SolutionBox Insight: Agentic software creation platform that lets anyone build applications using natural language.
8+ YOE8+ years in GRC or information security; deep cloud (GCP/AWS) and security architecture; strong regulatory experience; automation mindset with GRC tools.
GCP, AWS, Vanta, Drata, SOC 2, ISO 27001, PCI, HIPAA
Austin or Chicago or New York City or Redwood City or San Francisco or United States
$130k-$145k/yrHybridFull Time
BoxNYSE: BOX: Intelligent content management and collaboration platform.
5+ YOE5+ years in SaaS GRC or information security; GCP, AI architectures, data governance, model validation, NIST, PCI, ISO, SOC 2, communication, and process improvement experience.
Verkada: Physical security platform for enterprise buildings and facilities.
7+ YOERequires 7+ years in security or IT compliance, cloud service experience, software compliance experience, and SOC 2 or ISO 27001 audit, risk, and compliance experience.
RobloxNYSE: RBLX: Global platform for user-created immersive digital experiences.
4+ YOE4+ years GRC experience, risk assessment and policy development, ability to work with engineers, knowledge of compliance frameworks and security controls.
Factor Analysis of Information Risk (FAIR), Roblox Studio
3+ YOERequires 3+ years in technical security, Python, TypeScript, SQL, API and database experience, cloud security expertise, and familiarity with Terraform, CI/CD, Git, Docker, or Kubernetes.
5+ YOE5+ years in security or compliance engineering; hands-on SOC 2 Type II audit ownership; cloud security (AWS/GCP/Azure); GRC tooling experience; strong written communication and policy authorship skills.
SOC 2 Type II, ISO 27001, GDPR, CCPA, AWS, GCP, Azure, Sprinto, Tugboat Logic, GRC, CI/CD, infrastructure-as-code, DevSecOps, SDLC, IAM
Anthropic: AI research developing safe and steerable AI systems.
8+ YOE8+ years building backend systems, data pipelines, or internal platforms; proficiency in Python or Go; experience with cloud platforms and infrastructure-as-code; strong systems thinking and experience with integrations or data infrastructure.
Python, Go, AWS, GCP, Azure, Claude, ServiceNow, Vanta, Drata, OneTrust, REST APIs, webhooks, CI/CD, ELT, ETL, infrastructure-as-code, version control
Clearly AI: AI-powered security and privacy review software for enterprise security, privacy, and compliance teams.
2+ YOE2+ years in GRC, privacy, or security engineering; hands-on threat modeling, vendor risk, and security tool integrations; strong project management and customer debugging skills.
BlinkOps: Cybersecurity software providing an agentic security operations platform for security teams.
3+ YOE3+ years in sales/solutions engineering in cybersecurity, strong security operations knowledge, hands-on with APIs, JSON/YAML and jq, experience with SIEM/SOAR/EDR/IAM/GRC integrations, demo/POC and customer-facing skills.
Bright Machines: Private software and robotics manufacturer building AI and data-center infrastructure for hyperscalers.
5+ YOERequires 5+ years in security engineering or related work, ISO 27001 ISMS experience, application security tooling, scripting, infrastructure-as-code, cloud security, GRC, and strong English communication.
ISO 27001:2022, SIG, CAIQ, SAST, DAST, SCA, Snyk, Semgrep, Checkmarx, Burp Suite, Python, Terraform, Ansible, AWS, Azure, GCP, IAM, EDR, SOC, IDS/IPS, MFA, SSO, SOC 2 Type II
Skydio: American autonomous-drone manufacturer serving public safety, government, utility, and enterprise customers.
3+ YOE3+ years engineering experience; strong coding in Python or Go; experience automating workflows and integrating systems via APIs; working knowledge of cloud (ideally AWS); participation in on-call rotation; eligibility to access export-controlled technical data.
6sense: Private B2B revenue-intelligence and account-based marketing software serving sales and marketing teams.
5+ YOERequires 5+ years in GRC or similar, 2+ years building automation, Python and AWS experience, APIs and SQL, AI workflow experience, security frameworks, and ability to defend automated evidence to auditors.
Vapi: Private voice AI platform that lets developers and enterprises build, deploy, and manage conversational voice agents.
5+ YOE5+ years engineering experience in cloud-native SaaS; strong security experience for multi-tenant cloud environments; proficiency with AWS, Kubernetes, and Postgres; ability to write/review code and implement shift-left security.