Entry-level on-site role supporting cybersecurity and compliance projects for clients. Involves account management, internal coordination, and learning frameworks like SOC 2, ISO 27001, and HIPAA while earning certifications.
Entry-level on-site Junior Cybersecurity Analyst role providing client support and compliance project assistance while learning frameworks like SOC 2, ISO 27001, and HIPAA. No prior experience required; rigorous training and certification path provided.
Senior GRC Analyst scaling security and compliance programs with focus on third-party risk, SaaS governance, and AI tool evaluation. Requires 4+ years experience and SOC 2 audit support.
Lead security efforts to protect OpenAI's internal AI coding agents from advanced cyber threats including APTs and insider risks. Requires strong hands-on technical skills in threat modeling, prototyping defenses, and coordinating cross-team security initiatives.
Identify compromise paths from future AI agents, design long-lead-time security controls, and stress-test defenses via evaluations and penetration tests. Requires deep security/infrastructure expertise plus strong software engineering skills.
Hands-on technical leader securing a B2B2C SaaS platform across the SDLC with deep expertise in application security, AI-augmented workflows, cloud-native security, and LLM-specific threat mitigation.
Product Security Engineer II responsible for leading threat modeling, triaging CNAPP findings, contributing to SDLC tooling, and partnering with engineering teams to embed security practices. Requires 2-4 years in security roles with strong cloud security and AI tooling experience.
Lead NexHealth's security governance, compliance, IT operations, and incident response. Build and scale the security program and team from the ground up while partnering with engineering and leadership.
Lead and scale global assurance programs (FedRAMP, SOC 2, ISO 27001) across public sector and commercial units while managing a distributed technical team of compliance experts.
Security Engineer focused on operating the SIEM, building AI-augmented detection tooling, triaging alerts, and leading incident response for a high-scale mobile adtech platform.
Senior-most incident commander building and operating Fluidstack's Detection & Response Engineering program. Defines runbooks, leads material incidents across IT/OT/physical surfaces, and sets standards for agent-first IR at scale.
Lead material incident response as the most senior commander. Build and run the full IR program including runbooks, on-call processes, agent-human coordination, and cross-functional remediation for AI infrastructure.
Builds and matures GRC program supporting audits (HITRUST, SOC 2, PCI-DSS, HIPAA), manages vendor risk, security training, and technical risk register. Requires 5+ years GRC experience and knowledge of compliance frameworks.
Designs, implements, and operates enterprise IAM systems for workforce and customer-facing authentication in ValonOS, including IdP management, secure protocols, cloud IAM, and AI-assisted workflows. Requires 5+ years IAM experience, deep protocol expertise, and IdP hands-on skills.
Leads the Security Incident Response Team in the Americas, managing engineers through threat hunting, investigations, triage, and large-scale responses while coaching performance and driving process improvements using AI and automation.
Designs and evolves product security architecture for multi-tenant SaaS platform, leads threat modeling and security reviews, implements customer-facing security controls like IAM and encryption. Requires 5+ years in product/cloud security, GCP experience, and bachelor's degree.
Conducts daily trade surveillance reviews for active trader clients using Nasdaq Trade Surveillance (NTS), detecting and investigating market manipulation in equities and listed options. Requires 3-5 years NTS experience and strong analytical skills in abusive trading patterns.
Develops containerized microservices in Go for Illumio's cloud security platform, processing real-time cloud telemetry on Kubernetes to deliver security insights and recommendations. Requires 8+ years experience with public clouds (AWS/Azure/GCP) and mentors junior engineers.
Defines and maintains policies for AI model behavior in high-risk domains like agentic systems and user safety. Collaborates with research, engineering, and product teams to operationalize policies into measurable safeguards using empirical data and red-teaming.
Design and scale high-fidelity detection capabilities across cloud, identity, endpoint, and application environments to protect biometric and health data. Requires 4+ years in security detection or operations with strong scripting and detection tuning experience.
Builds and automates GRC systems for compliance-as-code, manages risk registers, and collaborates with engineering, legal, sales, and auditors to enable secure enterprise growth. Requires 8+ years in GRC/security with cloud fluency and automation experience.
Defines and implements secure architecture for multi-tenant SaaS platform, leads threat modeling, mentors engineering teams on security best practices, and conducts code reviews. Requires 8+ years in product security with expertise in auth protocols and SaaS security.
