• Write and ship clear, simple code that makes educators’ lives easier and improves student outcomes. • Partner with product owners, design, and senior engineering teammates to ensure we build features as cleanly and simply as possible. • Actively utilize and champion AI development practices within your daily workflow, helping your peers find ways to increase sprint velocity and code quality. • Build and maintain features that operate robustly at scale while adhering to the highest level of security for the schools that rely on us. • Contribute to a unified technical direction and a team culture focused on excellence, continuous learning, and speed. • Actively participate in PR reviews and help implement the future architecture of our systems, including supporting the evolution of our monolithic systems.

• Contribute to infrastructure that empowers millions of developers to do their best work • Grow SCIP into a thriving, self-sustaining, multi-party open standard • Shape governance and the roadmap by owning the protocol with its indexer ecosystem • Review and mentor contributors and help set Sourcegraph's product direction for code intel

Role Description Our Cloud Security Engineering team is where compliance meets cloud operations. We work directly with clients' engineering and security contacts to monitor and remediate failing cloud security tests in GRC platforms like Vanta, keeping AWS, Azure, and GCP environments continuously compliant without slowing down the teams that build in them. We are seeking a consultative and hands-on Vulnerability Management (VM) Engineer to join our elite Delivery team. You will serve as the primary security advisor for an assigned portfolio of fast-growth startups, helping them identify, prioritize, and fix risks. In this role, you will seamlessly combine scanning infrastructure management with high-touch client advisory. What You'll Do - Orchestrate Vulnerability Scanning Infrastructure: - Configure, schedule, and maintain authenticated credentials, scan policies, and asset groups across client networks and cloud-native environments using enterprise platforms (Tenable/Nessus, Qualys, Rapid7 InsightVM, and Vanta). - Execute Threat Analysis and Risk Prioritization: - Evaluate raw scan outputs and filter false positives; apply advanced risk-based prioritization data utilizing CVSS base scores, EPSS real-time exploit indices, global threat intelligence feeds, and critical client asset contexts. - Drive Collaborative Remediation and Governance: - Translate technical vulnerabilities into clear, actionable architectural guidance and patch-management workflows; partner directly inside the trenches with client software engineers and IT teams to multi-thread remediation efforts and accelerate their sub-30-day time-to-remediate velocity. - Manage Exceptions and Audit Compliance: - Document, verify, and track formal client requests for temporary vulnerability exceptions or long-term risk acceptances; map operational patching data directly to control evidence required for regulatory audits (SOC 2, ISO 27001, HIPAA, CMMC, and NIST). - Own the Advisory Client Experience: - Act as the strategic primary point of contact and trusted security advisor for an assigned portfolio of fast-growth startups; deliver regular project milestones, handle high-priority technical escalations with calm professionalism, and generate regular status reports and executive summaries that communicate technical risk as clear business value. Qualifications - Hands-on configuration and operational experience with one or more vulnerability management scanning platforms (Tenable/Nessus, Qualys, Rapid7 InsightVM, or Vanta). - A deep, accurate understanding of vulnerability scoring systems (CVSS, EPSS indices) and data-driven, risk-based prioritization methodologies. - The explicit ability to interpret raw scan outputs, filter out false positives, and seamlessly translate complex technical findings into business-relevant risk language for corporate stakeholders. - Foundational familiarity with common vulnerability classes, cloud container exposures, configuration defects, and exploit vectors across cloud, OS, application, and network infrastructure layers. - Working knowledge of standard information security compliance frameworks (such as SOC 2, ISO 27001, HIPAA, or CMMC) and how automated infrastructure scanning maps to regulatory audit evidence. - A highly consultative, client-centric approach to engineering delivery; utilizing technical documentation, professional written summaries, and clear milestone mapping to manage multiple client engagements simultaneously and interact directly with US-based tech founders. Nice to Have - Experience with patch management workflows and coordination with IT and engineering teams. - Relevant certifications (e.g., CompTIA Security+, CEH, Tenable Certified Security Associate, or GIAC GEVA). - Familiarity with cloud environments (AWS, GCP, Azure) and cloud-native vulnerability surfaces. - Understanding of the CVE lifecycle, NVD, and threat intelligence feeds. - Prior experience in a managed security services or consulting environment. Benefits - Career Development: Clear path with mentorship and training opportunities. - Technical Training: Comprehensive onboarding on security and compliance frameworks. - Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities. - Growth Opportunity: Early-stage company with significant room for career advancement. - Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team. What You'll Need to Thrive - Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams. - A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration. - Commitment to working a standard schedule of 8:00 AM–5:00 PM US Eastern Time (ET) to effectively support hiring managers, candidates, and cross-functional teams. - Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed. Hiring and Selection Process - Candidates must participate in live video interviews throughout the hiring process with the camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding. - Employment is contingent upon successful completion of identity verification and background screening, where permitted by law. - Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles. - Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step. Workstreet Is An Equal Opportunity Employer As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.

