183 Remote Cybersecurity Jobs in Italy

Senior Platform Security Engineer - AI Resilience & Security Enhancements (Contract) at Form3 (via Otta)

Cloud-native payments infrastructure connecting banks via secure managed real-time API.

5d ago

Own platform security controls for AI agent execution, CI/CD, production access, and software supply chain in payments; contract; must be hands-on in platform/devops/security, CI/CD, supply chain security, IAM/RBAC, Kubernetes, automation coding; bonus: Terraform, AWS/GCP, AI security.

Remote from Austria, Bulgaria, Croatia, Cyprus, Denmark, Estonia, Finland, Greece, Hungary, Italy, Latvia, Lithuania, Malta, Norway, Romania, Slovakia, or Slovenia only.

Senior Manager, Application Security at MetaMask

World’s leading crypto wallet.

Lead hands-on application security for a self-custody crypto wallet across extension, mobile, backend, smart contracts, DeFi and stablecoins; 8+ years AppSec/software security, 2+ years people leadership, TypeScript/JavaScript, Go or Solidity, supply chain security, bug bounty, pentesting; bonus: OSCP/OSWE/OSWA, AI workflow security, SOC2/ISO27001

Remote EMEA, excluding France, Italy, and Germany

Senior Application Security Engineer at Malwarebytes

ThreatDown by Malwarebytes simplifies detection, remediation, and protection against threats.

Own application security for Windows apps and bug bounty operations; must have bug bounty, SAST/DAST/SCA, GitHub Actions/GHAS, code review/security analysis for desktop apps, C/C++/C#/Java, cloud/desktop/mobile app security; bonus: CISSP/CEH/GIAC, AWS, Terraform, red teaming

Remote Europe: Italy, Spain, or Estonia only

Senior Software Engineer, Security Platform at Sezzle

Fintech empowering consumers with POS financing and digital payments.

Own and build the security platform for a fintech app: services, event bus, and CI security gates; on-call; 6+ years, Go, Python, Kubernetes, AWS, event-driven systems, CI/CD tooling, web app security, SAST/SCA/secret scanning, AI-assisted workflows; bonus: fintech, PCI DSS, SOC 2

Remote anywhere

Senior Software Engineer, Security Platform at Sezzle

Fintech empowering consumers with POS financing and digital payments.

Own and build the security platform for a fintech product: event-driven security services, CI security gates, and agentic triage workflows; on-call; 6+ years, Go, Python, AWS, Kubernetes, NATS/Kafka, GitLab CI, web app security, SAST/SCA/secret scanning, AI-assisted engineering; bonus: fintech, PCI DSS, SOC 2, supply-chain security

Remote anywhere

Security Engineer at Metabase

Open-source BI tools simplifying enterprise data measurement, analysis, sharing.

Own offensive product security and secure-by-default improvements for BI software; must find/exploit app vulns via source analysis, assess runtime behavior, implement fixes; skills: authn/authz, injection, untrusted data, strong engineering, Clojure or learn; Series B, equity, async-first

Remote anywhere

Senior Application Security Engineer at Wave

Award-winning, simple money management solutions for small businesses.

Own application security for mobile-money/fintech systems, including AI agent guardrails and API/database security; remote only within UTC -5 to +4; 7-8 years total, 3-5 in security, strong Python, fluent English; small 4-person security team, equity

Remote anywhere between UTC -5 and UTC +4

Senior Azure Engineer – Cloud Infrastructure, APIM & Security at LatentBridge

Production-ready AI for regulated workflows, with governance, traceability, explainability.

Own Azure cloud infrastructure for enterprise MCP connectivity and Microsoft Foundry model access; 7–10+ years; Azure APIM, Entra ID, VNets/Private Endpoints, Key Vault, Terraform/Bicep, Azure DevOps or GitHub Actions, Azure Monitor, Application Insights, KQL; bonus: financial services, Azure OpenAI/Foundry, certifications, AKS/Docker; 22-week two-phase programme

Remote policy unclear

Channel Manager - Cybersecurity at HarfangLab

Protect endpoints, empower analysts, overcome threats.

Own MSSP/channel partner revenue growth for a cybersecurity software platform; based in Paris, regular travel, fluent French and English; ~5 years in channel/account management, indirect sales, partner ecosystems, cybersecurity/software vendor experience, KPI/Salesforce

Paris-based with work-from-home flexibility; France only

Senior Security Engineer, Product & Infrastructure at Squads

Fintech for stablecoins and Solana, with developer platform Grid.

