Senior AppSec Consultant: Threat Modeling & Code Review

IOActive, Inc.; España; On-site; PHP 4,520,796 - 10,548,524; Full time

Benefits offered by this job

Competitive compensation

Performance-based incentives

Opportunities for travel

Job summary

IOActive, Inc. seeks a Senior Consultant in Application Security to lead manual source code reviews and execute application penetration testing. The role requires expertise in multiple languages including JavaScript, Python, and Java.

Candidates should have at least 5 years in offensive security services, strong communication skills, and the ability to mentor junior consultants. Competitive salary range is $75,000 to $175,000 based on experience and location.

Qualifications

• 5+ years in offensive security services, with 2–3 years focused on application security.
• Hands-on engagement delivery across multiple AppSec disciplines.
• Deep code review expertise in major programming languages.

Responsibilities

• Lead manual source code reviews on complex production codebases.
• Identify various vulnerability classes from common to nuanced.
• Author findings reports for developers with remediation guidance.

Skills

Offensive security services

Application security

Code review

Penetration testing

Threat modeling

SDLC consulting

JavaScript/TypeScript

Python

Java

C#/.NET

Education

Relevant bachelor's degree or equivalent experience

Tools

OWASP ASVS

NIST SSDF

BSIMM

SAMM

Job description

IOActive, Inc. seeks a Senior Consultant in Application Security to lead manual source code reviews and execute application penetration testing. The role requires expertise in multiple languages including JavaScript, Python, and Java.

Candidates should have at least 5 years in offensive security services, strong communication skills, and the ability to mentor junior consultants. Competitive salary range is $75,000 to $175,000 based on experience and location.