Source Job

• Develop and maintain automated security tools and processes to identify vulnerabilities and conduct security testing.
• Design and implement secure cloud infrastructure, network architecture, and deployment processes.
• Implement security monitoring tools and processes to proactively identify and respond to security events and anomalies.

Deel is an all-in-one payroll and HR platform for global teams, aiming to unlock global opportunity for every person, team, and business. They are among the largest globally distributed companies with a team of 7,000 spanning more than 100 countries, fostering a connected and dynamic culture.

• Lead executive-level Microsoft Security discovery workshops focused on risk reduction, compliance alignment, and operational maturity
• Design and validate end-to-end architecture leveraging: Microsoft Defender XDR (Endpoint, Identity, Office 365, Cloud Apps)
• Develop multi-phase security roadmaps connecting assessment findings to prioritized initiatives and measurable business outcomes

Myriad360 aims to challenge and enable its employees to achieve great things. They foster an atmosphere of inclusion and provide an environment that enables every employee to work to the best of their ability.

• Bridge security policy and technical execution by translating organizational security requirements into practical solutions.
• Design, build, and deploy security controls across web applications, data pipelines, APIs, and Agentic AI systems.
• Implement secure-by-design practices throughout the software development lifecycle, including code-level remediations.

EnableComp offers specialty Revenue Cycle Management solutions for healthcare organizations, leveraging 24+ years of expertise and its unified E360 RCM intelligent automation platform. They are a multi-year recipient of the Top Workplaces award and recognized as Black Book's #1 Specialty Revenue Cycle Management Solution provider in 2024.

• Conduct audits of selected security controls by reviewing assessment responses and validating technical details within engineering work items.
• Interface directly with engineering teams to gather additional data, perform interviews, and assess adherence to SDL expectations.
• Develop automation, durable controls, and process improvements to support the security auditing function and the broader SDL program.

Blueprint Technologies is a technology solutions firm headquartered in Bellevue, Washington. They are unified by a shared passion for solving complicated problems, and our people are their greatest asset.

• Design and implement cloud security guardrails across AWS and GCP
• Embed policy enforcement and compliance checks directly into Terraform modules
• Conduct architecture reviews and continuously harden multi-cloud environments

Beast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson, popularly known as MrBeast. We are known for revolutionizing digital content creation, encompassing ventures that extend far beyond YouTube.

• Embed privacy-by-design principles into Docker products, services, and internal platforms.
• Partner closely with Docker engineering and product teams to integrate privacy requirements into architecture decisions, SDLC processes, and CI/CD pipelines.
• Design, develop, and maintain automated GRC and privacy workflows to support compliance monitoring, control testing, DPIAs, risk assessments, reporting, and audit readiness.

Docker makes app development easier so developers can focus on what matters. Their remote-first team spans the globe and they are passionate about innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is a trusted tool for building, sharing, and running apps.

• Take ownership of securing high-availability, low-latency systems.
• Implement and automate security controls across cloud and on-prem infrastructure.
• Enhance resilience, reduce risk, and enable business operations to run safely and efficiently.

Jobgether is a platform that helps candidates find jobs and companies find candidates. They use AI-powered matching to connect talent with opportunities, ensuring a quick, objective, and fair review process.

• Conduct security assessments and build a prioritized remediation roadmap across infrastructure and services
• Harden AWS and Kubernetes environments: IAM, network policies, workload isolation, secrets management
• Secure AI-specific attack surfaces: prompt injection defenses, PII handling in LLM pipelines, model interaction data leakage

Kiefer Tech leverages over 20 years of engineering heritage from the Green Energy sector to deliver cutting-edge AI, robotics, and enterprise solutions across Greece and the EU. They build sovereign AI infrastructure that keeps data within EU borders, respect privacy, and delivers tangible business impact.

• Design, automate, and maintain Knox’s cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP.
• Ensure secure, compliant, and repeatable deployments that support Knox’s FedRAMP-authorized, multi-tenant cloud environments.
• Implement Infrastructure as Code (IaC), observability, and security-by-design principles.

Knox runs the largest Federal managed cloud and builds and operates secure cloud and AI environments. They support critical U.S. government missions and require speed, rigor, and trust, impacting sensitive government environments at a federal scale.

• Design end-to-end cloud architectures aligned with business and technical requirements
• Architect and support application and data migrations to the cloud
• Ensure solutions meet security, compliance, and governance standards

FormativGroup operates within the critical middle layer of business technology, where applications and systems connect infrastructure to business processes. With deep technical expertise across cloud architecture, system integration, AI, and data strategy, we bridge the gap between business goals and modern platforms.

