Staff Security Engineer owning application, API, and supply chain security domains. Hands-on role integrating security into engineering workflows via threat modeling, tooling (SAST/SCA/DAST), automation, and risk-based vulnerability management in cloud-native environments.
Hardens and secures the OS layer for Anthropic's AI infrastructure, designing kernel-level protections, runtime enforcement, attestation, and isolation for large-scale model training environments. Requires deep Linux kernel expertise, C/systems programming, and OS security experience.
Security Engineering Intern supporting vulnerability management, IAM, cloud access controls, SIEM optimization, and CI/CD security at an AI data platform company. Requires pursuit of a CS/Cybersecurity degree, interest in cloud/data security, and basic cloud platform knowledge.
Security Engineer partnering with engineering to implement and improve security controls across AWS infrastructure and applications. Lead technical customer security reviews, enhance monitoring/detection, support SOC 2/ISO compliance, and integrate security into CI/CD pipelines. Requires 3+ years experience in security engineering.
Threat Detection Researcher developing detections and tools to protect customers from cloud, AI, and malware threats. Requires 6+ years in security/threat research, deep OS internals knowledge (Windows/Linux/macOS), Python proficiency, and cloud familiarity.
Senior Privacy Engineer building and operating privacy-by-design systems, APIs, and controls for data governance, minimization, and ML pipelines at an AI lending platform. Requires 5+ years software engineering experience and background in privacy/security domains.
Senior IAM Engineer designing, implementing, and optimizing enterprise identity and access management solutions across on-prem, cloud, and SaaS. Lead federation, LCM, RBAC, PAM, and automation with Terraform while serving as the primary SME for security and engineering teams.
Senior Security Automation Engineer building centralized security telemetry, universal identity provisioning, and agentic risk engines to enable continuous compliance, self-healing controls, and real-time risk visibility at ClickHouse. Requires strong IAM/IGA and automation experience with Python, JS/TS, or Go.
Serve as the primary contact for customer security questionnaires, contract redlining, and Trust Center management using AI tools. Requires 2-4 years in GRC/Security Operations, knowledge of SOC2/ISO/NIST/GDPR/CCPA, and strong communication skills.
Lead modernization of identity stack as technical cornerstone of Identity & Access pod, focusing on Non-Human Identity (NHI), AI agent governance, Okta/Workday integration, AWS IAM, OPA/Rego policies, and zero-trust solutions in a HIPAA-regulated healthcare environment. Requires 5+ years IAM experience with deep Okta and cloud expertise.
Build and improve detection alerts, automation, logging pipelines, and internal tooling to identify and respond to security threats at Pinterest. Requires strong incident response, SIEM, threat hunting, and scripting skills in cloud environments, plus demonstrated responsible use of AI.
Senior Application Security Engineer embedded with product and engineering teams at Monarch, a personal finance platform. Conduct AppSec reviews, SAST/DAST, vulnerability management, and AI security for LLM features on Django/Python stack. Requires 5+ years in security engineering with Python and web security expertise.
Lead security operations for a Connected TV advertising platform, including monitoring, incident response, threat hunting, automation, and embedding security into cloud infrastructure and DevOps workflows. Requires 5+ years SecOps experience, SIEM expertise, cloud security (AWS/GCP), scripting, and knowledge of security frameworks.
Lead incident response as senior commander and escalation lead for AI compute infrastructure. Build and manage 24/7 IR team and on-call program from scratch, handling cross-domain (cyber/physical/OT) incidents with executive, legal, and regulatory communications.
Mid-level GRC Engineer building automation and tooling to scale compliance for SOC 2, ISO 27001, and SOX. Hands-on role combining scripting, audit coordination, risk management, and cross-functional partnership with engineering teams.
Lead MNTN's security operations including threat detection, incident response, vulnerability management, and cloud security. Build and mature the security program in a cloud-first SaaS environment while partnering with engineering, leadership, and compliance teams.
