Design and build security guardrails, automation, and detection across AWS, GCP, and Azure.
Secure IaC, CI/CD pipelines, and software supply chain with policy as code and least-privilege IAM.
Partner with platform, infrastructure, and compliance teams to drive security findings to remediation.
Tessera Labs is a technology company focused on securing cloud infrastructure across AWS, GCP, and Azure. The culture emphasizes a DevOps mindset, automation, and close collaboration with engineering and compliance teams.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.
Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.
Conduct original offensive research against Dia, including prompt injection, sandbox escape, and cross-profile data access.
Threat model new surfaces with engineering teams and review features before they ship.
Build automated vulnerability discovery systems, including fuzzing and AI-assisted hunting pipelines.
The Browser Company is building a better way to use the internet, with a focus on an AI-powered browser called Dia. They are a remote-first team of nearly 100 people who value diversity and craft.
Drive customer success and adoption by leading technical engagements across Armis and ServiceNow Security products.
Provide architectural guidance on Armis integrations with ServiceNow SecOps, CMDB, ITOM, Vulnerability Response, and OT Security.
Act as a trusted technical advisor for strategic accounts, improving security posture and operational resilience.
ServiceNow is the AI control tower for business reinvention, helping 85% of the Fortune 500 work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together.
Partner with Fortune 500 customers to address security concerns and accelerate platform adoption.
Develop security reference architectures and perform threat modeling for ServiceNow products and AI services.
Lead security deep dives covering cloud-native architectures, identity, encryption, and AI security controls.
ServiceNow is an AI platform that helps enterprises automate workflows and reinvent business processes. The company serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent work together.
Shape application security practices by integrating automated safeguards throughout the software development lifecycle.
Collaborate with Security and Engineering teams to identify vulnerabilities early and manage bug bounty programs.
Conduct threat modeling and secure code reviews for Java and Python microservices while fostering developer security ownership.
This partner company protects payment infrastructure and enables secure, scalable digital commerce. It operates as a remote-first, security-focused fintech organization with a fast-moving culture and globally distributed teams.
Automate security controls by integrating SAST, DAST, and SCA tools into CI/CD pipelines to catch vulnerabilities before production.
Define and drive a developer-friendly Secure SDLC, including threat modeling frameworks like STRIDE and security champions network.
Manage the private bug bounty program, triage reports, lower mean time to mitigation, and conduct code reviews for Java and Python microservices.
VGS is the world's leader in payment tokenization, providing the trust infrastructure for modern commerce and agentic payments. Trusted by Fortune 500 companies and innovative fintechs, VGS stores over 9 billion tokens and processes 10 billion monthly interactions, with a remote-first culture that values curiosity, ownership, collaboration, and continuous learning.
Own customer security reviews, compliance programs (SOC 2, ISO 27001), and audits with AI-assisted workflows.
Evaluate security requirements, vendor risks, and compliance gaps, and drive remediation to completion.
Build scalable processes, automation, and self-service resources to reduce repetitive GRC work.
A fast-moving technology company building scalable GRC and security processes in a remote-first environment. The organization values autonomy, ownership, and AI-powered efficiency, with a lean team and high-impact roles.
Design and ship code security analyzers blending deterministic detection with AI-driven analysis for vulnerabilities in code and dependencies.
Own initiatives end-to-end as the directly responsible individual, from design to delivery, while mentoring intermediate engineers through review.
Extend dependency parsing, SBOM handling, and automated remediation across GitLab's security analysis platform.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to improve developer productivity and accelerate digital transformation. Trusted by over 50 million users and more than half of the Fortune 100, it fosters a high-performance culture driven by values, AI adoption, and continuous knowledge exchange.