The Deputy Chief Information Security Officer will partner with the CISO to scale the security program, operating across application security, GRC, security operations, and cloud security. This senior leader will identify high-risk areas, support compliance initiatives, and represent the security program to internal and external stakeholders.
Senior Threat Researcher analyzes large-scale security datasets to identify attacker TTPs, maps threats to MITRE ATT&CK, and collaborates with product teams to enhance detection, risk insights, and segmentation strategies at a cybersecurity firm. Requires 5+ years in threat research or related fields.
Leads and builds a Threat Research team to analyze large-scale security datasets, uncover attacker TTPs using MITRE ATT&CK, and translate findings into product enhancements for breach detection and containment. Requires 10+ years in threat research or detection engineering with hands-on expertise and leadership experience.
Security Analyst managing SecOps/SOC, threat monitoring, incident response, and log analysis using Wiz, Datadog, SQL across Kubernetes/AWS. Builds automated security controls with Python/Go/TypeScript and leverages LLMs for analytics; requires 2+ years SOC experience.
Develops and maintains AI model policies for high-risk cybersecurity domains, translating threat models into behavioral specifications, evaluations, and mitigations. Collaborates with research, engineering, and safety teams to ensure technically grounded, enforceable safeguards against dual-use risks.
Designs and implements privacy-preserving architectures for AI systems, builds privacy infrastructure, and leads threat modeling to protect user data at scale. Requires deep privacy engineering expertise, production systems experience in Python/Go, and familiarity with regulations like GDPR/CCPA.
Builds and implements detection systems and automated responses for AI-specific threats like prompt injection and model extraction on distributed GPU infrastructure. Leads incident response, proactive threat hunting, and cross-team security coordination with 3-5+ years in security operations.
Builds security into AI platform through threat modeling, SAST/DAST in CI/CD, code reviews, and secure architecture design. Requires 4+ years app sec experience, programming in Python/Java/Go/JS, and DevSecOps tools expertise.
Principal-level individual contributor leading Snowflake’s Threat Intelligence program. Combines deep intelligence expertise with strong engineering and AI/automation skills to track cloud-focused threat actors and drive actionable security outcomes.
Senior Security Engineer conducts offensive security testing on AI systems, cloud infrastructure, and applications at a fintech startup. Collaborates with engineers to remediate vulnerabilities and builds automated tools, requiring 6+ years experience in red teaming and AWS security.
Leads SecOps and threat response, including incident handling, forensics, automation building, and threat exercises. Requires 5+ years in Security Operations, automation experience, and familiarity with security tools like SIEM, SOAR, and AWS.
Investigates fraud like multi-accounting, bonus abuse, and suspicious betting patterns in a sports prediction market. Analyzes data with SQL/tools, makes decisive calls to protect users; requires 1-3 years fraud/risk experience, preferably in fintech/gaming.
Builds security frameworks, automated guardrails, and threat modeling for Airtable's platform, focusing on AI/LLM safety and application security. Partners with engineering teams; requires 4+ years product security experience and proficiency in JS/TS/Node.js.
Leads edge and network security strategy, owning Cloudflare WAF, DDoS protection, Zero Trust, and AWS perimeter controls. Partners with teams to implement layered defenses, policy-as-code, detections, and AI-assisted automations. Requires 10+ years experience with deep Cloudflare and network expertise.
Build and maintain self-healing security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, and AI-assisted automation workflows. Requires 5+ years of security engineering experience and fluency with agentic AI coding tools.
Designs and implements secure cloud architectures for AWS and Azure, integrates security into DevSecOps pipelines, manages vulnerabilities, and leads threat detection/response for a B2B SaaS cybersecurity platform. Requires deep cloud expertise and SaaS production security experience.
Product Security Engineer analyzes security issues through design reviews, code audits, and penetration tests, builds security tools and mitigations, provides guidance to engineers, and triages bug bounty reports. Requires 3+ years in vulnerability research, Rust/C experience, and automated security tooling.
Builds authentication, security features, and AI-powered risk detection systems to ensure user trust and safety at scale. Requires 5-8 years experience in trust/safety/security with cross-functional collaboration.
Owns global sanctions, PEP, and negative news screening strategy at Stripe, designs financial crime controls, embeds risk into product roadmaps, and drives AI-powered improvements while partnering cross-functionally. Requires 7+ years in fintech risk/compliance with deep sanctions expertise.