Senior Red Team Engineer performing security assessments, vulnerability discovery, and tool development across Snowflake's cloud environments. Requires 4+ years in offensive security, cloud knowledge (AWS/GCP/Azure), and coding in languages like Python or Go; 6+ years and community contributions preferred.
Build and scale Mercor's novel identity and access management infrastructure across thousands of Slack workspaces and HR systems for a 100k+ expert network. Requires strong product engineering, large-scale distributed systems experience, and security-minded design instincts.
Senior Security Engineer on the Red Team performing offensive security, adversarial testing, and red team operations against GenAI/LLM systems, deepfake defenses, cloud infrastructure, and SaaS products. Requires 3+ years of hands-on pen testing/red team experience plus demonstrable GenAI attack experience.
Senior Software Engineer building critical Identity & Access Management features and AI security capabilities (agent workflows, authentication, authorization, RBAC) for Snowflake's cloud data platform. Requires 7+ years building large-scale distributed systems, IAM expertise, and strong CS fundamentals.
Build and own core components of KYA (Know Your Agent), a cryptographic identity substrate for AI agents using verifiable credentials, JWS, OAuth, and Merkle logs. Requires production experience shipping cryptographically correct identity systems in Python and Go.
Lead Security Engineer to own end-to-end system, network, and host security for an on-prem Kubernetes-based AI factory. Design controls, lead incident response, balance open culture with IP/customer data protection; requires 8+ years security engineering with deep Kubernetes, on-prem, and incident experience.
Senior GRC Engineer at Brex automating compliance workflows, building security tool integrations and GRC automations, implementing controls for frameworks like SOC 2/PCI/ISO, and supporting audits while translating regulatory needs into technical solutions. Requires 5+ years GRC/security engineering experience, Python/API skills, and a builder mindset for scalable automation.
Own Plaid's Security Contracts program: review security provisions in MSAs/DPAs/addenda, provide positions to Legal/GTM for negotiations, build scalable processes/playbooks, track patterns for improvements, and support questionnaires/audit calls. Requires 6+ years in security GRC/assurance with fintech experience, deep clause knowledge, and AI fluency.
Build and manage secure identity infrastructure including authentication (SSO, MFA, SAML/OAuth/OIDC) and authorization (ReBAC, RBAC, ABAC) systems for AI data platforms. Requires 4+ years in infrastructure/identity engineering with hands-on authorization frameworks like OpenFGA/Authzed and IaC tools.
Second Security Engineer at Nooks.ai, securing an AI-native sales platform and its AI agents. Own threat modeling, secure SDLC, cloud hardening, compliance (SOC 2), and novel AI security challenges (guardrails, prompt injection). Requires 4-5+ years in infosec with strong app/cloud security fundamentals; startup experience preferred.
Lead and mature GitLab's security compliance function, overseeing certifications (SOC 2, ISO 27001, FedRAMP), driving automation/AI improvements, and partnering cross-functionally to integrate GRC into business and technical processes. Requires deep frameworks expertise, team leadership, and risk-based mindset.
Principal Security Engineer responsible for setting the bar for software security excellence at Block. Defines multi-year technical strategy, leads development of high-leverage security solutions and infrastructure across business units, drives Secure by Design culture, and mentors InfoSec teams. Requires 10+ years shipping production software with 5+ years scaling security practices.
Senior Security Engineer responsible for threat modeling and securing Reddit's AI-powered products, LLMs, and agentic workflows. Build reusable security primitives, guardrails, scanners, and platform controls while partnering with AI product teams. Requires 5+ years in application/product security plus familiarity with LLM/agent risks.
Senior Security Engineer owning risk identification, threat modeling, vulnerability management, and secure architecture projects. Partners with engineering to build security culture and tools while minimizing operational friction. Requires independent ownership, software development experience, and strong collaboration skills.
Build automation and internal tooling to enforce security controls, integrate identity/cloud systems, automate compliance evidence collection, and enable self-remediation across Skydio's multi-tenant cloud and corporate environments. Requires 3+ years software/security engineering experience and strong coding skills in Python or Go.
