Build, deploy, and continuously improve MITRE ATT&CK–aligned detections across cloud, endpoint, identity, email, and application telemetry with clear false-positive thresholds.
Own the full detection lifecycle from hypothesis and data validation through deployment, tuning, and retirement.
Advance the detection-as-code platform with version control, peer review, automated testing, CI/CD, and improved pipeline reliability and observability.
Samsara is the pioneer of the Connected Operations™ Cloud, helping organizations that depend on physical operations to harness IoT data for actionable insights. They are a recently public company with a high-caliber team, embracing a flexible working model that supports remote and hybrid work.
Own and run bug bounty programs and external audit engagements, triaging and validating fixes.
Secure code and software supply chain, including CI/CD defenses, dependency controls, and signing.
Build anti-scam, anti-abuse, and security tooling with static/dynamic analysis and LLM-driven agents.
Mysten Labs builds foundational blockchain infrastructure and products, including Sui and Move, to advance the internet and enable the agent economy. It is a remote-first, world-class team backed by a $300M Series B from leading venture funds.
Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.
Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins, combining custodial wallets, payment orchestration, and issuance. As a 40-person startup, we operate through our own regulated entities with built-in compliance and risk controls.
Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
Partner with DevOps on paved roads for secure-by-default development and lead incident response.
Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.
Own the configuration, tuning, and management of our SIEM solution to diagnose unusual threats.
Perform architecture reviews, code reviews, and penetration testing on web and mobile apps.
Build and maintain vulnerability management CI/CD pipeline and collaborate with engineering teams.
Engine is the AI-native platform for intelligent travel, serving over 38,000 customers and nearly 2 million travelers. Recognized as one of Fast Company's Best Workplaces for Innovators (2025) and Built In's Best Places to Work (2020–2026), we have a culture of exponential growth and high-caliber colleagues.
Own the security program end-to-end, covering CorpSec, SecOps, compliance, and tooling.
Drive SOC 2 audits, manage identity and access, and build detection and observability with Datadog and SentinelOne.
Operate as a hands-on zero-to-one operator on a small team with high autonomy and real ownership.
Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors, Kodex supports over 15,000 government agencies in 190 countries and operates as a fast-growing Series A company with a small, high-autonomy team.
Design, build, and operate security engineering services in Go and Python on AWS and Kubernetes.
Own the event-driven NATS platform connecting security services, ensuring delivery guarantees and observability.
Build agentic security workflows and CI security gates (SAST, SCA, secret detection) that are trusted by default.
Sezzle is a fintech company that offers interest-free installment plans and aims to financially empower the next generation. It is building an innovative, dynamic team of engineers and data enthusiasts with a culture that values unique, purpose-driven individuals.
Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.
Support incident response, remediation, and recovery activities.
Pragmatike recruits for major international organizations, specializing in cybersecurity and cloud enterprise security. They operate a global 24/7 Cybersecurity Operations Centre with a team of security specialists across different regions.
Lead detection and response strategy for Apollo's Security team, building detection systems and response automations hands-on.
Own detection architecture, security observability, and incident response readiness across cloud and SaaS environments.
Drive AI-augmented detection and response, measuring gains in speed, coverage, and signal quality.
Apollo.io is a leading go-to-market platform for revenue teams, providing verified contact data and engagement tools for over 500,000 companies. Founded in 2015, it has raised ~$250M, is valued at $1.6B, and fosters an AI-native culture of continuous improvement.
Lead security incident response end-to-end across cloud, identity, and workload logs.
Build and tune SIEM detections in Datadog across AWS, Kubernetes, and Google Workspace.
Automate detection and response tasks using Python and Terraform, and mentor engineers.
Loadsmart is a logistics technology company reinventing freight by helping shippers, brokers, warehouses, and carriers move more with less. It is a growth-stage tech unicorn valued at over $1 billion, with a globally distributed remote team.
Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.
Support incident response, remediation, and recovery activities while collaborating with global cybersecurity teams.
Pragmatike is a recruitment firm that recruits on behalf of major international organizations in the cybersecurity and cloud security space. They are committed to a fair, transparent, and inclusive recruitment process, fostering a culture of diversity and global collaboration.
Contribute to the development, tuning, and maintenance of security monitoring and detection capabilities across SIEM, EDR, and cloud platforms.
Support the onboarding, integration, and testing of security data sources and telemetry feeds.
Collaborate with threat intelligence and incident response teams to translate requirements into effective detection mechanisms.
Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, they are committed to delivering impactful, future-ready solutions.
Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.
n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.
Own identity and endpoint security, including access management, device standards, and risk assessments.
Administer SSO, enforce MFA, manage MDM/EDR, and automate security workflows.
Act as a first responder for incidents, conduct vendor reviews, and build scalable security processes.
Squads is a financial technology company building products and APIs for the stablecoin economy. More than 450 teams use Squads Multisig to secure over $10 billion in value.
Co-own day-to-day operation, triage, and tuning of the enterprise endpoint security environment.
Evolve zero trust systems and write clear runbooks in partnership with Security Operations.
Mentor engineers to grow security knowledge and act as a technical subject matter expert.
Samsara is the pioneer of the Connected Operations Cloud, enabling physical-operations industries to harness IoT data for actionable insights. A recently public company, it offers autonomy and support with a collaborative, long-term-focused culture.
Identify and respond to security incidents on a global scale.
Act as incident commander to drive incidents through the entire response lifecycle.
Design and maintain security alerts, automated actions, playbooks and escalation workflows.
Mozilla Corporation is a non-profit-backed technology company that makes pioneering brands like Firefox and focuses on AI, social media, security, and more. With over 225 million monthly users, Mozilla is wholly owned by the Mozilla Foundation and strives to reclaim an internet built for people.
Provide technical and operational leadership for a Security Operations Center, monitoring threats and driving incident response.
Design and develop security tools and platforms to improve detection, response, and operational efficiency.
Mentor early-career engineers and contribute to open source security projects and industry conferences.
Jobgether uses AI-powered matching to help candidates find jobs. The company operates a fully distributed, remote-first environment with in-person team events.
Build and maintain first-party integration connectors between NodeZero and customer security platforms like CrowdStrike, SentinelOne, and Splunk.
Design integration schemas and data mappings, and write documentation that enables customers to configure integrations without support calls.
Diagnose and resolve integration failures, working with the Integrations Platform team to ensure connectors are built on shared infrastructure.
Horizon3 is a cybersecurity company that provides autonomous pentesting through its NodeZero platform to help organizations proactively find and fix attack vectors. The company is a remote team of former U.S. Special Operations cyber operators and engineers, fostering a culture of respect, collaboration, and ownership.
Mature and lead Security & Threat Operations, setting the operating model and roadmap for threat detection, investigation, and incident response.
Own detection engineering, monitoring, digital risk, exposure management, and security controls across AWS and corporate environments.
Act as Incident Commander during significant security incidents and partner with engineering, DevOps, and product teams to drive defensive improvements.
DriveWealth is a global B2B fintech that democratizes investing through an API-powered trading platform. The company blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street.
Implement and improve preventive security controls across enterprise systems, translating security requirements into operational protections.
Build and maintain security automation using Python, Go, APIs, and Terraform to enforce controls and reduce manual work.
Partner with security, IT, and platform teams to validate controls, troubleshoot complex implementations, and drive security improvements.
Databricks is the data and AI company, providing a unified platform to build and scale data and AI applications, analytics, and agents. With 20,000+ organizations worldwide and offices in 30+ locations, it fosters a diverse and inclusive culture.