Build and harden secure CI/CD pipelines with automated security gates to catch issues before production.
Lead security architecture reviews and threat models for Kubernetes-based workloads on GCP and AWS.
Implement software supply chain security controls including signed artifacts, SBOMs, and provenance attestation.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. The company is venture-backed by leading investors and serves Fortune 500 enterprises including Anduril, Canva, and OpenAI.
Design and implement software supply chain security controls across build and release pipelines.
Secure GitHub and GitLab environments, implement SBOM generation, and integrate vulnerability scanning into CI/CD.
Align security practices with SLSA, NIST SSDF, and NIST SP 800-218 while collaborating with security and engineering teams.
New Era Technology securely connects people, places, and information with end-to-end technology solutions at scale. With a global team of over 3,000 professionals, it fosters a team-oriented culture focused on personal and professional development.
Set product security direction across major products and platforms, leading cross-functional initiatives.
Embed security by design into roadmaps and engineering work, with high autonomy.
Drive security assurance programs and mentor engineers across the organization.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.
Design and build paved paths for privileged access and secrets management on top of access management and secret storage platforms.
Build self-service tooling, SDKs, and Terraform modules to enable just-in-time access and short-lived credentials.
Partner with engineering teams to integrate security services into Kubernetes, CI/CD, and cloud environments across DoorDash, Wolt, and Deliveroo.
DoorDash is a technology and logistics company that operates a multi-sided marketplace connecting consumers, merchants, and dashers. They are building a large, inclusive team focused on empowering local economies.
Design, build, and operate security engineering services in Go and Python on AWS and Kubernetes.
Own the event-driven NATS platform connecting security services, ensuring delivery guarantees and observability.
Build agentic security workflows and CI security gates (SAST, SCA, secret detection) that are trusted by default.
Sezzle is a fintech company that offers interest-free installment plans and aims to financially empower the next generation. It is building an innovative, dynamic team of engineers and data enthusiasts with a culture that values unique, purpose-driven individuals.
Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
Implement automated vulnerability scanning for Docker images and dependencies.
Secure Kubernetes workloads and enforce security policies throughout the CI/CD lifecycle.
Gcore is a global provider of infrastructure and software solutions for AI, cloud, network, and security. With 550+ professionals and 210+ edge locations, we build the foundation that connects the world to AI.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Secure and operate AWS and Kubernetes environments supporting Chainalysis products and AI platforms.
Troubleshoot production issues, ship Terraform and Kubernetes changes, and strengthen infrastructure security controls.
Collaborate across infrastructure, security, and AI teams, and participate in on-call to drive fixes to completion.
Chainalysis is a blockchain data platform that helps governments and businesses investigate illicit activity and manage risk through data, services, and solutions. The global company values diversity, innovation, and AI-driven work, with employees and customers around the world.
Own and strengthen security across the product stack, partnering with engineering throughout development.
Build security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
Lead security reviews, threat modeling, and drive security compliance programs and incident response.
Early-stage B2B identity and access management company focused on building secure product systems. Small, collaborative team seeking its first dedicated security engineer to help grow the security function.
Design, develop, and optimize automated CI/CD pipelines for enterprise applications, microservices, and infrastructure workflows.
Integrate DevSecOps practices including automated security testing, compliance controls, and vulnerability remediation.
Collaborate with cloud, development, and security teams to support containerized workloads on AWS and Kubernetes.
They are a mission-driven technology partner focused on modernizing critical government systems and strengthening secure, reliable digital services. They hire through Jobgether and work with multidisciplinary teams across software engineering, cloud infrastructure, cybersecurity, and operations.
Harden AWS infrastructure using Terraform and Go, designing account structure, IAM, network segmentation, and KMS.
Secure Kubernetes clusters with admission policies, RBAC, network policies, and runtime controls.
Engineer cloud detections, guardrails, and just-in-time access while responding to incidents and teaching engineers.