Principal Engineer on Cloudflare's Cloudforce One threat operations team. Architect and build large-scale distributed systems for threat detection, intelligence, and abuse mitigation across the global network, Kubernetes, and edge platforms. Requires 15+ years cybersecurity and 10+ years distributed systems experience.
Lead the build-out of enterprise security (IAM, endpoint, SaaS, AI governance) at a high-growth healthcare AI company. Manage a team, architect Zero Trust controls, automate processes, and partner cross-functionally to scale security without slowing the business. Requires 8+ years security experience including 2+ years managing teams.
Lead the strategy, roadmap, and team for enterprise security at a healthcare AI company. Own IAM/Zero Trust, endpoint protection, SaaS security, automation, and secure AI adoption while partnering cross-functionally in a 0-to-1 greenfield environment.
Lead customer trust programs, security governance, metrics, and awareness at GitLab. Oversee contract reviews, questionnaires, policy development, and cross-functional partnerships to reduce sales friction and demonstrate security posture.
Build and secure Doxel's internal developer platform on GCP. Own cloud security posture, embed security into CI/CD pipelines, and drive adoption of secure golden paths across engineering teams.
Conduct original research on AI system security and privacy, develop defenses and evaluation frameworks, and translate findings into production improvements at Perplexity. Requires PhD or equivalent with publications at top security venues and deep expertise in security domains.
Staff Software Engineer on the IAM team designing, delivering, and supporting digital identity, authentication, and access systems. Requires 10+ years backend experience, deep IAM expertise, and proficiency in Go/Python/Java/TypeScript.
Support Rippling's security assurance program by managing certifications (ISO 27001, SOC 2, others), conducting vendor due diligence, evolving the ISMS, and handling audit/governance requests. Requires 5+ years in security compliance, deep knowledge of ISO/SOC standards, cloud security, policy management, and strong cross-functional communication.
Hands-on security engineer building product security guardrails, tooling, and SDLC integrations for a multi-product HR/IT/Finance platform. Requires 5+ years in product security, fluency in Python/React/DRF, and experience leading cross-team vulnerability remediation.
Hands-on staff security engineer building guardrails, tooling, and automations to secure Rippling's web applications. Requires 10+ years in product security, fluency in Python/React/DRF, and experience embedding security into SDLC and CI/CD.
Senior security engineer building and maintaining identity, secrets, and cloud security systems for AI infrastructure. Requires 5+ years experience, strong Python/Go/Rust skills, and cloud security expertise.
Build and operate secure distributed systems for secrets/key management, PKI, and machine identity across Cloudflare's global network. Requires 8+ years experience in software development, distributed systems, and security implementation.
Lead security and compliance for an AI-native banking startup. Build security tooling, manage a team of appsec engineers, own compliance (SOC 2, ISO 27001), and secure AI agent workflows.
Product Security Engineer driving threat modeling, secure code review, open-source security, SDLC tooling, and bug bounty management for Vercel's web platform built on Next.js and Node.js. Requires 5+ years securing web products with strong JavaScript/Node.js and cloud security expertise.
Security Engineer building and hardening cloud-native security controls, infrastructure-as-code, and CI/CD pipelines for a scalable platform. Requires 8+ years in infrastructure/platform security and deep expertise in AWS/GCP and Kubernetes.
Lead and scale the security engineering organization, owning IAM strategy, security tooling, and foundational security platforms that enable rapid, secure product development.
Staff Security Engineer embedded in TDI to build centralized security posture analytics, automate issue tracking and remediation, and drive AI-powered risk management across AWS, SaaS apps, and enterprise systems.
Staff-level engineer designing and building security guardrails for multi-cloud environments, translating security standards into code-driven policies. Requires 8+ years in cloud security with deep expertise in Kubernetes, IAM, and Policy-as-Code.
Lead end-to-end product security for consumer products, digital platform, and hardware devices. Drive threat modeling, penetration testing, PSIRT operations, and AI security guardrails in a regulated financial services environment.
