As a Principal Product Security Researcher, you will lead Chainguard's product security research, mapping emerging threats and shaping security direction across products and platforms. This role involves identifying systematic weaknesses and driving multi-quarter initiatives to reduce risk and improve security maturity.
As a Product Safety Engineer on the Imagine team, you will build critical safety systems and infrastructure for Grok’s multimodal generation capabilities, ensuring responsible deployment. You will design and scale safeguards, detection systems, and evaluation frameworks to prevent harm while preserving creativity and user freedom.
As a Lead Application Security Engineer at Eve, you will build and scale the product and application security program, securing AI-native workflows and cloud environments. This hands-on role involves writing code, building automation, and hardening systems to ensure security without compromising trust.
As a Corporate Security Engineer, you will lead the design, implementation, and optimization of corporate security infrastructure, enhancing controls and driving automation. You will work with IaC tools, deploy endpoint security, and manage data protection.
The Security Analyst III will define, implement, and operate security and privacy programs, driving initiatives to assess and reduce security risks and maintain compliance with frameworks like ISO 27001, SOC 2 Type II, and FedRAMP.
As a Security Engineer, IAM, you will own and mature identity and access management infrastructure and tooling, continuously improving access control practices with automation and self-service support. You will champion and implement secure-by-design access principles and secure human and non-human identities.
The Security Business Enablement Program Manager will be part of Stripe’s Office of the CISO pillar, focusing on information security and engaging with customers and partners. This role involves leading cross-functional teams, identifying control gaps, and developing security policies.
SentiLink is seeking a Principal Information Security Engineer to lead and enhance security across infrastructure, applications, and internal systems. This hands-on role involves building scalable security foundations, designing secure systems, and improving detection and response capabilities.
Senior Identity Security Engineer responsible for securing Palantir's workforce, customer, workload, and agent identity infrastructure. Requires 5+ years in IAM/security with deep protocol expertise and hands-on experience with enterprise IdPs.
Application Security Engineer building and tuning the security judgment layer for a cybersecurity platform, integrating tooling, reducing noise, and partnering with product and engineering teams.
Senior Network Security Software Engineer building automated, identity-aware network security controls and pipelines across cloud, SD-WAN, and ZTNA environments in a fintech setting.
As a Senior Security Engineer, you will design and implement secure architectures, protect sensitive data, and mitigate security risks for Beacon AI. You will lead incident response efforts and integrate security best practices into the SDLC.
As a Product Engineer specializing in Security, you will own product decisions from inception to customer success, focusing on designing and shipping features that enforce enterprise security policies and improving the risk policy system for an AI control plane.
Track, analyze, and attribute advanced state-backed and financially motivated threat actors targeting cloud environments. Requires 5+ years in threat research with expertise in malware, infrastructure tracking, and large-scale telemetry analysis.
Build AI-powered security products and evaluation systems that help trusted defenders respond to cyber threats while ensuring responsible deployment of frontier AI models.
Product Security Engineer strengthening security across Supabase's products, platform, and engineering workflows through threat modeling, code review, and scalable guardrails. Requires strong application security experience and comfort working async in a developer-first environment.
Lead and grow a Security Engineering team responsible for vulnerability management, SAST/DAST, penetration testing, bug bounty, and secure SDLC integration across cloud platforms.
Senior backend engineer to own and scale enforcement infrastructure processing millions of safety decisions daily. Requires 4+ years experience building distributed systems in Python on GCP with PostgreSQL, Redis, and gRPC.
Lead Zapier's Security organization as the most senior security executive. Set strategy across AppSec, InfraSec, Detection & Response, and GRC while partnering with Product, Engineering, and GTM to make security a competitive advantage for an AI-native SaaS platform.
Senior Security Engineer focused on GRC automation: building AI-assisted workflows, Drata integrations, and compliance automation infrastructure for SOC 2, ISO 27001, and NIST frameworks.