• Perform infrastructure security reviews across cloud services, network design, IAM, and platform components.
• Design and build internal security services, APIs, and tools that automate infrastructure vulnerability detection, triage, reporting, and remediation.
• Develop security automation that integrates with CI/CD, cloud control planes, and developer workflows to shift detection and remediation earlier in the lifecycle.

Webflow is building the world’s leading AI-native Digital Experience Platform as a remote-first company. They empower teams to design, launch, and optimize for the web without barriers, from entrepreneurs to global enterprises, and believe the future of the web, and work, is more open, more creative, and more equitable.

• You will review, challenge, and strengthen our systems, act as the security authority within engineering, define guardrails, and drive remediation when risks arise.
• Operating independently, you’ll build the structure and standards needed as we scale.
• Your mission is to own the company wide security strategy and architecture, ensure CIRO and SOC 2 alignment, and embed strong security practices across infrastructure, applications, and internal systems, while enabling engineering velocity.

Newton is changing how Canadians trade crypto, with the goal to make financial freedom something everyone can achieve by giving customers the tools and knowledge they need to navigate the crypto world. At Newton, you'll work with a remote team spread across Canada.

• Drive adoption of a Secure Software Development Lifecycle (SSDLC) across engineering teams.
• Implement and integrate application security tooling into CI/CD pipelines, improving vulnerability detection and remediation.
• Establish consistent threat modelling and secure design practices across new features and products.

Neko Health's mission is to deliver proactive healthcare for all, empowering members to take control of their health via technology and compassionate care. They have nearly 100 full-time engineers working across Berlin, Chamonix, Hamburg, Lisbon, Marseille, Vilnius, and Stockholm and they support a flexible workplace that prioritizes work-life balance.

• Design, implement, and operate scalable, secure CI/CD workflows and deployment strategies.
• Lead the creation and maintenance of a robust Infrastructure as Code ecosystem.
• Embed security and compliance controls across cloud platforms, pipelines, networking, and infrastructure.

Nextech is a leader in specialty healthcare technology solutions. They are committed to hiring and retaining talent, which is why they invest in their employees through competitive pay, a generous bonus structure, great healthcare, a comprehensive wellness program, and many other benefits.

• Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues
• Lead security operation functions – including vulnerability management, SAST, DAST, detection engineering, and incident response – in CI/CD and cloud-native production environments
• Integrate security into our applications throughout the software development lifecycle

They are scaling intelligence to serve humanity by training and deploying frontier models for developers and enterprises, building AI systems to power magical experiences. Cohere is composed of researchers, engineers, and designers who are passionate about their craft, and believes that a diverse range of perspectives is a requirement for building great products.

• Manage and optimize security tools such as email security, DLP, SIEM, IDS/IPS, EDR, threat intelligence platforms, and other tooling
• Design and implement AI-enabled workflows to scale enterprise security and threat operations
• Monitor and manage security alerts and incidents, analyze data, and respond to security events

Valon is building the AI-native operating system for regulated finance, starting with mortgage servicing. They are a Series C company backed by a16z, transforming industries that others have written off as too complex to innovate.

• Define and execute our security strategy from the ground up.
• Build security into AI agent systems as a first-class product feature.
• Develop and potentially commercialize security products.

Human Agency partners with organizations of all sizes to explore, design, and implement AI strategies that are secure, scalable, and human-centered. They are scaling rapidly and have a growing pipeline of opportunities that demand exceptional talent across disciplines.

• Manage and influence both physical and cyber security risk.
• Support the development and execution of the information security strategy.
• Oversee day-to-day security operations including monitoring and incident response.

Jobgether uses an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Their system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company.

• Lead end-to-end audit execution across SOC 2, ISO 27001, ISO 42001, ISO 27701, HIPAA, and GDPR and maintain year-round audit readiness.
• Build and mature Atlan's risk management program and turn abstract risk conversations into measurable metrics with clear ownership and quarterly leadership reviews.
• Integrate our GRC platform with cloud infrastructure, CI/CD pipelines, HR systems, and product engineering tooling to automate evidence collection and continuous control testing.

Atlan is building the missing context layer for data and AI, helping enterprises close the AI value chasm and finally move AI pilots into production. We are backed by world-class investors including GIC, Insight Partners, Meritech, Peak XV, and Salesforce Ventures and trusted by global enterprises like Mastercard, Workday, General Motors, Unilever and others.

• Lead the design, implementation, and governance of enterprise data security programs.
• Protect sensitive client and corporate information and ensure regulatory compliance.
• Bring deep technical expertise in cloud data security, DLP technologies, and AI security frameworks.

J.S. Held is a global consulting firm that combines technical, scientific, financial, and strategic expertise to advise clients seeking to realize value and mitigate risk. Their professionals serve as trusted advisors to organizations facing high stakes matters demanding urgent attention with staunch integrity.