Staff Security Engineer owning application, API, and supply chain security domains. Hands-on role integrating security into engineering workflows via threat modeling, tooling (SAST/SCA/DAST), automation, and risk-based vulnerability management in cloud-native environments.
Hardens and secures the OS layer for Anthropic's AI infrastructure, designing kernel-level protections, runtime enforcement, attestation, and isolation for large-scale model training environments. Requires deep Linux kernel expertise, C/systems programming, and OS security experience.
Security Engineering Intern supporting vulnerability management, IAM, cloud access controls, SIEM optimization, and CI/CD security at an AI data platform company. Requires pursuit of a CS/Cybersecurity degree, interest in cloud/data security, and basic cloud platform knowledge.
Security Engineer partnering with engineering to implement and improve security controls across AWS infrastructure and applications. Lead technical customer security reviews, enhance monitoring/detection, support SOC 2/ISO compliance, and integrate security into CI/CD pipelines. Requires 3+ years experience in security engineering.
Threat Detection Researcher developing detections and tools to protect customers from cloud, AI, and malware threats. Requires 6+ years in security/threat research, deep OS internals knowledge (Windows/Linux/macOS), Python proficiency, and cloud familiarity.
Senior Privacy Engineer building and operating privacy-by-design systems, APIs, and controls for data governance, minimization, and ML pipelines at an AI lending platform. Requires 5+ years software engineering experience and background in privacy/security domains.
Senior IAM Engineer designing, implementing, and optimizing enterprise identity and access management solutions across on-prem, cloud, and SaaS. Lead federation, LCM, RBAC, PAM, and automation with Terraform while serving as the primary SME for security and engineering teams.
Senior Security Automation Engineer building centralized security telemetry, universal identity provisioning, and agentic risk engines to enable continuous compliance, self-healing controls, and real-time risk visibility at ClickHouse. Requires strong IAM/IGA and automation experience with Python, JS/TS, or Go.
Serve as the primary contact for customer security questionnaires, contract redlining, and Trust Center management using AI tools. Requires 2-4 years in GRC/Security Operations, knowledge of SOC2/ISO/NIST/GDPR/CCPA, and strong communication skills.
Lead modernization of identity stack as technical cornerstone of Identity & Access pod, focusing on Non-Human Identity (NHI), AI agent governance, Okta/Workday integration, AWS IAM, OPA/Rego policies, and zero-trust solutions in a HIPAA-regulated healthcare environment. Requires 5+ years IAM experience with deep Okta and cloud expertise.
Build and improve detection alerts, automation, logging pipelines, and internal tooling to identify and respond to security threats at Pinterest. Requires strong incident response, SIEM, threat hunting, and scripting skills in cloud environments, plus demonstrated responsible use of AI.
Senior Application Security Engineer embedded with product and engineering teams at Monarch, a personal finance platform. Conduct AppSec reviews, SAST/DAST, vulnerability management, and AI security for LLM features on Django/Python stack. Requires 5+ years in security engineering with Python and web security expertise.
Lead security operations for a Connected TV advertising platform, including monitoring, incident response, threat hunting, automation, and embedding security into cloud infrastructure and DevOps workflows. Requires 5+ years SecOps experience, SIEM expertise, cloud security (AWS/GCP), scripting, and knowledge of security frameworks.
Lead incident response as senior commander and escalation lead for AI compute infrastructure. Build and manage 24/7 IR team and on-call program from scratch, handling cross-domain (cyber/physical/OT) incidents with executive, legal, and regulatory communications.
Mid-level GRC Engineer building automation and tooling to scale compliance for SOC 2, ISO 27001, and SOX. Hands-on role combining scripting, audit coordination, risk management, and cross-functional partnership with engineering teams.
Lead MNTN's security operations including threat detection, incident response, vulnerability management, and cloud security. Build and mature the security program in a cloud-first SaaS environment while partnering with engineering, leadership, and compliance teams.
