Tatari: A platform for buying and measuring TV advertising campaigns.
Production Python experience, significant hands-on application security experience, threat modeling, building security tooling/automation, familiarity with AWS and Kubernetes, and SAST/DAST/SCA/CI-CD integration.
Python, Java, Rust, AWS, Kubernetes, OWASP Top 10, API Security Top 10, ASVS, SPVS, AISVS, SAST, DAST, SCA, CI/CD
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yrRemoteFull Time
Apollo.io: AI-powered platform for B2B sales intelligence and outreach automation.
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.
GeminiNasdaq: GEMI: Regulated platform for trading and storing digital assets.
7+ YOEExpertise in threat modeling, secure design/code review, penetration testing, application security controls, familiarity with regulated environments, strong communication, and experience building AI security tooling.
Apollo Global ManagementNYSE: APO: Global alternative asset manager providing investment and retirement solutions.
10+ YOE10+ years in application security; strong software development background; experience with SCA/SAST/DAST, secure SDLC; familiarity with cloud, leading security standards; CISSP/CSSLP etc preferred.
Anthropic: Developing safe and reliable artificial intelligence systems.
Hands-on application and infrastructure security experience, production-quality coding in Python/Go/Rust/TypeScript, threat-modeling, vulnerability ID, clear communication, and ability to assess unfamiliar codebases under time pressure.
Mitsubishi UFJ Financial GroupNew York Stock Exchange: MUFG: Global financial group providing diverse banking and investment services.
5+ YOE5+ years in application security, DAST/SAST/SCA, secure coding in Java/Python, CI/CD automation, compliance with NIST/PCI-DSS/SOX; AI/ML security experience preferred.
Writer: Platform for building and deploying enterprise generative AI agents.
4+ YOE4+ years in application security; strong coding in Python/Java/Go/JavaScript/TypeScript; SAST/DAST in CI/CD; threat modeling; secure SDLC; security reviews; automation.
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
2+ YOE2+ years IT security experience or bachelor's in computer science; knowledge of system vulnerabilities, penetration testing, web protocols, secure coding, identity management, and strong communication and troubleshooting skills.
Clear Street: Cloud-native capital markets platform for institutional trading and clearing.
7+ YOE7+ years in DevSecOps/application or cloud security, hands-on CI/CD and cloud experience, SAST/DAST/SCA tool use, container/Kubernetes security, scripting and IaC familiarity, strong communication.
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
Chicago or Scottsdale or San Francisco or New York City
$149k-$218k/yrHybridFull Time
Early Warning Services: Operates payment and risk solutions for the financial industry.
8+ YOE8+ years network security experience with 5+ years in proxy and DLP; hands-on with Microsoft Defender, Palo Alto Prisma Access, Netskope; scripting (PowerShell, Python); experience with compliance and control testing.
Microsoft Defender, Palo Alto Prisma Access, Netskope, PowerShell, Python
Boston or Carmel or Chicago or Lambertville or New York City or San Francisco or United States
$60k-$80k/yrHybridFull Time
Real Chemistry: Provides marketing and communication services for healthcare companies.
5+ YOE5+ years cloud security experience (3+ in high-growth acceptable), including 2 years focused on application security; hands-on with AWS IAM, SAML/OIDC, GitHub security tooling, threat modeling, penetration testing, and familiarity with SOC 2/GDPR/HIPAA-adjacent controls.
Cogent Security: Autonomous AI agents for enterprise vulnerability remediation.
5+ years security engineering experience in application/product security, secure SDLC, threat modeling, code scanning, supply-chain security, strong software engineering skills, and familiarity with modern AI security concerns.
The Better Money Company: A New York City startup building stablecoin-backed payments and a clearinghouse to improve money movement.
5+ YOE5+ years security engineering with payments or regulated financial experience; experience with GCP and Terraform; knowledge of application and operational security; ability to write production code and build security programs; familiarity with SOC 2 and PCI-DSS.
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yrRemoteFull Time
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
Merge: Unified API platform for connecting B2B software integrations.
3+ YOE3+ years security engineering with product/application focus; familiarity with OWASP, threat modeling, secure code review, SAST/DAST/SCA and CI/CD integration; able to read/write code; SaaS/API experience.