Metropolis: Computer vision technology for checkout-free parking and retail payments.
Experience in application and product security, DevSecOps/secure SDLC, cloud-native system security, CI/CD security tooling, strong scripting/software engineering skills, and ability to partner with engineering teams.
New York City or San Francisco or Seattle or United States
$152k-$250k/yrHybridFull Time
Grow Therapy: Platform connecting mental health providers with patients and insurance.
Hands-on experience building data security and data-infrastructure (classification, masking/tokenization, encryption, key management), strong system-design and engineering skills, ability to set direction and communicate security tradeoffs to non-technical stakeholders.
Sift: Provides AI-based fraud detection and digital trust software services.
5+ YOE5+ years in security/infrastructure/application security; hands-on with AWS or GCP; proficiency in Python/Go/Java; experience with SAST/DAST and SIEM; knowledge of secure system design, incident response, and AI/LLM security risks.
Headway: Builds technology that helps therapists accept insurance and run their practice to increase access to mental health care.
5+ YOE5+ years security or software engineering experience, strong application and product security skills, experience with cloud and modern stacks, security reviews, incident response, and AI-native tooling.
Livingston or New York or Sunnyvale or Bellevue or San Francisco
$165k-$242k/yrOnsiteFull Time
CoreWeaveNASDAQ: CRWV: Cloud platform providing GPU-accelerated infrastructure for AI workloads.
5+ YOE5+ years cloud security architecture/engineering, Bachelor’s in Computer Science or related, deep public cloud (AWS/Azure/GCP) expertise, Terraform and IaC automation, proficiency in Go or Python, CI/CD and security controls experience.
Austin or Chicago or Houston or Los Angeles or New York or San Francisco or Seattle
$200k-$225k/yrRemoteFull Time
JLLNYSE: JLL: Global commercial real estate and investment management services.
6+ YOE6+ years security engineering, embedded product security within engineering teams, strong software engineering, experience with agentic AI architectures and identity/access (OAuth/OIDC), and excellent cross-functional communication.
Claude Agent SDK, MCP, OAuth, OIDC, SPIFFE, SPIRE, OWASP LLM Top 10, MITRE ATLAS
San Francisco or New York City or Seattle or Austin
$151k-$280k/yrOnsiteFull Time
Rippling: Unified platform managing workforce HR, IT, and finance operations
5+ YOE5+ years product security experience, deep web application security, fluency in Python, React, Django Rest Framework, experience with code review, CI/CD application security, and mentoring engineering teams.
5+ YOE5+ years security engineering and coding experience, security assessments or threat modeling, vulnerability management, bachelor\u0002s or equivalent, strong communication and collaboration skills.
AppleNASDAQ: AAPL: Designs and sells consumer electronics, software, and online services.
Partners with engineering teams to secure complex services and platforms through threat modeling, security guidance, and collaboration across security, privacy, and offensive security teams.
DigitalOceanNew York Stock Exchange: DOCN: Simplifies cloud infrastructure for developers, startups, and SMBs.
Deep kernel and virtualization security expertise, threat modeling and mitigation design, systems-level coding experience, strong communication, and familiarity with AppArmor/SELinux/Landlock, Qemu/KVM, and languages like Go, Rust, or C.
AppArmor, SELinux, Landlock, Qemu, KVM, Go, Rust, C
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
JPMorgan ChaseNYSE: JPM: Global financial services firm providing banking and investment solutions.
Proven experience leading security engineering teams and building cloud-based security platforms, expertise in endpoint/server/container protection, product ownership, and delivering AI/automation-driven security solutions.
Airtable: No-code platform for building collaborative apps and business workflows.
4+ YOE4+ years in product/application security; strong CS background; proficient in JavaScript/TypeScript, Node.js; experience securing LLM integrations; strong communication of security risks; thrives in fast-paced environments.
JavaScript, TypeScript, Node.js, Web Frameworks, Security tooling
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
8+ YOE8+ years in security roles, experience with LLMs/agentic systems, knowledge of AI security attack surfaces, threat modeling, pen/code reviews, strong communication, and a related technical degree required.
LLMs, RAG, MITRE ATT&CK, ISO 27001, SOC 2, PCI DSS, OWASP Top 10, CWE Top 25
Variant Bio: Biotechnology developing therapeutics by studying human genetic diversity.
8+ YOE8+ years building security systems, strong AWS security and IAM experience, networking and Zero Trust knowledge, proficiency in Python or Rust, strong attacker TTP knowledge.