Senior Red Team Engineer performing security assessments, vulnerability discovery, and tool development across Snowflake's cloud environments. Requires 4+ years in offensive security, cloud knowledge (AWS/GCP/Azure), and coding in languages like Python or Go; 6+ years and community contributions preferred.
Build and scale Mercor's novel identity and access management infrastructure across thousands of Slack workspaces and HR systems for a 100k+ expert network. Requires strong product engineering, large-scale distributed systems experience, and security-minded design instincts.
Senior Security Engineer on the Red Team performing offensive security, adversarial testing, and red team operations against GenAI/LLM systems, deepfake defenses, cloud infrastructure, and SaaS products. Requires 3+ years of hands-on pen testing/red team experience plus demonstrable GenAI attack experience.
Senior Software Engineer building critical Identity & Access Management features and AI security capabilities (agent workflows, authentication, authorization, RBAC) for Snowflake's cloud data platform. Requires 7+ years building large-scale distributed systems, IAM expertise, and strong CS fundamentals.
Build and own core components of KYA (Know Your Agent), a cryptographic identity substrate for AI agents using verifiable credentials, JWS, OAuth, and Merkle logs. Requires production experience shipping cryptographically correct identity systems in Python and Go.
Lead Security Engineer to own end-to-end system, network, and host security for an on-prem Kubernetes-based AI factory. Design controls, lead incident response, balance open culture with IP/customer data protection; requires 8+ years security engineering with deep Kubernetes, on-prem, and incident experience.
Senior GRC Engineer at Brex automating compliance workflows, building security tool integrations and GRC automations, implementing controls for frameworks like SOC 2/PCI/ISO, and supporting audits while translating regulatory needs into technical solutions. Requires 5+ years GRC/security engineering experience, Python/API skills, and a builder mindset for scalable automation.
Own Plaid's Security Contracts program: review security provisions in MSAs/DPAs/addenda, provide positions to Legal/GTM for negotiations, build scalable processes/playbooks, track patterns for improvements, and support questionnaires/audit calls. Requires 6+ years in security GRC/assurance with fintech experience, deep clause knowledge, and AI fluency.
Build and manage secure identity infrastructure including authentication (SSO, MFA, SAML/OAuth/OIDC) and authorization (ReBAC, RBAC, ABAC) systems for AI data platforms. Requires 4+ years in infrastructure/identity engineering with hands-on authorization frameworks like OpenFGA/Authzed and IaC tools.
Second Security Engineer at Nooks.ai, securing an AI-native sales platform and its AI agents. Own threat modeling, secure SDLC, cloud hardening, compliance (SOC 2), and novel AI security challenges (guardrails, prompt injection). Requires 4-5+ years in infosec with strong app/cloud security fundamentals; startup experience preferred.
Lead and mature GitLab's security compliance function, overseeing certifications (SOC 2, ISO 27001, FedRAMP), driving automation/AI improvements, and partnering cross-functionally to integrate GRC into business and technical processes. Requires deep frameworks expertise, team leadership, and risk-based mindset.
Principal Security Engineer responsible for setting the bar for software security excellence at Block. Defines multi-year technical strategy, leads development of high-leverage security solutions and infrastructure across business units, drives Secure by Design culture, and mentors InfoSec teams. Requires 10+ years shipping production software with 5+ years scaling security practices.
Senior Security Engineer responsible for threat modeling and securing Reddit's AI-powered products, LLMs, and agentic workflows. Build reusable security primitives, guardrails, scanners, and platform controls while partnering with AI product teams. Requires 5+ years in application/product security plus familiarity with LLM/agent risks.
Senior Security Engineer owning risk identification, threat modeling, vulnerability management, and secure architecture projects. Partners with engineering to build security culture and tools while minimizing operational friction. Requires independent ownership, software development experience, and strong collaboration skills.
Build automation and internal tooling to enforce security controls, integrate identity/cloud systems, automate compliance evidence collection, and enable self-remediation across Skydio's multi-tenant cloud and corporate environments. Requires 3+ years software/security engineering experience and strong coding skills in Python or Go.
