Role Description This is the company’s first dedicated security hire. You will define and build the company’s security program from scratch, working directly with a security-minded co-founder. This role spans product security, application security, corporate security, compliance, incident response, and detection. Over time, this person may build and lead the security function. - Own the company’s security posture across product, infrastructure, and internal systems - Lead security reviews, threat modeling, and secure design work - Build foundational security systems such as secrets management, audit logging, vulnerability management, and certificate infrastructure - Drive compliance programs such as SOC 2, ISO 27001, GDPR, and CCPA - Define incident response processes and detection capabilities - Partner closely with engineering to embed security into product development - Help shape security culture across a small, high-caliber team Qualifications - 5+ years of security engineering experience - Strong application security background - Experience with secure SDLC, threat modeling, vulnerability management, and security architecture - Experience contributing to or running security programs - Compliance experience, ideally SOC 2, ISO 27001, GDPR, or similar - Backend or systems engineering fluency; Go experience is a plus - Ability to operate with high ownership in an early-stage environment - Low-ego, collaborative mindset and willingness to wear multiple hats Nice to Have - First or second security hire experience at a startup - Detection engineering experience - Identity, access management, enterprise IT, or security software background - Kubernetes, GCP, cloud security, or infrastructure security experience - Published security research, talks, or open-source security work

Role Description The Database Security Engineer is responsible for securing and protecting the organization’s enterprise databases, database platforms, and related data assets. This role combines database administration expertise with information security best practices to ensure the confidentiality, integrity, and availability of sensitive company and customer data. The role is part of the Security Engineering team and will work closely with Infrastructure, Application Development, Information Security, Compliance, and business stakeholders to: - Implement database security controls - Monitor database activity - Support regulatory compliance initiatives - Reduce organizational risk The ideal candidate will have a strong background in database administration (DBA) along with hands-on experience in: - Database security - Auditing - Vulnerability management - Data protection technologies in on-premise data center and public cloud environments The candidate must be familiar with a variety of database technologies, security concepts, practices, and procedures. Qualifications - BA/BS in Computer Science, Computer Engineering, Information Systems, or equivalent experience - 7+ years of experience in database administration, database engineering, or database security - Strong hands-on experience administering enterprise database platforms such as SQL Server, Oracle, PostgreSQL, or MySQL - Experience implementing database security controls including encryption, auditing, access controls, and privileged access management - Experience with database vulnerability scanning, monitoring, and remediation processes - Experience in highly regulated environments, preferably Financial Services or similar industries - Experience supporting cloud database technologies and security best practices in AWS, Oracle and/or Azure Requirements - Strong understanding of database architecture, database administration, backup/recovery, and performance concepts - Knowledge of methods to secure databases, applications, and sensitive data assets - In-depth knowledge of data protection engineering principles, DLP, encryption, masking, and tokenization - Strong research and troubleshooting skills - Strong verbal and written communication skills - Skill with SQL, Python, Bash, or PowerShell scripting Benefits - This role will be remote based anywhere in the US - The base compensation will be based on experience - There will be an opportunity for an incentive-based bonus Certifications, Licenses, and/or Registration - Preferred: CISSP, CISA, Security+, Microsoft Certified: Azure Database Administrator Associate, Oracle Database Security Certified Implementation Specialist, AWS Certified Security – Specialty, GIAC certifications, Microsoft SQL certifications, or equivalent database/security certifications

• Analyse und Behebung von Vulnerabilities im IAM-Umfeld • Weiterentwicklung und Optimierung bestehender Full-Stack-Anwendungen • Umsetzung sicherheitsrelevanter Anpassungen im Backend und Frontend • Betrieb und Deployment von Anwendungen auf einer OpenShift-Plattform • Durchführung von Code Reviews • Sicherstellung von Qualität, Stabilität und Wartbarkeit der Software

Role Description We have already disclosed vulnerabilities in curl (150+ bugs fixed), FFmpeg, django-allauth, OpenSSL, and Avahi. You will expand that list. This role sits at the intersection of manual security research and AI-augmented discovery. You will audit codebases, validate and triage findings from our LLM-powered scanner, and feed your expertise back into the detection engine. Your work directly improves what the AI catches next time. What You'll Do - Conduct security research on open-source projects and customer codebases across multiple languages - Validate and triage AI-generated vulnerability findings to calibrate false positive rates - Write detailed vulnerability reports and coordinate responsible disclosure and CVE assignment - Define and refine detection rules, heuristics, and prompt strategies for the scanning engine - Collaborate with the engineering team to improve detection of business logic and auth flaws - Contribute to our public research blog and Wall of Fame Qualifications - 3+ years of experience in application security research, penetration testing, or red teaming - Demonstrated ability to find and responsibly disclose vulnerabilities (CVEs, bug bounties, or published research) - Strong understanding of common vulnerability classes: OWASP Top 10, business logic flaws, auth bypasses, injection chains - Proficiency in reading and analyzing code across Python, JavaScript/TypeScript, Go, Java, or C/C++ - Experience with static analysis concepts, code review, and source code auditing - Excellent written communication for vulnerability reports and research write-ups Nice to Have - Published CVEs or a meaningful bug bounty track record - Experience with tree-sitter, semgrep, CodeQL, or similar code analysis tooling for benchmarking - Familiarity with LLM-powered security tools or AI-augmented research workflows - Contributions to open-source security projects Compensation $180-230K + equity