Lead technical initiatives to strengthen engineering security across Aiwyn's SaaS platform, CI/CD pipelines, and software delivery systems.
Own vulnerability management, threat modeling, and product security, partnering with engineering teams to build secure-by-default practices.
Drive supply chain security, AI security, and security strategy to make security a shared responsibility across engineering.
Aiwyn builds the first complete platform for modern accounting firms, replacing legacy practice management systems with software firms can trust. Backed by top-tier investors, it works with the majority of the Top 500 accounting firms and fosters a culture of ownership, trust, and relentless innovation.
Partner with engineering and product teams to review architecture, assess security risks, and drive secure-by-default practices.
Build and maintain security tooling, automate workflows, and strengthen application security across the SDLC.
Lead cross-functional security projects, promote security awareness, and support bug bounty and vulnerability research.
They are a remote-first security company that helps organizations identify and address vulnerabilities before they become serious threats. The team is collaborative and fast-paced, valuing initiative, continuous learning, and diverse perspectives.
Own and scale the vulnerability management program, including triage, prioritization, and remediation.
Embed security into the SDLC by integrating automated gates, threat modeling, and design reviews.
Drive cross-team security initiatives and mentor engineers to improve overall posture.
Figure is a blockchain-native capital marketplace for the origination, funding, and trading of tokenized assets. It has over 480 partners, has originated $30 billion in loans, and is recognized as a top fintech company.
Partner closely with engineering to refine architecture and drive security investment while prioritizing velocity.
Build secure 'paved roads' and tooling to eradicate entire vulnerability classes, not just fix bugs one by one.
Own cross-functional product security projects end to end, and amplify impact through automation and feedback loops.
Bugcrowd is a preemptive security platform that unifies exposure discovery and assessment, offensive testing, and AI-driven intelligence to help organizations avoid real-world risk. Founded in 2012 and based in San Francisco, Bugcrowd is a VC-backed company with a diverse, inclusive culture where people feel like family.
Partner with product teams to ensure security is embedded throughout the product development lifecycle.
Conduct threat modeling, architecture reviews, and source code analysis to identify and mitigate vulnerabilities.
Automate security processes and drive cross-team projects to closure.
Affirm exists to give people a clear, predictable way to pay over time with no hidden fees, building honest financial products. It is a remote-first company that values information security, transparency, and flexibility, with a strong culture of care.
Threat model token exchange, delegation, and MCP gateway flows to catch credential leaks.
Build automated security controls for cloud, pipelines, and artifacts; keep credentials short-lived.
Own incident response and customer security reviews, working with engineers who know the field.
Keycard builds identity and access infrastructure for AI agents, issuing verified, short-lived credentials. It is a remote-first startup backed by a16z, Boldstart, and Acrew, founded by Snyk, Auth0, HashiCorp, and Heroku alumni.
Set the technical vision for security stack across endpoint, email, data loss prevention, vulnerability management, network, application, and data security.
Define long-term cloud and identity security strategy across AWS and Microsoft Azure, including privileged access, phishing-resistant MFA, and governance of non-human identities.
Lead security architecture review, threat modeling, DevSecOps strategy, and serve as senior escalation point for complex security incidents.
Imagine Pediatrics is a tech-enabled, pediatrician-led medical group reimagining care for children with special health care needs. They deliver 24/7 virtual-first and in-home medical, behavioral, and social care, working alongside families and providers to break down barriers to quality care.
Conduct hands-on penetration testing and security assessments for Kubernetes and cloud-native products.
Own vulnerability management from discovery through patch development, release, and verification.
Guide secure engineering practices and threat modeling across the product lifecycle.
They build next-generation Kubernetes and AI infrastructure for organizations operating at scale. The company is fast-growing, open-source-oriented, and values ownership, technical excellence, and measurable impact.
Producing security architecture designs and threat models for internal and customer-facing systems.
Conducting risk assessments and assurance documentation to support governance and accreditation.
Collaborating with architects, engineering, and cyber security teams to embed security by design.
NEC Software Solutions, part of NEC Corporation, builds software supporting critical public services like ambulance dispatch and rail operations. With 3,000+ employees, it values pragmatism, collaboration, and continuous improvement.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.