Own product and infrastructure security for stablecoin/fintech products and Solana systems; 8+ years; threat modeling, architecture review, vuln management, CI/CD scanning, IAM, secrets, network/container security, TypeScript/Rust/Go/Python; bonus: Solana Rust/Anchor, audit firm, HSMs/MPC/PKI, web/mobile offensive testing, AI red teaming, SOC 2; equity

Remote North America or Europe

Security Officer at Zeely Inc.

AI marketing platform helping SMEs create and promote high-performing content.

Own company-wide product and infrastructure security for an AI ads platform; fluent Ukrainian, B2+ English; 7+ years engineering, 3+ years security role, backend in Node/JS/TS, Java or C#/.NET, DevOps/cloud, incident response, AWS cert, SOC 2/ISO 27001; profitable, high-growth

Remote anywhere

Manager, IT & Security at People Data Labs

People and Company Intelligence

Own IT/security operations for a remote workforce; 3-5 years managing IT/security/technical ops teams, 3+ years in fully remote environments, AWS IAM/CloudTrail/Inspector/Organizations+SCP, SSO/Okta, Vanta, Python/Bash; bonus: Tailscale, SentinelOne, 1Password, Pulumi/Terraform, Datadog; manages 1 report; profitable, growing; stock

Remote anywhere

Security Engineer at Zeely Inc.

AI marketing platform helping SMEs create and promote high-performing content.

Own vulnerability remediation and incident response for an AI ads platform’s product and AWS infrastructure; fluent Ukrainian, English B2+; 5+ years engineering, 2+ years security, backend in Node.js/JavaScript/TypeScript, Java, C#/.NET, Go, or Rust, AWS; bonus: security certs, SOC 2/ISO 27001/CASA, GDPR/CCPA

Remote anywhere

Founding Security Engineer - Dragonfly Portfolio at Dragonfly

Global cross-border crypto venture fund from day one.

Matched into portfolio security engineering roles across crypto infrastructure; bonus: crypto/fintech, blockchain security, cryptographic signing, SOC 2/ISO 27001, founding security experience; spans early-stage to founding roles

Remote worldwide across portfolio companies; remote, hybrid, and in-person opportunities globally

Senior Security Engineer, Product at Jito Labs

Own product and protocol security for Solana infrastructure and user-facing crypto products; 5+ years, software engineering background, product/app security, threat modeling, secure design/code review, vuln testing, Rust/Go/C++/Python; bonus: smart contracts, Solana/SVM, onchain monitoring, HSMs, fuzzing/formal methods; remote-first, ~50-person team

Remote US or Europe

Blockchain Security Researcher at OpenZeppelin

Blockchain security leader with open-source libraries and development platform.

Own smart-contract security research, audits, design reviews, and co-creating protocol contracts for web3/onchain finance; advanced English; Solidity, Ethereum/EVM, smart-contract design/development, AI-native workflows/tooling; bonus: non-EVM chains, formal verification/fuzzing, appsec, audit contests, public research.

Remote anywhere

Security Engineer at Squads

Fintech for stablecoins and Solana, with developer platform Grid.

Own identity and endpoint security for stablecoin fintech products; must manage SSO/MFA/access policies, MDM/EDR, incident response, vendor/integration risk, Python or Bash; bonus: blockchain/Web3 threats, cloud security, SIEM/detection engineering, AI security ops; small team, works closely with Head of Security, equity.

Remote in North America or Europe

Head of Engineering in Network Security (Remote in EU or UK) at Abusix

Network abuse management and threat intelligence for telcos, blocking threats fast.

Lead a 10-person engineering/SRE team and own platform architecture for network security products; fluent English; hands-on coding, prior Head/Director/senior technical lead experience, startup/scale-up team building, product partnership, AI-assisted development; reports to CEO, leadership team, ESOP

Remote in EU or UK; UK or an EU country only

Security Engineer at Eight Sleep

Sleep fitness company delivering personalized Pod for better sleep worldwide.

