Source Job

• Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
• Build automation, policy-as-code, and security tooling to enable development teams to shift left and integrate security into workflows.
• Design and implement secure baselines for cloud resources and Kubernetes-based infrastructure, and drive vulnerability management efforts.

Wiz is a cloud security company enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime. As one of the fastest-growing startups, trusted by over 65% of the Fortune 100, Wiz values world-class talent and creativity.

• Improve security design and controls within GCP and Kubernetes.
• Champion secure development by integrating security best practices early into the software development lifecycle.
• Build and automate security tooling for vulnerability detection, remediation, and compliance verification.

Virta Health is a healthcare company that reverses type 2 diabetes and obesity through individualized nutrition and clinical support. They have raised over $350 million from top-tier investors and partner with major health plans, employers, and government organizations.

• Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.
• Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
• Partner with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.

Supabase is the Postgres development platform, providing a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. With over 540,000 community members and having raised over $1B, our globally distributed team of ~400 people operates across 60+ countries with deep open-source values.

• You will serve as a trusted security advisor, developing and implementing cybersecurity strategies aligned with business objectives.
• You will design and implement advanced security controls, including SIEM, DLP, IDS/IPS, and identity management solutions.
• You will lead secure architecture and integration projects across Microsoft cloud, AWS, GCP, and other platforms.

A partner company provides cybersecurity consulting services, helping organizations strengthen their security posture across cloud and enterprise technologies. They operate in a collaborative remote environment and seek independent, disciplined professionals.

• Design and build secure CI/CD pipelines with integrated security tooling to accelerate product delivery.
• Harden cloud infrastructure on AWS and Azure using infrastructure-as-code and enforce policy with OPA or Sentinel.
• Lead threat modeling, incident response, and mentor engineers on secure coding and operational security.

PAR Technology provides software and hardware solutions for over 100,000 restaurants in 110+ countries. A publicly traded company with a focus on innovation and collaboration, it fosters a culture of continuous improvement.

• Design, implement, and maintain security controls across AWS environments, including IAM, VPC, encryption, and logging.
• Integrate security checks into CI/CD pipelines and harden Kubernetes/EKS workloads using Terraform and policy-as-code.
• Automate vulnerability management, security monitoring, and incident response to reduce cloud and application risk.

Electric Power Engineers provides consulting expertise and energy intelligence software solutions for power and energy clients, focusing on modern, secure, and resilient grid challenges. They are leaders in the renewables space and emphasize collaboration, innovation, and making an impact on communities and the environment.

• Design and enforce cloud security controls and IAM policies across multi-account AWS environments.
• Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
• Develop automated detection and remediation workflows using Python, Bash, or Go and IaC tools.

The Tripadvisor Group connects people to experiences worth sharing, aiming to be the world's most trusted source for travel and experiences. It is a publicly traded company with a global portfolio of travel brands, fostering a culture of collaboration, agility, and traveler-first mindset.

• Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization.
• Partner with DevOps and CI/CD engineers to embed shift-left security practices throughout the software development lifecycle.
• Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.

LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials straight from the browser. Trusted by more than 100,000 businesses and millions of users worldwide, they blend strong security with everyday simplicity in a remote-first, collaborative culture.

• Design and build security for future infrastructure, partnering with engineering and compliance teams.
• Lead AI-native security initiatives, designing autonomous agents for threat detection and incident response.
• Devise defense-in-depth frameworks, research threats, and maintain KPIs for a healthy cloud security program.

WeightWatchers is a global digital health company that blends science and community to help millions build sustainable healthy habits. The engineering team drives transformative change through technology, with a culture that thrives on urgency, collaboration, and passion for impactful work.

• Design and strengthen security features across Pigment's product and infrastructure, threat modeling new services and making architectural decisions.
• Lead security investigations and incident response, manage vulnerability detection and remediation, and build detection engineering capabilities.
• Drive the security roadmap end-to-end, working hands-on with code and infrastructure to balance risk and business benefit.

Pigment is an AI-powered business planning and performance management platform. Founded in 2019, the company has over 600 employees and has raised nearly $400M, recognized as a Gartner Visionary.

