Own and mature internal and Managed GRC programs, including federal SSPs, POA&Ms, audits, and risk assessments.
Collaborate with CISOs, engineers, and control owners to translate compliance requirements into practical technical controls.
Lead and develop a GRC team while introducing automation and AI to improve scalability and consistency.
The company provides managed Governance, Risk & Compliance (GRC) and security assurance services, with a strong focus on federal security programs and frameworks like NIST, SOC 2, and CMMC. It supports a growing GRC team and emphasizes low-ego collaboration, automation, and AI-enabled approaches to scale delivery.
Design, build, and maintain production features with a strong product security focus.
Own vulnerability response from initial triage through coordinated disclosure and patched releases.
Conduct threat modeling and security-sensitive design reviews to help engineers make informed security decisions.
This company builds cloud-native infrastructure software with a strong focus on Kubernetes security. They operate as a remote-first, globally distributed team that values engineering ownership and autonomous work.
Hunt for emerging exploitation activity and attacker infrastructure across VulnCheck's data.
Turn discoveries into durable detections including rules, queries, and tooling.
Investigate payloads and post-exploitation activity and produce threat intelligence.
VulnCheck provides structured exploit intelligence on actively weaponized vulnerabilities, built for automation and AI workflows. Founded in 2021, the company has a collaborative and supportive culture with a team of cybersecurity experts.
Dissect and outmaneuver sophisticated cyber attack techniques across endpoint and cloud environments.
Translate complex threat research into scalable detection recommendations and engineer attack code.
Collaborate with detection engineers, intelligence analysts, and threat hunters to prioritize and refine deliverables.
Zscaler provides a cloud security platform that securely connects users to applications, protecting customers from cyberattacks and data loss. It is the world's largest in-line cloud security platform with an AI-native culture.
Implement and maintain AWS security configurations across development, staging, and production environments.
Operate SAST, DAST, and SCA tools integrated into CI/CD pipelines to remediate vulnerabilities.
Support compliance efforts such as SOC 2 Type II and ISO 27001 audits and improve security processes.
Pacvue is a leading software suite for eCommerce advertising, sales, and intelligence, helping brands grow on Amazon, Walmart, Instacart, and other marketplaces. The team is energetic, passionate, and focused on innovation, with a mission to help brands and sellers succeed.
Protect cloud infrastructure, applications, and customer data across a modern technology environment.
Identify and remediate vulnerabilities directly in application repositories and infrastructure code.
Build and tune SIEM detections, strengthen AWS security controls, and lead incident response.
Cloudbeds is a hospitality technology company providing cloud-based management solutions for lodging businesses. It operates as a remote-first organization with a globally distributed team across 40+ countries and a small, senior security team.
Design, harden, and defend containerized application infrastructure across edge and cloud environments.
Lead threat modeling, vulnerability management, and security reviews to support mission-critical systems.
Own provisioning, secrets management, and security controls for systems operating in denied or disconnected environments.
CX2 is a next-generation defense technology company building AI-enabled hardware and software platforms to detect, disrupt, and defend the electromagnetic spectrum. Backed by leading defense investors and led by founders from Meta, SpaceX, Epirus, and the DoD, the company values high responsibility and autonomy.
Lead Atmosera's internal GRC program and managed GRC service delivery.
Manage federal System Security Plans, POA&Ms, and audit responses.
Serve as a senior GRC advisor bridging executive and technical teams.
Atmosera empowers businesses to redefine what's possible with modern technology and human expertise across Applications, Data & AI, DevOps, Security, and Microsoft Azure. As a Microsoft Partner with seven specializations, the company values humility, hunger, and mindfulness in a collaborative team environment.
Lead and develop a high-performing customer-facing team of threat hunters and MDR specialists.
Serve as senior escalation point for customer security teams during active intrusions and complex investigations.
Manage recurring customer engagements translating threat intelligence into actionable guidance.
Zscaler is a cloud security company that accelerates digital transformation with its Zero Trust Exchange platform, protecting customers from cyberattacks. With thousands of customers globally, Zscaler fosters a culture of ownership, collaboration, and innovation.
Deploy, configure, and operate Axonius Asset Cloud for risk-based vulnerability management.
Build unified asset inventories, prioritization models, and automated remediation workflows.
Support security platform operations and automation to drive risk reduction.
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations minimize risk. With over 1,300 employees and strong core values, it serves more than 6,200 customers.