Mid-level Infrastructure Vulnerability Management Engineer responsible for cloud security posture, IaC scanning, container vulnerability management, and compliance tracking across multi-cloud environments. Requires 5+ years in cloud security/DevSecOps with deep GCP expertise.
Build and operate AI-powered fraud/abuse detection systems defending Replit's platform from phishing, cryptomining, account takeover, and LLM abuse. Requires 8+ years in security/anti-abuse, Python/TypeScript, SQL at scale, and ML/LLM classifier experience.
Build and operate AI-powered abuse detection systems that defend Replit's platform from phishing, cryptomining, LLM token farming, and other attacks. Own end-to-end detection, investigation, and automated response across millions of daily actions.
Build and operate AI-powered abuse detection systems at Replit to combat phishing, cryptomining, prompt injection, and other platform abuse at scale. Requires 8+ years in security/anti-abuse and strong Python/TypeScript + SQL skills.
Build and operate AI-powered fraud and abuse detection systems on Replit's agentic platform. Design LLM guardrails, ML classifiers, and automated response mechanisms to combat phishing, cryptomining, and platform exploitation.
Build and operate AI-powered abuse detection and response systems to protect Replit's platform from phishing, cryptomining, fraud, and LLM-specific attacks. Requires 4+ years in security/anti-abuse and strong Python/TypeScript + SQL skills.
Build and operate AI-powered abuse detection and response systems for a developer platform. Focus on LLM guardrails, fraud detection, and automated enforcement across millions of daily actions.
Lead GRC initiatives ensuring xAI meets federal compliance standards (FedRAMP, NIST, CMMC) while managing risk for AI systems and cloud deployments. Requires 3+ years in security compliance, a bachelor's degree, and expertise in federal frameworks.
Staff-level security engineer owning cross-team security architecture, leading complex initiatives, and mentoring senior engineers. Requires deep expertise in Ruby on Rails, AWS, cloud security, compliance frameworks, and production systems at scale.
Hands-on Engineering Manager to build Replit's Anti-Abuse team from scratch. Define threat models, ship detection and verification systems, hire a small team, and partner cross-functionally to make abuse economically unviable.
Own end-to-end security architecture, compliance (FedRAMP, CMMC), and secure supply chain practices for a federal-focused government platform on AWS. Lead technical readiness and drive secure-by-default engineering in an early-stage environment.
Build and own security infrastructure and core systems for an AI platform handling sensitive workflows. Requires 2-7 years experience with Python/Go/TypeScript, cloud environments, and production security tooling.
Lead physical security operations and teams across multiple regional sites including data centers. Own incident response, vendor management, audits, and standardization of security procedures.
Own physical security end-to-end for greenfield hyperscale data center builds from groundbreaking through steady-state operations, managing guard forces, security systems deployment, and critical asset protection. Requires 10+ years data center security experience and deep ESS knowledge.
Build and scale core security infrastructure for secret management, identity, authentication, and end-to-end encryption across Snowflake's multi-cloud platform.
Lead and build a new network security function at a fintech company, managing a team of engineers, setting technical direction for cloud-native network security architecture, and establishing automated, identity-aware security controls across cloud, SD-WAN, and ZTNA environments.
Lead security strategy and program for AI web infrastructure platform. Own security posture, compliance, and customer trust as the technical security leader for engineering and leadership teams.
Mid-level AppSec Vulnerability Management Engineer who identifies application vulnerabilities, manages SBOM and supply chain security, and drives compliance tracking for SOC 2, ISO 27001, and PCI-DSS. Requires 5+ years in AppSec/DevSecOps with strong coding skills in JS/TS, Python, and Go.
Senior Vulnerability Management Engineer responsible for scanning, triaging, and remediating security vulnerabilities across cloud and on-premise infrastructure. Requires 5+ years in vulnerability management and expertise with Qualys, Nessus, CSPM, and SAST tools.
