and production-ready builds of open source software for organizations like Fortune 500 enterprises. They are venture-backed by leading investors and focus on a customer-obsessed, remote-first culture with a team of unique backgrounds.

• Secure AI systems and use AI to scale security, conducting security reviews and threat modeling of AI-integrated product features.
• Deliver end-to-end application security reviews for high-risk features, working directly with engineering teams to surface and close risk.
• Advance CI/CD pipeline security by operating and evolving security scanning controls in GitLab pipelines.

Smartsheet empowers teams to manage work and scale solutions by uniting human teams with AI agents. They are a large company with over 20 years of experience, fostering a culture where ideas are heard and contributions have real impact.

• Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement.
• Lead triage and technical validation of incoming reports across multiple intake channels, driving end-to-end vulnerability remediation.
• Collaborate with the Security Incident Response Team on active incidents and perform targeted code reviews.

Mozilla Corporation is a non-profit-backed technology company that has shaped the internet for the better over the last 25 years. With over 225 million people using our products monthly, we are a mission-driven organization focused on privacy, open-source software, and reclaiming the internet for people.

• Lead the product team to design and deliver autonomous endpoint management solutions, integrating AI to tackle vulnerabilities across Windows, macOS, and Linux.
• Drive product operations and process excellence, refining the development lifecycle to enable high-velocity delivery without chaos.
• Build high-trust partnerships with Engineering and cross-functional teams to align product strategy with business outcomes and go-to-market integration.

Automox is a cloud-native IT operations platform that replaces traditional tools with an award-winning endpoint management platform. With over 2,500 customers including NASA, Yale, and Xerox, they foster a 'one team' culture focused on collaboration and ownership.

• Own the roadmap for Pulumi Cloud's platform services, partnering with engineering leadership to balance long-term bets and customer pull.
• Define what agent-ready means for a control plane, including secrets, RBAC, audit, and safe automation.
• Drive the ESC roadmap and treat the API as a first-class product for platform teams and agents.

Pulumi provides a cloud infrastructure platform that helps teams build, secure, and operate modern cloud applications using real programming languages. With a remote-first culture and a global community of over 350,000 members, Pulumi serves 3,250+ customers and values innovation and collaboration.

• Design and ship supply chain exception management capabilities in partnership with engineering and data science teams.
• Build relationships with supply chain leaders and customers through design programs and product advisory councils.
• Drive cross-company outcomes by integrating supply chain operations with broader enterprise functions like finance and manufacturing.

ServiceNow is the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter. The company builds an AI-native culture where technology and talent are unstoppable together, with a focus on freeing people from busywork.

• Drive product discovery and research to inform direction in the digital forensics space.
• Collaborate cross-functionally throughout the product lifecycle to deliver user-centric features.
• Use data to inform decisions and champion user needs while balancing business goals.

Binalyze is a cybersecurity company focused on automated incident response and digital forensics. It offers a remote-first, collaborative environment with a culture of innovation and continuous improvement.