San Francisco or New York City or Seattle or Austin
$151k-$280k/yrOnsiteFull Time
Rippling: Unified platform managing workforce HR, IT, and finance operations
5+ YOE5+ years product security experience, deep web application security, fluency in Python, React, Django Rest Framework, experience with code review, CI/CD application security, and mentoring engineering teams.
DataRobot: Provides an enterprise platform for building and governing AI.
8+ YOEMust be a U.S. citizen with 8+ years in information security/product security, federal compliance (FedRAMP/DoD) experience, proficiency with Python or Go, container/Kubernetes security knowledge, and strong communication skills.
Candid Health: Automates medical billing and revenue cycle management for healthcare providers.
5+ YOE5+ years in software or security engineering focusing on product security; strong cloud and web security knowledge; collaboration and problem solving.
Cogent Security: Autonomous AI agents for enterprise vulnerability remediation.
5+ years security engineering experience in application/product security, secure SDLC, threat modeling, code scanning, supply-chain security, strong software engineering skills, and familiarity with modern AI security concerns.
ZooxNASDAQ: AMZN: Developing autonomous robotaxis for urban ride-hailing services.
5+ YOEMaster’s degree in computer science or related engineering, 5+ years’ experience, systems engineering and cybersecurity expertise, quantitative risk assessment, embedded-system security analysis, and technical writing.
EPSS, Monte Carlo simulations, ISO 21434, UNECE R155, NIST CSF, SOC2 Type2, UDS, JTAG, CAN/LIN, I2C, SPI, AI/LLM toolchains
Airwallex: Global financial platform for business payments and money management.
5+ YOE5+ years in security engineering or incident response, experience with a major cloud platform, CI/CD tooling, strong adversary/forensic knowledge, incident response skills, and excellent communication.
Headway: Builds technology that helps therapists accept insurance and run their practice to increase access to mental health care.
5+ YOE5+ years security or software engineering experience, strong application and product security skills, experience with cloud and modern stacks, security reviews, incident response, and AI-native tooling.
OktaNASDAQ: OKTA: Provide secure identity management and authentication for enterprises.
7+ YOE7+ years in information security with deep application/offensive research or AI/ML security, hands-on assessment of LLM-integrated and agentic systems, proficiency in multiple programming languages, threat modeling, manual code review, and strong communication.
Collective: All-in-one financial platform for self-employed entrepreneurs.
4+ YOE4+ years security engineering experience focused on application security; hands-on SAST/DAST/SCA tooling and CI/CD integration; experience with remediation, threat modeling, and AI/LLM-driven automation.
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
8+ YOE8+ years in security roles, experience with LLMs/agentic systems, knowledge of AI security attack surfaces, threat modeling, pen/code reviews, strong communication, and a related technical degree required.
LLMs, RAG, MITRE ATT&CK, ISO 27001, SOC 2, PCI DSS, OWASP Top 10, CWE Top 25
Cognition: Developing autonomous AI agents for software engineering.
Hands-on security engineer with product and infrastructure security, threat modeling, and incident response; strong software fundamentals in Python, Rust, and Go; cloud and web security expertise; degree in CS/Engineering.
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
5+ YOE5+ years building and scaling production services; experience with vulnerability management, distributed systems, cloud infrastructure security; strong engineering and communication skills.
Zipline: Operates an autonomous drone delivery system for medical supplies.
8+ YOERequires 8+ years securing large-scale production systems, hands-on Python or Go engineering, cloud-native and microservices expertise, vulnerability management, incident response, threat modeling, and quantitative security metrics.
Merge: Unified API platform for connecting B2B software integrations.
3+ YOE3+ years security engineering with product/application focus; familiarity with OWASP, threat modeling, secure code review, SAST/DAST/SCA and CI/CD integration; able to read/write code; SaaS/API experience.
Nuvo: Platform for automating B2B commerce and trade credit management.
5+ YOE5+ years security engineering experience with deep application/product security expertise; experience across cloud, infrastructure, detection; threat modeling, secure design, code review, and building a security program.