Application Security Engineer reviews code, builds threat models, owns security tooling, and leads AI/LLM-specific security initiatives like prompt injection defenses and sandboxing in a high-availability platform. Requires 5+ years experience and strong skills in TypeScript/Python/Go.
Hands-on Cloud Security Engineer owning security architecture across AWS, Azure, and GCP, hardening Kubernetes and Terraform stacks, building detections, and leading incident response for multi-cloud infrastructure.
Leads end-to-end compliance program for FedRAMP High, IL5, CMMC Level 2, and SOC 2 at a high-growth govtech startup. Automates evidence collection, partners with engineering on secure-by-design practices, and supports sales with customer trust narratives. Requires 3+ years in startup compliance with high-impact authorizations.
Security Engineer triages events, responds to incidents, manages AWS security services, and improves vulnerability management/threat detection on the security operations team. Requires 1-3 years security experience, scripting (Python), Linux, and security tools like SIEM and scanners.
Designs and improves secure cloud-native architectures, CI/CD pipelines, and infrastructure security on AWS and Kubernetes. Conducts threat modeling, security reviews, automates controls, and drives compliance programs like SOC2.
Leads product security strategy, embeds security into SDLC across web, mobile, and cloud platforms, and drives secure development programs. Requires 12+ years in application security with expertise in AppSec tools, cloud architecture, and regulated industries.
Owns end-to-end security posture including product security, infrastructure hardening, internal tooling, corporate security, and compliance programs like SOC 2 and PCI. Requires 4+ years experience with engineering background and hands-on builder mindset in fast-paced environments.
Designs and builds systems to proactively detect and enforce against product abuse using data science, ML, and investigations. Collaborates cross-functionally on monitoring new/existing products and responding to critical escalations. Requires 4+ years in technical analysis with SQL/Python.
Tier 3 engineer deploys/manages EDR tools, conducts incident response, vulnerability assessments, and identity protection for clients. Monitors threats, automates workflows with SOAR/Python, and handles fraud resolution. Requires 3+ years cybersecurity experience.
Entry-level on-site role supporting cybersecurity and compliance projects for clients. Involves account management, internal coordination, and learning frameworks like SOC 2, ISO 27001, and HIPAA while earning certifications.
Entry-level on-site Junior Cybersecurity Analyst role providing client support and compliance project assistance while learning frameworks like SOC 2, ISO 27001, and HIPAA. No prior experience required; rigorous training and certification path provided.
Senior GRC Analyst scaling security and compliance programs with focus on third-party risk, SaaS governance, and AI tool evaluation. Requires 4+ years experience and SOC 2 audit support.
Lead security efforts to protect OpenAI's internal AI coding agents from advanced cyber threats including APTs and insider risks. Requires strong hands-on technical skills in threat modeling, prototyping defenses, and coordinating cross-team security initiatives.
Identify compromise paths from future AI agents, design long-lead-time security controls, and stress-test defenses via evaluations and penetration tests. Requires deep security/infrastructure expertise plus strong software engineering skills.
Hands-on technical leader securing a B2B2C SaaS platform across the SDLC with deep expertise in application security, AI-augmented workflows, cloud-native security, and LLM-specific threat mitigation.
Product Security Engineer II responsible for leading threat modeling, triaging CNAPP findings, contributing to SDLC tooling, and partnering with engineering teams to embed security practices. Requires 2-4 years in security roles with strong cloud security and AI tooling experience.
Lead NexHealth's security governance, compliance, IT operations, and incident response. Build and scale the security program and team from the ground up while partnering with engineering and leadership.
Lead and scale global assurance programs (FedRAMP, SOC 2, ISO 27001) across public sector and commercial units while managing a distributed technical team of compliance experts.
Security Engineer focused on operating the SIEM, building AI-augmented detection tooling, triaging alerts, and leading incident response for a high-scale mobile adtech platform.
Senior-most incident commander building and operating Fluidstack's Detection & Response Engineering program. Defines runbooks, leads material incidents across IT/OT/physical surfaces, and sets standards for agent-first IR at scale.
Lead material incident response as the most senior commander. Build and run the full IR program including runbooks, on-call processes, agent-human coordination, and cross-functional remediation for AI infrastructure.