Own broad security program areas for a sleep-tech company spanning corporate IT, identity, AI security, enterprise and cloud; 4+ years in security/IT engineering, SIEM, Google Workspace admin, MDM, identity lifecycle, Python/scripting, audit-ready documentation; bonus: Vanta/Drata, SOC2/ISO27001/HIPAA, regulated/health, incident response

Remote across the US, UK, Europe, Canada, and Latin America

Senior Security Engineer at WeTravel

Complete platform for seamless travel business management and growth.

Own infrastructure vulnerability management, cloud posture, detection/logging, incident response, and AI-tooling security for a travel/payments platform; 8+ years; AWS, Kubernetes, IaC, SIEM/MDR, vuln management at scale, SOC 2/PCI DSS; bonus: fintech, DFIR, GDPR/CRA, ISO27001.

Remote in Bulgaria, Ireland, Italy, Lithuania, Poland, Portugal, or Spain only

(Senior) Infrastructure & Security Engineer at Duna

Automated, compliant onboarding for enterprises; scalable and cost-efficient.

Own and harden identity-platform infrastructure and security; automate SOC 2/ISO 27001 controls; deep AWS or comparable, Kubernetes, IaC, CI/CD, observability, security engineering, enterprise IT; remote-first startup, infrastructure treated as product.

Remote Europe only; Amsterdam office listed.

Sr Platform Security Engineer (Zero Trust and Platform Security) at Radian Arc

Carrier-edge GPU platform enabling low-latency sovereign AI inference.

Own zero-trust and platform security for a GPU cloud platform serving multi-tenant AI workloads; 7+ years, cloud/infrastructure security, Kubernetes, IAM/PKI, SIEM/telemetry, security automation, datacenter/network security; scale-up

Remote Europe only

Security Operations Engineer (Remote - Europe) at SpotMe

Enterprise event platform enabling scalable hybrid events with CRM insights.

IT security role reporting to the Chief Security and Trust Officer; owns identity/access lifecycle, endpoint management for a macOS fleet, security controls/permission models across about a dozen SaaS tools, and internal tooling for access reporting, cross-tool investigation, and a tuned detection layer; role is measured on risk reduction rather than IT service; preventive-first but participates in incident response outside office hours when needed, though not a formal on-call rotation; 1-month goals include full tool/access inventory and independently running onboarding/offboarding/access requests; 3-month goals include assessing and prioritizing SaaS security settings and planning endpoint management/protection rollout; 6-month goals include fleet-wide endpoint protection, unified access review/evidence export, and a usable security dashboard for investigations; must span identity, endpoints, tool configuration and logging; specifically needs Google Workspace identity administration including SSO/SAML, groups/org units, admin roles, context-aware access, audit logs and alerts; also needs API fundamentals including REST, HTTP methods/status codes, API keys, and OAuth 2.0

Remote Europe only

Information Security Analyst, GRC at XBOW

Boosting offensive security with AI

individual contributor GRC/security analyst role supporting customer and prospect security reviews, contract review coordination with legal, vendor/third-party risk, compliance alert resolution in Vanta, risk frameworks/registers/policies, remediation tracking, audits, and compliance initiatives across SOC 2, FedRAMP 20x, ISO 27001, and ISO 42001; cross-functional partner to IT, Security, Engineering, Legal, Sales, and Customer teams; scope may expand as risk/compliance matures; must have 7+ years in risk/compliance/security assurance or related roles plus prior hands-on technical experience in engineering, IT, or operational security; must have direct experience with technical security questionnaires, customer risk assessments, vendor risk assessments, and frameworks including NIST, GDPR, and HIPAA; bonus: SaaS or security company experience, GDPR subject access requests, CRISC/CISSP, cloud security best practices

Remote UK/EU only

Application Security Engineer at RootstockLabs Ltd.

Empowering developers to build on Bitcoin, growing Rootstock and decentralized tech.

Secures Bitcoin-backed DeFi infrastructure; reviews source code, smart contracts, and protocol changes; threat modeling and architecture reviews with development teams; owns bug bounty triage/validation and coordinates external audits through remediation; builds security automation including AI-assisted code review, scanning, findings triage, CI security checks, monitoring alerts, and hardening; researches EVM, bridge, and p2p attack techniques and supports application-layer incident investigations; requires 3+ years in application/security engineering, secure code review in Java plus one of TypeScript/JavaScript, Python, Go, or Rust, blockchain security experience in Solidity/EVM or protocol/node security, security automation experience, and fluent English; bonus: bug bounty/disclosure programs, network or consensus attack mitigation, offensive security background, public security research, C/C++, fuzzing

Remote within UTC-3 to UTC+2 time zones; effectively Europe through Argentina-aligned LATAM time zones

Head of Information Security at OpenZeppelin

Blockchain security leader with open-source libraries and development platform.