Senior Vulnerability Management Engineer responsible for scanning, triaging, and remediating security vulnerabilities across Celonis' cloud and on-premise infrastructure. Requires 5+ years in vulnerability management and expertise in tools like Qualys, CSPM platforms, and SAST.
Lead and develop a team of GRC subject matter experts responsible for the lifecycle, quality, and product integration of Vanta's security and compliance frameworks. Own end-to-end framework release processes while partnering with Product and Engineering.
Lead a team of security engineers scaling secure-by-design practices across application, infrastructure, offensive, and product security. Partner with engineering and risk leaders to reduce systemic risk and improve security posture of customer-facing products and cloud-native services.
Lead and mature security engineering programs across enterprise security, security operations, and detection engineering. Manage a team of security professionals while building proactive controls, improving detection/response, and driving cross-functional risk reduction initiatives.
Senior security-focused developer implementing new security features and secure libraries for iOS and hybrid apps at 1Password. Requires 5+ years of security development experience, 3+ years with iOS and Rust.
Security Engineer building detections, security automation, and infrastructure security on AWS while managing SOC 2 and ISO 27001 compliance. Requires 4-7 years experience with strong AWS and IaC skills.
Design and review security architectures for Kraken's crypto products, conduct assessments, and provide hands-on security consulting across blockchain, infrastructure, and AI projects.
Security Engineer partnering with engineering teams to improve security across products, cloud, infrastructure, and developer workflows. Requires production-grade coding in Go, Rust, or Python plus strong security fundamentals.
Own the end-to-end security program for a fintech infrastructure company, driving strategy, compliance (SOC 2), incident response, and client-facing security reviews for institutional trading systems.
SecOps Engineer building automated response mechanisms, triaging alerts, hunting threats, and supporting incident response with AI and SOAR tools. Requires strong logging skills, Python, and Git experience in a security-focused environment.
Entry-level on-site cybersecurity role in Richmond providing hands-on training in compliance frameworks and operations for a YC-backed startup. Candidates must demonstrate strong work ethic, communication, and resilience.
As a Principal Product Security Researcher, you will lead Chainguard's product security research, mapping emerging threats and shaping security direction across products and platforms. This role involves identifying systematic weaknesses and driving multi-quarter initiatives to reduce risk and improve security maturity.
As a Product Safety Engineer on the Imagine team, you will build critical safety systems and infrastructure for Grok’s multimodal generation capabilities, ensuring responsible deployment. You will design and scale safeguards, detection systems, and evaluation frameworks to prevent harm while preserving creativity and user freedom.
As a Lead Application Security Engineer at Eve, you will build and scale the product and application security program, securing AI-native workflows and cloud environments. This hands-on role involves writing code, building automation, and hardening systems to ensure security without compromising trust.
As a Corporate Security Engineer, you will lead the design, implementation, and optimization of corporate security infrastructure, enhancing controls and driving automation. You will work with IaC tools, deploy endpoint security, and manage data protection.
The Security Analyst III will define, implement, and operate security and privacy programs, driving initiatives to assess and reduce security risks and maintain compliance with frameworks like ISO 27001, SOC 2 Type II, and FedRAMP.
As a Security Engineer, IAM, you will own and mature identity and access management infrastructure and tooling, continuously improving access control practices with automation and self-service support. You will champion and implement secure-by-design access principles and secure human and non-human identities.
The Security Business Enablement Program Manager will be part of Stripe’s Office of the CISO pillar, focusing on information security and engaging with customers and partners. This role involves leading cross-functional teams, identifying control gaps, and developing security policies.
SentiLink is seeking a Principal Information Security Engineer to lead and enhance security across infrastructure, applications, and internal systems. This hands-on role involves building scalable security foundations, designing secure systems, and improving detection and response capabilities.
Senior Identity Security Engineer responsible for securing Palantir's workforce, customer, workload, and agent identity infrastructure. Requires 5+ years in IAM/security with deep protocol expertise and hands-on experience with enterprise IdPs.
