Remote AppSec Senior Consultant: Code Review & SDLC

IOActive, Inc.; Seattle (WA); Ibrido; CAD 107.000 - 249.000; Tempo pieno

Vantaggi offerti da questo lavoro

Remote-friendly work model

Travel opportunities

Competitive compensation

Descrizione del lavoro

IOActive, Inc. is seeking a Senior Consultant, Application Security to lead code reviews and penetration testing across web, mobile, and API targets. You will model threats, advise on SDLC processes, and guide client teams toward secure development practices.

The role emphasizes deep code review expertise, broad AppSec capabilities, and the ability to mentor others while engaging with executives and technical leads in high-stakes engagements.

Competenze

• 5+ years in offensive security services with focus on appsec.
• Deep code review expertise across multiple languages.
• Experience with threat modeling and SDLC advisory.
• Strong client workshop and report-writing skills.

Mansioni

• Lead manual source code reviews on complex production codebases.
• Identify vulnerability classes from common issues to advanced flaws.
• Author remediation-focused findings reports and PoCs; provide architectural recommendations.
• Lead client developer workshops to explain findings and patterns.
• Perform app penetration testing across web, API, and mobile targets.
• Conduct threat modeling using STRIDE or equivalent frameworks.
• Provide secure design reviews of architecture and cryptographic implementations.
• Assist SDLC advisory engagements for CI/CD, PR workflows and developer training.
• Mentor junior consultants and contribute to playbooks and tooling.
• Represent IOActive in AppSec industry discussions and client advisory engagements.

Conoscenze

Code review

AppSec

Threat modeling

Penetration testing

Client workshops

Formazione

Bachelor's degree

Strumenti

JavaScript/TypeScript

Python

Java

C/C++

Go

Descrizione del lavoro

IOActive, Inc. is seeking a Senior Consultant, Application Security to lead code reviews and penetration testing across web, mobile, and API targets. You will model threats, advise on SDLC processes, and guide client teams toward secure development practices.

The role emphasizes deep code review expertise, broad AppSec capabilities, and the ability to mentor others while engaging with executives and technical leads in high-stakes engagements.