Application Security Engineer x2

Ethereum Technologies; Weehawken (NJ); On-site; USD 93,000 - 133,000; Full time

Job summary

Ethereum Technologies is seeking an Application Security Engineer to perform in-depth software security analysis with a focus on third-party applications introduced by employees. The role emphasizes low-level computing fundamentals and cross-platform reasoning, primarily on Windows with some Linux environments.

Candidates should have hands-on experience in reverse engineering, tooling development, and security validation.

Qualifications

• Deep understanding of how a computer functions at a low level across OS and software stacks.
• Ability to reason about computing by referencing hardware/architecture concepts.
• Hands-on work, projects, or hobbies in compiler design, OS design, or hardware interfaces.

Responsibilities

• Reverse engineer binaries and analyze network traffic to uncover vulnerabilities.
• Develop or contribute to testing frameworks and tooling for security analysis.
• Ensure software complies with internal security guidelines and policies.
• Collaborate with internal teams to present findings and propose mitigations.

Skills

Low-level computing

Compiler design

OS design

Hardware design

Emulation/Virtualization

Vintage computing

Tools

Binary Ninja

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Title: Application Security Engineer x2

Location: Weehawken, NJ

Duration: 8 Months + Extension

Bill Rate: $82/hour (C2C)

Job Type: W-2, 1099, C2C

Client: To Be Discussed Later

Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Job Description

• Position: Security Consultant
• Core Focus: Software security analysis heavily emphasizing third-party applications introduced by employees.
• Primary Environment: Predominantly Windows software, with some Linux.

Primary Requirement: First-Principle Systems Knowledge

• Candidates must deeply understand how a computer functions at a low level, regardless of the operating system or software stack running on it.
• The ability to explain core concepts fundamental to modern computing is mandatory, as this foundation is required to effectively reason about security.
• Hiring managers will actively filter for this low-level understanding by looking for hands-on work experience, projects, or hobbies in the following areas:
• Compiler or Operating System design.
• Computer hardware design (especially secure hardware), including hardware interfacing and instrumentation.
• Code optimization.
• Emulation or Virtualization implementation and design (e.g., utilizing frameworks like QEMU for advanced testing or manipulation). Note: Merely using virtualization technologies as an end-user is insufficient.
• Vintage computing.

Technical Responsibilities & Capabilities

• Reverse Engineering & Analysis: Perform reverse engineering on binaries and conduct network analysis (e.g., interception, decryption) to uncover vulnerabilities, hidden data exfiltration, or unauthorized behaviors.
• Tooling: Familiarity with reverse engineering tools like Binary Ninja is a plus, but tool-agnostic capabilities are expected. Candidates who build custom offensive tooling, fuzzing frameworks, or automated testing protocols strongly align with the desired profile.
• Security Validation: Ensure software complies with internal security guidelines and internal policies (e.g., restricting unauthorized network connections).
• Collaboration: Work closely with internal domain experts, platform engineering teams, frontline support, and end users to deliver findings and suggest practical, balanced workarounds.

Experience & Qualifications

• Experience Level: 3–5+ years of relevant experience (mid-to-senior level).
• Valued Backgrounds: Prior experience in network/system administration, broad technical understanding of process flows, or participation in Capture-the-Flag (CTF) competitions.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.