Own and mature the company's Information Security, Privacy & IT program end-to-end under Legal; manage the team and department OKRs, risk posture, multi-year roadmap, and technology budget/procurement; lead AI security and governance for internal AI adoption including agentic infrastructure, model-provider/vendor diligence, retention/training-use commitments, DPAs, subprocessors, and EU AI Act readiness; own audit/certification/attestation strategy and execution including SOC 2 Type 2, ISO/IEC 27001, pen testing, internal audits, vendor risk, and customer security diligence with regulated financial institutions; own privacy/data governance including data mapping, classification, records of processing, GDPR and CCPA/CPRA compliance, and privacy-by-design reviews; own incident response, breach notification with Legal, bug bounty programs, and partner with development teams on SDLC security; oversee IAM, provisioning, endpoint/MDM, physical security, disaster recovery, business continuity, backups, and automation/AI-enabled IT ops; requires 10+ years in Security and IT, including 3+ years leading IT Security and GRC in a high-growth tech company, with executive/board-facing ownership of a security program; must have experience securing or governing AI/LLM-enabled products or enterprise AI adoption; bonus: 5+ years in blockchain or fintech serving enterprise clients

Remote anywhere

Forward Deployed Engineer – Vulnerability Management & Security at Aisle

Autonomously discovers and remediates vulnerabilities across entire software stack.

forward-deployed role in autonomous vulnerability remediation/security; deploys, configures, and integrates security platforms into sensitive government, defense, and high-security enterprise environments; reads and writes production code and works directly in customer/platform codebases for vulnerability identification, patch verification, and custom tooling integrations; bridges field deployments with engineering/AI teams to turn operational edge cases into platform capabilities; works with complex IT/OT/VPC architectures, air-gapped networks, Linux kernel internals, and containerized deployments; must hold active UK SC/DV, EU Secret, NATO Secret, or equivalent national security clearance; must understand vulnerability classes such as memory safety, logic flaws, web/network attack surfaces, and zero-day dynamics

Remote Europe and UK; deployments across UK and EU

Cloud Security Engineer at YGO GmbH

AI infrastructure for travel, enabling personalized booking without re-platforming.

Own and build the company’s security function while remaining hands-on; broad scope across application security, detection/response, cloud/platform hardening, API security, AI/LLM security, identity/company security, threat modeling, SOC 2 program, and future security hiring; secures APIs, backend services, internal tooling, enterprise SaaS/API products, client console, integrations, MCP server, and data-ingestion/LLM systems; enterprise commitments go live from the start of 2027; must have 5+ years of hands-on security across multiple disciplines; must have depth in appsec, authn/authz, cloud security, incident investigation, detection/alerting, threat modeling, and be comfortable working in code; must be able to use Claude Code with specific examples; bonus: prior Go, AI/LLM security, early security hire experience, leadership/mentoring, security tooling automation, MDM/IdP admin, compliance automation tools, GDPR/travel/GDS exposure, German

Remote EU or Africa time zones, within ±3 hours of CET

Platform Security Engineer (AMER/EMEA) at Supabase

Postgres development platform offering database, authentication, APIs, and real-time subscriptions.

Secures infrastructure, cloud platform, Kubernetes environments, and containerized workloads; partners with infrastructure, platform, SRE, product engineering, and technical leadership; focuses on threat modeling, architecture reviews, technical risk assessments, AWS security posture, Kubernetes/container hardening, Linux isolation risks, and building automation, guardrails, secure defaults, detection, and review frameworks; requires senior-level experience in platform/cloud/infrastructure/container security or security engineering; strong hands-on AWS, Kubernetes, containers, and Linux security fundamentals; experience in large cloud environments, multi-cluster Kubernetes, developer platforms, SaaS platforms, or high-scale infrastructure teams; async written communication emphasized

Remote anywhere

Information Security Officer at Coinspaid

Seamless cross-border crypto payments with fiat settlements and compliance.

Candidates must have at least 3 years of experience in Information Security, GRC, or Risk Management with practical knowledge of security frameworks. Strong communication skills and proficiency with GRC tools like Vanta or Drata are required, along with relevant certifications such as CISSP or CISM.