Application Security Engineer building and tuning the security judgment layer for a cybersecurity platform, integrating tooling, reducing noise, and partnering with product and engineering teams.
Senior Network Security Software Engineer building automated, identity-aware network security controls and pipelines across cloud, SD-WAN, and ZTNA environments in a fintech setting.
As a Senior Security Engineer, you will design and implement secure architectures, protect sensitive data, and mitigate security risks for Beacon AI. You will lead incident response efforts and integrate security best practices into the SDLC.
As a Product Engineer specializing in Security, you will own product decisions from inception to customer success, focusing on designing and shipping features that enforce enterprise security policies and improving the risk policy system for an AI control plane.
Track, analyze, and attribute advanced state-backed and financially motivated threat actors targeting cloud environments. Requires 5+ years in threat research with expertise in malware, infrastructure tracking, and large-scale telemetry analysis.
Build AI-powered security products and evaluation systems that help trusted defenders respond to cyber threats while ensuring responsible deployment of frontier AI models.
Product Security Engineer strengthening security across Supabase's products, platform, and engineering workflows through threat modeling, code review, and scalable guardrails. Requires strong application security experience and comfort working async in a developer-first environment.
Lead and grow a Security Engineering team responsible for vulnerability management, SAST/DAST, penetration testing, bug bounty, and secure SDLC integration across cloud platforms.
Senior backend engineer to own and scale enforcement infrastructure processing millions of safety decisions daily. Requires 4+ years experience building distributed systems in Python on GCP with PostgreSQL, Redis, and gRPC.
Lead Zapier's Security organization as the most senior security executive. Set strategy across AppSec, InfraSec, Detection & Response, and GRC while partnering with Product, Engineering, and GTM to make security a competitive advantage for an AI-native SaaS platform.
Senior Security Engineer focused on GRC automation: building AI-assisted workflows, Drata integrations, and compliance automation infrastructure for SOC 2, ISO 27001, and NIST frameworks.
Mid-level Infrastructure Vulnerability Management Engineer responsible for cloud security posture, IaC scanning, container vulnerability management, and compliance tracking across multi-cloud environments. Requires 5+ years in cloud security/DevSecOps with deep GCP expertise.
Build and operate AI-powered fraud/abuse detection systems defending Replit's platform from phishing, cryptomining, account takeover, and LLM abuse. Requires 8+ years in security/anti-abuse, Python/TypeScript, SQL at scale, and ML/LLM classifier experience.
Build and operate AI-powered abuse detection systems that defend Replit's platform from phishing, cryptomining, LLM token farming, and other attacks. Own end-to-end detection, investigation, and automated response across millions of daily actions.
Build and operate AI-powered abuse detection systems at Replit to combat phishing, cryptomining, prompt injection, and other platform abuse at scale. Requires 8+ years in security/anti-abuse and strong Python/TypeScript + SQL skills.
Build and operate AI-powered fraud and abuse detection systems on Replit's agentic platform. Design LLM guardrails, ML classifiers, and automated response mechanisms to combat phishing, cryptomining, and platform exploitation.
Build and operate AI-powered abuse detection and response systems to protect Replit's platform from phishing, cryptomining, fraud, and LLM-specific attacks. Requires 4+ years in security/anti-abuse and strong Python/TypeScript + SQL skills.
Build and operate AI-powered abuse detection and response systems for a developer platform. Focus on LLM guardrails, fraud detection, and automated enforcement across millions of daily actions.
Lead GRC initiatives ensuring xAI meets federal compliance standards (FedRAMP, NIST, CMMC) while managing risk for AI systems and cloud deployments. Requires 3+ years in security compliance, a bachelor's degree, and expertise in federal frameworks.
Staff-level security engineer owning cross-team security architecture, leading complex initiatives, and mentoring senior engineers. Requires deep expertise in Ruby on Rails, AWS, cloud security, compliance frameworks, and production systems at scale.
