Why do security at a startup when you can come do security for all the startups? :-)
Latacora builds security teams for startups. We work exclusively with startups in engagements that typically span several years and can even involve investments from our sibling venture fund. We own the entire problem: from cloud security to application security and corporate security. Eventually, we help them build out their own teams and transition themselves out.
We have clients in a wide array of fields (health care, fintechs, hardware, transportation, AI, even sports). You'll be a member of a growing security team with multiple practice areas, working with security veterans, talented developers just getting their start in security, and with the engineering teams of a couple of dozen startups. We're consultants, in a sense, but unlike any other consulting firm I'm aware of.
We are currently hiring for the following roles:
Security Architect: https://docs.google.com/document/d/e/2PACX-1vSMiP1SP6LbSJ7xW...
Senior Application Security Engineer: https://docs.google.com/document/d/e/2PACX-1vR6VlJe2tOinEFI1... (pssssst look here if you have applied crypto chops)
Application Security Engineer: https://docs.google.com/document/d/e/2PACX-1vQkesDV9FjsJu_gj...
Corporate Security Engineer: https://docs.google.com/document/d/e/2PACX-1vT08fr9roL1Nz7JG...
A word on our US benefits: we have an absolutely min-maxed 401(k) (incl. backdoor Roth, friendly loan provisions, etc) and a paid healthcare premium (incl family) with PPO and HDHP options (we’ll also max out your HSA). 18 days of vacation, unlimited sick days, 16w parental and paid medical and military leave.