Remote Europe only

Backend Engineer, Security at Eneba

Europe e-commerce gaming marketplace for gamers, publishers, sellers, affiliates.

broad security-focused backend role spanning hands-on coding, incident response, threat hunting, bug bounty triage/remediation, anomaly investigation, access governance, and writing security policies/documentation; security team role working closely with backend engineering and other departments; first months focused on learning services/systems to secure them effectively; must: solid PHP, security knowledge or demonstrated security interest, background in IT/backend engineering or related technical field; bonus: monitoring/application monitoring experience, familiarity with OWASP Top 10; employee stock options mentioned

Remote Europe or US

Protocol Security Engineer at Matter Labs

Scaling Ethereum via zkSync L2 to expand global freedom.

Candidates must have a proven record in security engineering or research with experience in threat modeling and vulnerability analysis. Proficiency in strongly typed languages like C++, Go, or Scala is required, along with deep knowledge of algorithms and distributed systems.

Remote anywhere

Security Engineer - EMEA - Remote at Pencil

Pencil: Enterprise AI marketing OS unifying models, governance, workflows.

Candidates should have a background in desktop support, IT systems administration, or technical operations with hands-on experience in endpoint management and cloud basics. A security certification such as CompTIA Security+, ISC2 Certified in Cybersecurity, or Microsoft SC-900 is required or expected through self-directed learning.

Remote across EMEA; work from anywhere in your home country. UK employees can access the London office.

Senior Security Engineer - Remote at Parity

Decentralized, remote-first blockchain team improving Web3 developer experience worldwide.

Candidates must have experience with secure coding practices, memory safety, and code auditing within decentralized systems. A strong background in vulnerability analysis and an offensive security mindset are essential for this role.

Remote-first global role; can work from anywhere. Contractor via UK entity; background check required.

Customer Support Engineer - Endpoint/MTD (Device) & Cybersecurity at Zimperium

AI-driven mobile security leader protecting apps and devices.

Candidates must hold a bachelor's degree in computer science or a related field with 1-5+ years of experience in enterprise software support. Strong technical proficiency in SQL, scripting languages, and mobile device management solutions is required.

Remote in India. Customer-support engineering for enterprise mobile security; no other region restrictions stated.

Information Security Lead at Secfix

Automates 90% of SME security compliance and ISMS.

Candidates must have 7+ years of hands-on information security and GRC experience in B2B SaaS, including leading at least 5 successful ISO 27001 certification projects. Strong project management skills, fluent English, and 2+ years of people management experience are also required.

Remote in Europe (EU) only; must be within EU time zones, ~GMT+1 ±2 hours from Germany; C1/C2 English required.

Information Security Analyst at Cognism

Compliant-first B2B data and sales intelligence for European revenue teams.

Candidates should have 1-2 years of experience in security, GRC, or IT audit with a working knowledge of ISO 27001 and SOC 2. Strong communication skills and a detail-oriented, process-driven mindset are essential for success in this role.

Account Executive Nordics/UK - AI & Security at Escape Technologies

Automates offensive security lifecycle: attack surface management, AI pentesting, smart DAST.

Candidates must have proven experience in cybersecurity sales, specifically closing complex enterprise deals with long sales cycles. You must be fluent in English and either native/fluent in Swedish or possess deep UK market expertise, with the legal right to work in those regions.

Remote-first in Sweden and England; eligible to work there required; no visa sponsorship.

Security Director at ZODL

Original Zcash developers form ZODL and Zodl wallet.

Candidates should have experience with open-source software development and overseeing the security aspects of protocol implementation. Strong leadership, communication skills, and the ability to make informed decisions under pressure are essential for this management role.

Remote-first; can work from US, Chile, Czech Republic, France, Slovakia, UK, and New Zealand. No other restrictions stated.

Security Engineer at Qdrant

Open-source vector search engine powering AI apps with embeddings.

The role requires 3+ years of experience in security engineering or vulnerability management and the ability to read and navigate codebases in Rust, Go, or Python. Candidates must have practical knowledge of cloud and container security, specifically AWS and Kubernetes, and experience with CI/CD pipelines.

Remote Germany, France, Netherlands, Spain. Mid-level security engineering; low on-call with occasional high-severity availability.

