Senior AppSec Consultant — Remote & Travel Ready

IOActive, Inc.; España; Teletrabalho; EUR 60 000 - 110 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work flexibility

Travel opportunities

Competitive compensation

Resumo da oferta

IOActive seeks a Senior Consultant, Application Security to perform deep manual code reviews across web and systems languages, paired with application penetration testing, threat modeling, and SDLC advisory engagements.

With 5+ years in offensive security and 2–3 years in AppSec, you’ll lead engagements, mentor others, and contribute to IOActive’s AppSec capabilities. Remote work options and travel may be available as part of a dynamic, globally distributed team.

Qualificações

• 5+ years in offensive security services with 2–3 years in application security and code review.
• Hands-on engagement delivery across AppSec disciplines: code review, pen-testing, threat modeling, or SDLC consulting.
• Familiarity with vulnerability classes and secure development lifecycle practices.

Responsabilidades

• Lead manual source code reviews on complex production codebases (web, mobile, APIs, embedded).
• Identify vulnerability classes from injections to cryptographic flaws and architectural weaknesses.
• Author findings reports with remediation guidance and architectural recommendations.
• Lead client workshops to explain findings and patterns for secure resilience.

Conhecimentos

Code review

AppSec

Threat modeling

SDLC advisory

JavaScript/TypeScript

Python

Java

C#/ASP.NET

C/C++

Rust

GoLang

Formação académica

Relevant bachelor’s degree or equivalent experience

Ferramentas

OWASP ASVS

NIST SSDF

BSIMM

SAMM

Descrição da oferta de emprego

IOActive seeks a Senior Consultant, Application Security to perform deep manual code reviews across web and systems languages, paired with application penetration testing, threat modeling, and SDLC advisory engagements.

With 5+ years in offensive security and 2–3 years in AppSec, you’ll lead engagements, mentor others, and contribute to IOActive’s AppSec capabilities. Remote work options and travel may be available as part of a dynamic, globally distributed team.