Builds and matures GRC program supporting audits (HITRUST, SOC 2, PCI-DSS, HIPAA), manages vendor risk, security training, and technical risk register. Requires 5+ years GRC experience and knowledge of compliance frameworks.
Designs, implements, and operates enterprise IAM systems for workforce and customer-facing authentication in ValonOS, including IdP management, secure protocols, cloud IAM, and AI-assisted workflows. Requires 5+ years IAM experience, deep protocol expertise, and IdP hands-on skills.
Leads the Security Incident Response Team in the Americas, managing engineers through threat hunting, investigations, triage, and large-scale responses while coaching performance and driving process improvements using AI and automation.
Designs and evolves product security architecture for multi-tenant SaaS platform, leads threat modeling and security reviews, implements customer-facing security controls like IAM and encryption. Requires 5+ years in product/cloud security, GCP experience, and bachelor's degree.
Conducts daily trade surveillance reviews for active trader clients using Nasdaq Trade Surveillance (NTS), detecting and investigating market manipulation in equities and listed options. Requires 3-5 years NTS experience and strong analytical skills in abusive trading patterns.
Develops containerized microservices in Go for Illumio's cloud security platform, processing real-time cloud telemetry on Kubernetes to deliver security insights and recommendations. Requires 8+ years experience with public clouds (AWS/Azure/GCP) and mentors junior engineers.
Defines and maintains policies for AI model behavior in high-risk domains like agentic systems and user safety. Collaborates with research, engineering, and product teams to operationalize policies into measurable safeguards using empirical data and red-teaming.
Design and scale high-fidelity detection capabilities across cloud, identity, endpoint, and application environments to protect biometric and health data. Requires 4+ years in security detection or operations with strong scripting and detection tuning experience.
Builds and automates GRC systems for compliance-as-code, manages risk registers, and collaborates with engineering, legal, sales, and auditors to enable secure enterprise growth. Requires 8+ years in GRC/security with cloud fluency and automation experience.
Defines and implements secure architecture for multi-tenant SaaS platform, leads threat modeling, mentors engineering teams on security best practices, and conducts code reviews. Requires 8+ years in product security with expertise in auth protocols and SaaS security.
The Deputy Chief Information Security Officer will partner with the CISO to scale the security program, operating across application security, GRC, security operations, and cloud security. This senior leader will identify high-risk areas, support compliance initiatives, and represent the security program to internal and external stakeholders.
Senior Threat Researcher analyzes large-scale security datasets to identify attacker TTPs, maps threats to MITRE ATT&CK, and collaborates with product teams to enhance detection, risk insights, and segmentation strategies at a cybersecurity firm. Requires 5+ years in threat research or related fields.
Leads and builds a Threat Research team to analyze large-scale security datasets, uncover attacker TTPs using MITRE ATT&CK, and translate findings into product enhancements for breach detection and containment. Requires 10+ years in threat research or detection engineering with hands-on expertise and leadership experience.
Security Analyst managing SecOps/SOC, threat monitoring, incident response, and log analysis using Wiz, Datadog, SQL across Kubernetes/AWS. Builds automated security controls with Python/Go/TypeScript and leverages LLMs for analytics; requires 2+ years SOC experience.
Develops and maintains AI model policies for high-risk cybersecurity domains, translating threat models into behavioral specifications, evaluations, and mitigations. Collaborates with research, engineering, and safety teams to ensure technically grounded, enforceable safeguards against dual-use risks.
Designs and implements privacy-preserving architectures for AI systems, builds privacy infrastructure, and leads threat modeling to protect user data at scale. Requires deep privacy engineering expertise, production systems experience in Python/Go, and familiarity with regulations like GDPR/CCPA.
Builds and implements detection systems and automated responses for AI-specific threats like prompt injection and model extraction on distributed GPU infrastructure. Leads incident response, proactive threat hunting, and cross-team security coordination with 3-5+ years in security operations.
Builds security into AI platform through threat modeling, SAST/DAST in CI/CD, code reviews, and secure architecture design. Requires 4+ years app sec experience, programming in Python/Java/Go/JS, and DevSecOps tools expertise.
Principal-level individual contributor leading Snowflake’s Threat Intelligence program. Combines deep intelligence expertise with strong engineering and AI/automation skills to track cloud-focused threat actors and drive actionable security outcomes.