Engineering Manager, Security *EU/UK remote*(m/f/d) at Pliant

API-first B2B payments platform with embedded, white-label Visa cards.

The role requires hands-on experience in DevSecOps or cloud security within AWS environments, including proficiency in Terraform and container security. You must also possess strong leadership skills and a working knowledge of compliance frameworks like PCI DSS and SOC 2.

EU/UK remote allowed; role is not open outside the EU or UK.

Senior Security Engineer at LiteLLM

Open-source Python SDK and FastAPI server for 100+ LLM APIs.

Candidates should be security generalists with deep expertise in auditing Python code and securing cloud-native environments. A background in CTFs, vulnerability research, and familiarity with LLM-specific attack surfaces is highly desired.

Remote location not specified; open to worldwide applicants. No region-based restrictions mentioned.

Senior Security Engineer at Glia

AI-powered banking interactions platform boosting efficiency for community banks.

The role requires credible hands-on experience in at least two security domains and the ability to scale security programs in a low-structure environment. Candidates must possess strong coding and automation skills, specifically in Python, along with deep AWS cloud security knowledge.

Remote in Europe; role located in Europe (remote-first with fully remote rituals).

Senior Software Engineer, Full-Stack - Security Platform at Vannevar

AI-powered defense platform delivering targeting, planning, and deterrence at edge.

Requires 7+ years of software engineering experience with strong backend expertise in languages like Python or Java and proficiency in full-stack development using React and Node.js. Must have deep knowledge of identity and authentication protocols such as OAuth 2.0, OIDC, and SAML.

Remote-friendly; no stated regional restrictions. Travel may be required for clearance-related user visits.

Senior Software Engineer (Go) - AI Resilience & Security Enhancements (Contract) at Form3 (via Otta)

Cloud-native payments infrastructure connecting banks via secure managed real-time API.

The role requires deep expertise in building distributed systems using Go and familiarity with cloud-native technologies like Kubernetes. Candidates should have a strong background in security-focused platform development and a collaborative approach to engineering.

100% remote. Contractors must be based in Austria, Bulgaria, Croatia, Cyprus, Estonia, Greece, Hungary, Italy, Latvia, Lithuania, Malta, Romania, Slovakia, Slovenia.

Senior Software Engineer (Go) - AI Resilience & Security Enhancements (Contract) at Form3 - External

Cloud-native, fully managed payments infrastructure as a service for banks.

Requires deep expertise in building distributed systems and proficiency in the Go programming language. Candidates should be familiar with cloud technologies, containerization, and software engineering best practices.

Remote from EU countries listed; first on-site day in the office to collect equipment.

Application Security Engineer at Oneleet

Cybersecurity startup delivering a platform to manage security programs.

Candidates should have over 5 years of application security experience and strong programming skills in languages like Go, Python, or TypeScript. Hands-on experience with security tooling and an understanding of vulnerability research are also essential.

Remote worldwide; global hiring with no location restrictions.

Security Operations Engineer at Yellow Card Financial

Largest licensed stablecoin payments orchestrator, enabling emerging-market international payments.

Own SOC detection/response and AWS/EKS cloud security posture for fintech stablecoin infrastructure; English required, cross-timezone collaboration; 3–5 years, AWS IAM/GuardDuty/CloudTrail, Kubernetes/EKS, SIEM, CSPM, Terraform/CloudFormation, incident response, Python/Bash; bonus: AWS Security Specialty, Datadog/Wiz/Orca, SOAR, crypto

Remote policy unclear

Senior Information Security Specialist (German-speaking) at Secfix

Automates 90% of SME security compliance and ISMS.

Requires C1/C2 German and fluent English, with over 5 years of GRC experience in B2B SaaS and a track record of leading ISO 27001 certifications. Must have hands-on experience with GRC platforms and cloud infrastructure across AWS, Azure, and GCP.

Remote EU time zones only (Germany included); EU-only hiring.

Senior Security Engineer at Ghost

Subscription-first publishing platform aligning incentives between creators and paying audiences.

Own app security for open-source publishing platform; UTC-6 to UTC+2, on-call; appsec ownership for real product, Node.js, TypeScript, web security, coordinated disclosure, AI-assisted security; bonus: open source, multi-tenant SaaS, corporate security; profitable, 4-day week

Remote anywhere; timezone overlap required: UTC-6 to UTC+2