• Build and maintain security infrastructure across AWS and Kubernetes, including telemetry pipelines, cryptographic material lifecycle, and compliance automation.
• Engineer agentic AI workflows using tools like Claude Code and MCP integrations to automate security tasks such as code review and drift detection.
• Develop threat models and embed security controls into deployment pipelines to prevent vulnerabilities at build time.

Lumin Digital provides cloud-native digital banking solutions for credit unions and banks. The company fosters a culture of trust, respect, and boldness, encouraging innovation and collaboration in a fully remote, async-first environment.

• Architect and automate security workflows across CI/CD and compliance operations.
• Integrate and monitor security tooling within automated pipelines.
• Build automation for compliance and ATO artifacts.

Our partner is a technology company that builds secure, automated cloud environments for mission-critical programs. They offer a fully remote work model with a focus on autonomy and work-life balance.

• Design and implement secure, scalable, and highly available AWS cloud solutions.
• Automate infrastructure provisioning and deployment using Terraform and GitLab CI/CD.
• Work closely with international Agile teams to drive cloud architecture and DevSecOps practices.

Sopra Steria is a leading European technology consulting and digital transformation company, supporting public and private organizations with over 50,000 employees across nearly 30 countries. They foster an inclusive and respectful work environment focused on helping clients build resilience and create lasting value through technology.

• Drive the performance, stability, security, and reliability of production environments with a focus on automation and proactive improvements.
• Design and maintain infrastructure using Infrastructure as Code tools like Terraform, and manage Kubernetes and cloud environments.
• Lead vulnerability management, incident response, and secure CI/CD practices to ensure resilience and operational excellence.

Jobgether is a platform that uses AI-powered matching to connect candidates with hiring companies. It processes applications and shares shortlists with employers, offering a remote-first and inclusive work environment.

• You will own end-to-end data protection: architecting security infrastructure, managing PCI/SOC2 programs, and setting the security roadmap.
• You will integrate security scanning (SAST, DAST, SCA) into CI/CD pipelines and harden containerized and cloud-native environments.
• You will configure IAM and SSO platforms, manage EDR/DLP/SIEM tooling, and run security awareness training.

Campminder builds software for summer camps, enabling meaningful experiences for kids. With over 100 employees, they are stable, profitable, and have a values-led culture committed to work/life balance.

• Design, implement, and manage scalable cloud infrastructure solutions using Azure and AWS.
• Develop and maintain infrastructure as code with Terraform and manage Kubernetes containerized workloads.
• Build CI/CD pipelines and apply site reliability engineering practices to improve system reliability and performance.

They specialize in cloud infrastructure and DevOps solutions for enterprise applications. The company operates with a distributed team and offers a flexible, fast-paced work environment.

• Collaborate with DevOps and engineering teams to embed security throughout the software development lifecycle.
• Implement automated security testing, including SAST, DAST, SCA, and container security, and strengthen cloud-native security controls.
• Support compliance with PCI-DSS, GDPR, CCPA, and SOC 2, and evaluate secure adoption of AI-assisted coding tools.

Our partner is a technology company in the travel and hospitality industry. They have a collaborative remote culture and value employee development and diversity.

• Designs, engineers, and automates secure enterprise cloud environments supporting mission-critical government workloads.
• Provides technical leadership across AWS GovCloud, cloud architecture, infrastructure automation, container platforms, and CI/CD.
• Develops standardized hosting models and integrates AWS IaaS, PaaS, and SaaS capabilities with enterprise applications.

True Zero Technologies is a veteran-owned small business that enables people and technology to drive quality outcomes. With a people-first culture, it has been recognized as a Best Place to Work in 2023 and 2025, and made the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025.

• Monitor security solutions and investigate potential incidents to protect cloud, infrastructure, and applications.
• Conduct vulnerability assessments, penetration testing, and security audits to strengthen security posture.
• Collaborate with development teams to identify risks and implement effective security controls.

The partner company offers services aimed at improving emotional wellness and access to care. It fosters a collaborative culture with a focus on continuous learning, innovation, and professional development, and values diversity and inclusion.

• Design, build, and maintain CI/CD pipelines for application and infrastructure delivery.
• Automate infrastructure provisioning and configuration using Terraform and Ansible.
• Integrate security scanning, vulnerability detection, and automated testing into software delivery pipelines.

This company delivers secure, reliable technology for critical federal acquisition systems. They offer a remote work environment and support mission-critical government technology initiatives.