Remote Security Consultant — AppSec & Pentesting

IOActive, Inc.; United States; Hybrid; USD 65,000 - 150,000; Full time

Benefits offered by this job

Remote work flexibility

Travel opportunities

Competitive compensation and benefits

Job summary

IOActive, Inc. is seeking a Security Consultant for a fixed-term engagement of up to 3 months, with potential renewal. You will perform web/mobile app assessments, infrastructure reviews, and AI-enhanced pentesting, delivering clear reports and actionable remediation guidance.

You’ll work with senior stakeholders, reporting findings and supporting client discussions, with opportunities to travel and contribute to cutting-edge research.

Qualifications

• 5+ years in offensive security services, with at least 2–3 years focused on application security and source code review.
• Hands-on engagement delivery across multiple AppSec disciplines — application penetration testing, code review, or SDLC consulting
• The ability to work independently under deadlines.
• Strong technical credibility and the comfort to operate as a senior voice on engagements
• Excellent written communication — you produce reports that developers act on rather than file
• Strong verbal communication, with the ability to both present as a subject matter expert in technical discussions and deliver complex concepts
• Nice to have - Familiarity with relevant standards and frameworks: OWASP, NIST, ISO, SAE
• Relevant bachelor's degree or equivalent experience
• Relevant industry certifications strongly preferred: OSCP, OSWE, GWAPT, CSSLP, GWEB, or equivalent application-security focused credentials

Responsibilities

• Conduct application security assessments for web and mobile applications (Android/iOS), APIs, and other software systems.
• Conduct infrastructure and cloud configuration security reviews
• Conduct assessments incorporating AI-based and traditional pentesting approaches against real world threats.
• Identify and document security vulnerabilities, misconfigurations and deviations from best practices, providing actionable recommendations to address them.
• Prepare clear, professional reports describing identified risks and recommended remediation steps.
• Participate in client meetings and technical discussions

Skills

Offensive security

AppSec testing

Code review

Report writing

Client communication

Independent work

Education

Bachelor's degree or equivalent experience

Tools

OWASP

NIST

ISO

SAE

Job description

IOActive, Inc. is seeking a Security Consultant for a fixed-term engagement of up to 3 months, with potential renewal. You will perform web/mobile app assessments, infrastructure reviews, and AI-enhanced pentesting, delivering clear reports and actionable remediation guidance.

You’ll work with senior stakeholders, reporting findings and supporting client discussions, with opportunities to travel and contribute to cutting-edge research.