Veeam: Data resilience and security for hybrid cloud environments
8+ YOEUS citizens only. 8+ years in application/product security or DevSecOps, 3+ years SAST/DAST/SCA/IAST and vulnerability management experience, experience with CI/CD, cloud, IaC, scripting, secure SDLC, and API integrations.
Rocket CompaniesNYSE: RKT: Provides digital mortgage, real estate, and personal finance services.
5+ YOE10+ years in information security or 5+ with relevant degree; experience in threat modeling, secure coding, AppSec tooling, cloud/container security, and mentoring engineers.
Los Angeles or Palo Alto or Bellevue or Santa Monica
$178k-$313k/yrOnsiteFull Time
SnapNYSE: SNAP: Develops social media applications and augmented reality technology.
6+ YOE6+ years security experience post-Bachelor's, expertise in infrastructure/enterprise/access/appsec/detection or abuse domains; experience with cloud, Kubernetes, IAM, CSPM, AI tools, threat modeling, and securing distributed systems.
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yrRemoteFull Time
Apollo.io: AI-powered platform for B2B sales intelligence and outreach automation.
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.
Staff Security Engineer, Product Security and Architecture
Seattle, Washington, United States
$210k-$234k/yrOnsiteFull Time
CompassNYSE: COMP: Technology-enabled residential real estate brokerage and agent software platform.
3+ YOE3+ years administering CI/CD and appsec tools, scripting in Python/Bash, product development and code review experience in Python/JS/TS/Golang/Java, Terraform and AWS experience, and experience using AI for security workflows.
CI/CD, SAST, DAST, SCA, Python, Bash, JavaScript, TypeScript, Golang, Java, Terraform, AWS, AI, Web Application Firewalls (WAF), API Gateways, OAuth2/OIDC
Washington Health Benefit Exchange: Operates Washington state's health insurance enrollment marketplace.
7+ YOE7+ years in information security with application security, secure SDLC, DevSecOps, cloud/Azure experience; experience with code reviews, threat modeling, vulnerability management, and tools like Nessus, Rapid7, Nmap, and Burp Suite.
Monolithic Power SystemsNasdaq: MPWR: Provides energy-efficient integrated power semiconductor solutions for electronics.
3+ YOEDesign and manage application security and RBAC for Dynamics 365, Azure, and IFS; perform assessments, code reviews, threat modeling; 3+ years application security experience; bachelor\u0002s or equivalent; security certs a plus.
Microsoft Dynamics 365, Azure Active Directory, IFS ERP, PowerShell, Python, SAST, DAST, CI/CD, OWASP, NIST, ISO 27001
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Card Kingdom: Sells collectible trading cards and operates gaming-themed restaurants.
10+ YOE3+ Mgmt10+ years building software with 3+ years senior IC experience and 3–5+ years managing engineering teams; strong e‑commerce experience; hands‑on technical depth across full‑stack web stacks; on‑call/incident experience; bachelor's or equivalent.
T-MobileNASDAQ: TMUS: Provides wireless voice, data, and mobile internet services.
3+ YOEMaster’s degree and 3 years of relevant experience, or bachelor’s degree and 5 years. Requires Java, Spring Boot, JavaScript, TypeScript, Adobe Experience Manager, REST, Docker, Kubernetes, CI/CD, and cloud monitoring experience.
Fortreum: Provides cybersecurity compliance and technical auditing services for regulated industries.
3+ YOEActive Top Secret clearance or ability to obtain,3+ years web application and network penetration testing,2+ years professional services experience,proficient with scripting (bash,python,PowerShell,ruby),knowledge of OWASP/MITRE ATT&CK/OSSTMM/PTES.
Bellevue or Chicago or New York City or San Francisco or Washington
$161k-$248k/yrHybridFull Time
OktaNASDAQ: OKTA: Provide secure identity management and authentication for enterprises.
8+ YOE8+ years in security engineering or backend development, expertise in AI threat landscape, strong coding in Python or Go, cloud (AWS/GCP) experience, and leadership/mentorship ability.
Python, Go, LangChain, Strands, Claude Agent SDK, AWS, GCP, OWASP, MITRE ATLAS, NIST AI RMF
University of Washington: Provides higher education and comprehensive academic healthcare services.
5+ YOEBachelor's degree,5+ years audit experience including 3+ years IT audit or technical equivalent,professional certification such as CISA/CISSP/CISM,knowledge of COBIT/NIST/OWASP and IT controls,ability to perform computer forensics and data analytics.
The Trade DeskNASDAQ: TTD: Cloud-based programmatic advertising platform for data-driven media buying.
2+ MgmtLeadership experience building security engineering teams; deep application and platform/cloud security expertise; experience with security program maturity, vulnerability management, and secure SDLC practices.
SAST, DAST, SCA, CSPM, MITRE ATT&CK, NIST, ISO 27001, ISO 27002, OWASP, CWE, AWS, GCP, Azure