Hands-on Engineering Manager to build Replit's Anti-Abuse team from scratch. Define threat models, ship detection and verification systems, hire a small team, and partner cross-functionally to make abuse economically unviable.
Own end-to-end security architecture, compliance (FedRAMP, CMMC), and secure supply chain practices for a federal-focused government platform on AWS. Lead technical readiness and drive secure-by-default engineering in an early-stage environment.
Build and own security infrastructure and core systems for an AI platform handling sensitive workflows. Requires 2-7 years experience with Python/Go/TypeScript, cloud environments, and production security tooling.
Lead physical security operations and teams across multiple regional sites including data centers. Own incident response, vendor management, audits, and standardization of security procedures.
Own physical security end-to-end for greenfield hyperscale data center builds from groundbreaking through steady-state operations, managing guard forces, security systems deployment, and critical asset protection. Requires 10+ years data center security experience and deep ESS knowledge.
Build and scale core security infrastructure for secret management, identity, authentication, and end-to-end encryption across Snowflake's multi-cloud platform.
Lead and build a new network security function at a fintech company, managing a team of engineers, setting technical direction for cloud-native network security architecture, and establishing automated, identity-aware security controls across cloud, SD-WAN, and ZTNA environments.
Lead security strategy and program for AI web infrastructure platform. Own security posture, compliance, and customer trust as the technical security leader for engineering and leadership teams.
Mid-level AppSec Vulnerability Management Engineer who identifies application vulnerabilities, manages SBOM and supply chain security, and drives compliance tracking for SOC 2, ISO 27001, and PCI-DSS. Requires 5+ years in AppSec/DevSecOps with strong coding skills in JS/TS, Python, and Go.
Senior Vulnerability Management Engineer responsible for scanning, triaging, and remediating security vulnerabilities across cloud and on-premise infrastructure. Requires 5+ years in vulnerability management and expertise with Qualys, Nessus, CSPM, and SAST tools.
Senior Vulnerability Management Engineer responsible for scanning, triaging, and remediating security vulnerabilities across Celonis' cloud and on-premise infrastructure. Requires 5+ years in vulnerability management and expertise in tools like Qualys, CSPM platforms, and SAST.
Lead and develop a team of GRC subject matter experts responsible for the lifecycle, quality, and product integration of Vanta's security and compliance frameworks. Own end-to-end framework release processes while partnering with Product and Engineering.
Lead a team of security engineers scaling secure-by-design practices across application, infrastructure, offensive, and product security. Partner with engineering and risk leaders to reduce systemic risk and improve security posture of customer-facing products and cloud-native services.
Lead and mature security engineering programs across enterprise security, security operations, and detection engineering. Manage a team of security professionals while building proactive controls, improving detection/response, and driving cross-functional risk reduction initiatives.
Senior security-focused developer implementing new security features and secure libraries for iOS and hybrid apps at 1Password. Requires 5+ years of security development experience, 3+ years with iOS and Rust.
Security Engineer building detections, security automation, and infrastructure security on AWS while managing SOC 2 and ISO 27001 compliance. Requires 4-7 years experience with strong AWS and IaC skills.
Design and review security architectures for Kraken's crypto products, conduct assessments, and provide hands-on security consulting across blockchain, infrastructure, and AI projects.
Security Engineer partnering with engineering teams to improve security across products, cloud, infrastructure, and developer workflows. Requires production-grade coding in Go, Rust, or Python plus strong security fundamentals.
Own the end-to-end security program for a fintech infrastructure company, driving strategy, compliance (SOC 2), incident response, and client-facing security reviews for institutional trading systems.
SecOps Engineer building automated response mechanisms, triaging alerts, hunting threats, and supporting incident response with AI and SOAR tools. Requires strong logging skills, Python, and Git experience in a security-focused environment.
Entry-level on-site cybersecurity role in Richmond providing hands-on training in compliance frameworks and operations for a YC-backed startup. Candidates must demonstrate strong work ethic, communication, and resilience.