Senior Security Engineer conducts offensive security testing on AI systems, cloud infrastructure, and applications at a fintech startup. Collaborates with engineers to remediate vulnerabilities and builds automated tools, requiring 6+ years experience in red teaming and AWS security.
Leads SecOps and threat response, including incident handling, forensics, automation building, and threat exercises. Requires 5+ years in Security Operations, automation experience, and familiarity with security tools like SIEM, SOAR, and AWS.
Investigates fraud like multi-accounting, bonus abuse, and suspicious betting patterns in a sports prediction market. Analyzes data with SQL/tools, makes decisive calls to protect users; requires 1-3 years fraud/risk experience, preferably in fintech/gaming.
Builds security frameworks, automated guardrails, and threat modeling for Airtable's platform, focusing on AI/LLM safety and application security. Partners with engineering teams; requires 4+ years product security experience and proficiency in JS/TS/Node.js.
Leads edge and network security strategy, owning Cloudflare WAF, DDoS protection, Zero Trust, and AWS perimeter controls. Partners with teams to implement layered defenses, policy-as-code, detections, and AI-assisted automations. Requires 10+ years experience with deep Cloudflare and network expertise.
Build and maintain self-healing security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, and AI-assisted automation workflows. Requires 5+ years of security engineering experience and fluency with agentic AI coding tools.
Designs and implements secure cloud architectures for AWS and Azure, integrates security into DevSecOps pipelines, manages vulnerabilities, and leads threat detection/response for a B2B SaaS cybersecurity platform. Requires deep cloud expertise and SaaS production security experience.
Product Security Engineer analyzes security issues through design reviews, code audits, and penetration tests, builds security tools and mitigations, provides guidance to engineers, and triages bug bounty reports. Requires 3+ years in vulnerability research, Rust/C experience, and automated security tooling.
Builds authentication, security features, and AI-powered risk detection systems to ensure user trust and safety at scale. Requires 5-8 years experience in trust/safety/security with cross-functional collaboration.
Owns global sanctions, PEP, and negative news screening strategy at Stripe, designs financial crime controls, embeds risk into product roadmaps, and drives AI-powered improvements while partnering cross-functionally. Requires 7+ years in fintech risk/compliance with deep sanctions expertise.
Application Security Engineer reviews code, builds threat models, owns security tooling, and leads AI/LLM-specific security initiatives like prompt injection defenses and sandboxing in a high-availability platform. Requires 5+ years experience and strong skills in TypeScript/Python/Go.
Hands-on Cloud Security Engineer owning security architecture across AWS, Azure, and GCP, hardening Kubernetes and Terraform stacks, building detections, and leading incident response for multi-cloud infrastructure.
Leads end-to-end compliance program for FedRAMP High, IL5, CMMC Level 2, and SOC 2 at a high-growth govtech startup. Automates evidence collection, partners with engineering on secure-by-design practices, and supports sales with customer trust narratives. Requires 3+ years in startup compliance with high-impact authorizations.
Security Engineer triages events, responds to incidents, manages AWS security services, and improves vulnerability management/threat detection on the security operations team. Requires 1-3 years security experience, scripting (Python), Linux, and security tools like SIEM and scanners.
Designs and improves secure cloud-native architectures, CI/CD pipelines, and infrastructure security on AWS and Kubernetes. Conducts threat modeling, security reviews, automates controls, and drives compliance programs like SOC2.
Leads product security strategy, embeds security into SDLC across web, mobile, and cloud platforms, and drives secure development programs. Requires 12+ years in application security with expertise in AppSec tools, cloud architecture, and regulated industries.
Owns end-to-end security posture including product security, infrastructure hardening, internal tooling, corporate security, and compliance programs like SOC 2 and PCI. Requires 4+ years experience with engineering background and hands-on builder mindset in fast-paced environments.
Designs and builds systems to proactively detect and enforce against product abuse using data science, ML, and investigations. Collaborates cross-functionally on monitoring new/existing products and responding to critical escalations. Requires 4+ years in technical analysis with SQL/Python.
Tier 3 engineer deploys/manages EDR tools, conducts incident response, vulnerability assessments, and identity protection for clients. Monitors threats, automates workflows with SOAR/Python, and handles fraud resolution. Requires 3+ years cybersecurity experience.