Remote Senior AppSec Consultant & Code Reviewer

IOActive, Inc.; United States; Remote; USD 65,000 - 150,000; Full time

Benefits offered by this job

Remote or office

Travel opportunities

Competitive compensation

World-class teams

Innovation-driven culture

Job summary

IOActive, Inc. seeks Security Consultants to deliver comprehensive assessments including web/mobile application reviews, infrastructure pentests, code reviews, and security advisory engagements. This fixed-term role up to 3 months may renew and offers remote or office work with travel opportunities.

Candidates should have 5+ years in offensive security, with 2–3 years in AppSec and relevant certifications. You will report findings, document remediation steps, and participate in client

Qualifications

• 5+ years in offensive security services, with 2–3 years in AppSec and code review.
• Hands-on delivery across AppSec disciplines: pen-testing, code review, or SDLC consulting.
• Ability to work independently under deadlines.
• Strong technical credibility and senior voice on engagements.
• Excellent written reports that developers act on.
• Strong verbal communication for technical and general audiences.
• Nice to have: familiarity with OWASP, NIST, ISO, SAE.
• Bachelor’s degree or equivalent experience.
• Industry certifications: OSCP, OSWE, GWAPT, CSSLP, GWEB, or equivalent.

Responsibilities

• Conduct application security assessments for web and mobile apps, APIs, and software systems.
• Conduct infrastructure and cloud configuration security reviews.
• Assess with AI-based and traditional pentesting against real-world threats.
• Identify vulnerabilities and misconfigurations; provide actionable remediation.
• Prepare clear reports describing risks and remediation steps.
• Participate in client meetings and technical discussions.

Skills

Offensive security

Application security

Code review

Penetration testing

SDLC consulting

Report writing

Independent work

Strong communication

Senior delivery

Education

Bachelor’s degree or equivalent

Tools

OSCP

OSWE

GWAPT

CSSLP

GWEB

Job description

IOActive, Inc. seeks Security Consultants to deliver comprehensive assessments including web/mobile application reviews, infrastructure pentests, code reviews, and security advisory engagements. This fixed-term role up to 3 months may renew and offers remote or office work with travel opportunities.

Candidates should have 5+ years in offensive security, with 2–3 years in AppSec and relevant certifications. You will report findings, document remediation steps, and participate in client