Application Security Engineer

Two Barrels LLC; United States; Remote; USD 175,000; Full time

Job summary

An established industry player is seeking a dedicated Security Engineer to join their innovative team. This remote position offers a competitive salary and the opportunity to focus entirely on security efforts. As a key player, you'll utilize your expertise in penetration testing to identify vulnerabilities, automate processes, and communicate findings effectively. With a commitment to employee well-being, the company provides a comprehensive benefits package, including generous paid time off, flexible hours, and full medical coverage. If you're passionate about security and eager to make a difference, this role is perfect for you.

Benefits

Work From Home comfort package

Company provided equipment

22 days paid time off annually

4 paid holidays

Up to 5% 401k employer matching

100% employer-paid medical, dental, and vision

Maternity and Paternity Leave

Flexible hours

Coffee shop next door

Easy public transportation options

Qualifications

• 2+ years of webapp and network pentesting experience required.
• 4+ years in Ruby on Rails or equivalent and frontend frameworks.

Responsibilities

• Identify vulnerabilities to keep information secure.
• Create security vulnerability reports for technical and executive audiences.

Skills

Penetration Testing

Ruby on Rails

Vue.js

Linux

Cloud Environment Testing

Information Systems Security

Problem-Solving Skills

Web Application Security

Education

Bachelor's Degree in Computer Science or related field

Tools

Open Source Penetration Testing Tools

Job description

Overview:
Two Barrels is hiring a Security Engineer for $175,000/year. You will be a traditional company employee. This is a full time 40 hour/week position with company benefits. This is a remote position. Our main office is in Spokane WA, and we have satellite offices in Austin TX and Salt Lake City UT.
We are expanding our team to include a Security Engineer to be 100% focused on our security efforts. As the right candidate, you will have experience working in-house as a full-time penetration tester, a regular 3rd party bug bounty program pen tester, or in a similar security type role. Your job will be to identify our vulnerabilities to help keep our information safe and secure.
Location:
Remote | Spokane - Austin - SLC |
Duration:
Full Time
Wage:
Up to $175,000/year
Responsibilities:

• Understand and safely use various open source penetration testing tools and when appropriate, emulating hacker tactics, techniques, procedures
• Create security vulnerability reports for both technical and executive audiences
• While in-between assessments, you will be expected to help our security engineers think through solutions to problems you find
• Automate tasks and script at a basic level to enhance penetration testing processes
• Passion for learning new technologies and processes, and contributing to refining existing capabilities
• Communicate with stakeholders (technical and non-technical), both verbal and written
• Stay up to date on 0 day exploits for tech stacks we use

Minimum Qualifications:

• Solid fundamentals in webapp and network pentesting (2+ years). Pentesting experience in mobile apps, APIs, and/or cloud environments a bonus
• 4+ years of professional experience in Ruby on Rails or equivalent and Vue or a Frontend equivalent framework
• Experience with Linux and cloud environment testing
• Understanding of security issues for desktop, virtual, cloud services and network infrastructures
• Working knowledge of information systems security standards/practices (e.g., access control and system hardening, system audit and log file monitoring, security policies, and incident handling)
• Experience with secure network protocols and encryption of communications between networked hosts
• Experience in IT systems and security policies, standards, industry trends, and techniques
• Experience with assessing APT threats, Penetration Testing, Vulnerability Management, attack methodologies, forensics analysis techniques, malware analysis, attack surface comprehension, Cyber Threat Emulation operations, Cyber Advanced Threat Emulation Team operations and research, identification, and/or verification of new APT TTPs
• Fundamental understanding of security knowledge of testing mobile, native applications, web applications, distributed and database systems
• Must be detail-oriented and possess strong problem-solving skills and ability to analyze for potential future issues
• Solid understanding of common webapp vulnerabilities, exploitation techniques, and remediation options

Benefits:

• Great Wage & Success Meetings with your manager
• Work From Home comfort package & company provided equipment
• 22 days paid time off annually, PLUS 4 paid holidays
• Up to 5% 401k employer matching through Fidelity
• 100% employer-paid medical, dental and vision for employees
• Maternity and Paternity Leave
• Flexible hours
• Coffee shop next door
• Crappy parking? Oh, I mean a cool downtown location for easy public transportation options...