Qualia builds the leading B2B real estate technology that transforms home buying and selling into a simple, secure, and enjoyable process. They're a growing, mission-driven team committed to supporting employees with flexible work and comprehensive benefits.
Work on client consulting projects to design and implement cloud native security architectures across AWS, GCP, and Azure.
Contribute to internal labs and open source projects, with a focus on threat modelling, supply chain security, and DevSecOps practices.
Collaborate with a team of SANS authors and engineers to deliver pragmatic security solutions for highly regulated industries.
ControlPlane is a London-based consultancy specialising in cloud-native, Kubernetes, and open source solutions, helping organisations secure complex cloud infrastructures with secure-by-design principles. As a successful start-up, we are a dynamic, cutting-edge, and passionate team that values employee wellbeing, progression, and open source community engagement.
Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.
Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.
Conduct hands-on penetration testing and security assessments for Kubernetes and cloud-native products.
Own vulnerability management from discovery through patch development, release, and verification.
Guide secure engineering practices and threat modeling across the product lifecycle.
They build next-generation Kubernetes and AI infrastructure for organizations operating at scale. The company is fast-growing, open-source-oriented, and values ownership, technical excellence, and measurable impact.
Design and build security guardrails, automation, and detection across AWS, GCP, and Azure.
Secure IaC, CI/CD pipelines, and software supply chain with policy as code and least-privilege IAM.
Partner with platform, infrastructure, and compliance teams to drive security findings to remediation.
Tessera Labs is a technology company focused on securing cloud infrastructure across AWS, GCP, and Azure. The culture emphasizes a DevOps mindset, automation, and close collaboration with engineering and compliance teams.
Partner with engineering to identify and mitigate security risks before launch, building secure frameworks and libraries that make control adoption easy.
Own identity and secrets management, including credential issuance, rotation, and workload authentication across cloud and Kubernetes environments.
Harden cloud security controls and build security models for AI agents with permission boundaries and tenant isolation.
Fieldguide builds software that automates assurance and audit work for cybersecurity, privacy, and financial audits, helping businesses enable trust. They are a remote-first company backed by top investors and trusted by over 50 of the top 100 accounting and consulting firms, with a values-driven culture.
Design, build, and maintain minimal, hardened container images across Linux distributions and application runtimes.
Own end-to-end CVE remediation across OS packages, libraries, and dependencies, including patching and validation.
Build automated pipelines for image builds, vulnerability scanning, testing, and publishing.
RapidFort is a cybersecurity company focused on container image security and software supply chain protection. It is a rapidly scaling remote-first startup offering career growth in Linux, container, and security challenges.
Design, build, and operate scalable, secure microservices powering Cyderes' security platform with minimal oversight.
Deploy to AWS, GCP, or Azure with Terraform and run containerized workloads on Docker and Kubernetes.
Improve automated testing and CI/CD, review code, and mentor teammates while keeping security in mind.
Cyderes builds practical Identity & Access Management (IAM), Exposure Management, and risk programs, providing Managed Detection & Response (MDR) powered by its Meridian entity fabric. It is a Great Place to Work-Certified global team that helps organizations stop active threats fast with people, platforms, and perspectives.
Design and implement secure-by-default workflows for cloud production environments.
Strengthen Kubernetes, CI/CD security, and identity management across the platform.
Collaborate with engineers to improve reliability, observability, and disaster recovery.
The hiring company is a remote-first platform organization focused on building reliable infrastructure and protecting sensitive data across multiple countries. Their culture emphasizes collaboration, developer experience, and evidence-based assessment.
Own the technical direction for NodeZero container image build, signing, scanning, and OTA delivery.
Design and operate CI/CD pipelines, image hardening, and release engineering standards at scale.
Mentor engineers and drive architecture decisions across team boundaries for secure product delivery.
Horizon3 is a fast-growing, remote cybersecurity company that helps organizations proactively find, fix, and verify exploitable attack vectors. The team is a fusion of former special operations cyber operators and engineers, focused on respect, collaboration, and results.