Principal Engineer on Cloudflare's Cloudforce One threat operations team. Architect and build large-scale distributed systems for threat detection, intelligence, and abuse mitigation across the global network, Kubernetes, and edge platforms. Requires 15+ years cybersecurity and 10+ years distributed systems experience.
Lead the build-out of enterprise security (IAM, endpoint, SaaS, AI governance) at a high-growth healthcare AI company. Manage a team, architect Zero Trust controls, automate processes, and partner cross-functionally to scale security without slowing the business. Requires 8+ years security experience including 2+ years managing teams.
Lead the strategy, roadmap, and team for enterprise security at a healthcare AI company. Own IAM/Zero Trust, endpoint protection, SaaS security, automation, and secure AI adoption while partnering cross-functionally in a 0-to-1 greenfield environment.
Lead customer trust programs, security governance, metrics, and awareness at GitLab. Oversee contract reviews, questionnaires, policy development, and cross-functional partnerships to reduce sales friction and demonstrate security posture.
Build and secure Doxel's internal developer platform on GCP. Own cloud security posture, embed security into CI/CD pipelines, and drive adoption of secure golden paths across engineering teams.
Conduct original research on AI system security and privacy, develop defenses and evaluation frameworks, and translate findings into production improvements at Perplexity. Requires PhD or equivalent with publications at top security venues and deep expertise in security domains.
Staff Software Engineer on the IAM team designing, delivering, and supporting digital identity, authentication, and access systems. Requires 10+ years backend experience, deep IAM expertise, and proficiency in Go/Python/Java/TypeScript.
Support Rippling's security assurance program by managing certifications (ISO 27001, SOC 2, others), conducting vendor due diligence, evolving the ISMS, and handling audit/governance requests. Requires 5+ years in security compliance, deep knowledge of ISO/SOC standards, cloud security, policy management, and strong cross-functional communication.
Hands-on security engineer building product security guardrails, tooling, and SDLC integrations for a multi-product HR/IT/Finance platform. Requires 5+ years in product security, fluency in Python/React/DRF, and experience leading cross-team vulnerability remediation.
Hands-on staff security engineer building guardrails, tooling, and automations to secure Rippling's web applications. Requires 10+ years in product security, fluency in Python/React/DRF, and experience embedding security into SDLC and CI/CD.
Senior security engineer building and maintaining identity, secrets, and cloud security systems for AI infrastructure. Requires 5+ years experience, strong Python/Go/Rust skills, and cloud security expertise.
Build and operate secure distributed systems for secrets/key management, PKI, and machine identity across Cloudflare's global network. Requires 8+ years experience in software development, distributed systems, and security implementation.
Lead security and compliance for an AI-native banking startup. Build security tooling, manage a team of appsec engineers, own compliance (SOC 2, ISO 27001), and secure AI agent workflows.
Product Security Engineer driving threat modeling, secure code review, open-source security, SDLC tooling, and bug bounty management for Vercel's web platform built on Next.js and Node.js. Requires 5+ years securing web products with strong JavaScript/Node.js and cloud security expertise.
Security Engineer building and hardening cloud-native security controls, infrastructure-as-code, and CI/CD pipelines for a scalable platform. Requires 8+ years in infrastructure/platform security and deep expertise in AWS/GCP and Kubernetes.
Lead and scale the security engineering organization, owning IAM strategy, security tooling, and foundational security platforms that enable rapid, secure product development.
Staff Security Engineer embedded in TDI to build centralized security posture analytics, automate issue tracking and remediation, and drive AI-powered risk management across AWS, SaaS apps, and enterprise systems.
Staff-level engineer designing and building security guardrails for multi-cloud environments, translating security standards into code-driven policies. Requires 8+ years in cloud security with deep expertise in Kubernetes, IAM, and Policy-as-Code.
Lead end-to-end product security for consumer products, digital platform, and hardware devices. Drive threat modeling, penetration testing, PSIRT operations, and AI security guardrails in a regulated financial services environment.