Role Description You'll be one of our first engineering hires - as a small, fast-moving engineering team, we need someone who can hit the ground running and take real ownership. This isn't a maintenance job on a mature codebase; it's building at the edge of genuinely unsolved problems. Your work will go live in front of enterprise clients and millions of shoppers within days, not quarters. - Work on a mix of new product features, client integrations, and production support. - Set up client implementations, troubleshoot issues in production, and communicate directly with enterprise brands. - Build AI-powered capabilities such as dynamic video ranking, AI product tagging, and AEO (AI Engine Optimization). Technical Reality - Core product is a JavaScript widget that loads on millions of product pages across enterprise DTC storefronts. - Focus on performance, reliability, and pixel-perfect rendering across different client environments. - Write JavaScript embeds, connect to shopping cart APIs, match CSS to brand style guides, and debug across browsers. - Fix production issues and explain them to non-technical clients. - Codebase is human-architected and actively maintained with tests and code reviews. - Engineers own their work end-to-end: build, merge, deploy, and support in production. What You’ll Do - Build and ship new features across the full stack: frontend interfaces, backend services, AI-powered product capabilities. - Own client integrations end-to-end: setup, CSS customization, shopping cart connections, and ongoing support. - Troubleshoot production issues quickly and communicate clearly with enterprise clients. - Collaborate directly with the founding team to turn customer feedback into product decisions. - Participate in code reviews and help set engineering standards as the team grows. - Bring a product eye and the ability to spot opportunities to improve the experience. Qualifications - 2 to 4 years of professional full-stack experience, with a track record of shipping production software. - Strong React and TypeScript skills; experience building customer-facing frontend systems. - Solid JavaScript and CSS fundamentals; ability to make designs pixel-perfect. - Backend experience with Node.js and comfort working with databases (PostgreSQL preferred). - Clear written and verbal communication skills. - CS degree or equivalent practical experience. - Authorized to work in the U.S. without visa sponsorship. Nice-to-Haves - Experience at an early-stage startup (pre-Series A is a big plus). - AWS experience with setup, deployment, or infrastructure. - Familiarity with e-commerce platforms like Shopify or Salesforce Commerce Cloud. - Exposure to data engineering, ML/AI systems, or video platforms. - Experience working in or alongside customer success and implementation roles. Compensation & Location - This is a fully remote role open to candidates based in the United States. - Base salary range: $150,000 to $160,000, depending on experience and qualifications. - Final compensation will be determined based on skills, experience, and interview performance. - Includes equity and a full benefits package. Our Commitment to Inclusion Hue is an equal opportunity employer. As a company founded by three women of color, inclusivity isn't a value we added later, it's why we exist. We welcome candidates of all backgrounds, identities, and lived experiences and are committed to building a workplace where everyone feels supported, valued, and empowered to do their best work.