Remote Senior Security Engineer: Penetration Testing

Jobicy; United States; Remote; USD 100,000 - 180,000; Full time

Benefits offered by this job

Medical, Vision, and Dental Insurance

401(k) with company matching

Life and AD&D insurance

Job summary

CertiK is hiring a senior security engineer to conduct penetration tests and application-security assessments across web, mobile, thick-client, cloud, network, and browser-extension environments. The role blends hands-on offensive security, source-code review, threat modeling, reporting, and blockchain security research.

We seek at least four years in app security and pentesting, strong JavaScript/TypeScript, scripting, and familiarity with AWS, Azure, and GCP.

Qualifications

• Minimum of 4 years of application security and penetration testing experience.
• Strong JavaScript/TypeScript knowledge and scripting skills.
• Familiar with AWS, Azure, GCP risks and cloud security.
• Web3 penetration testing and smart-contract audit experience are valuable.
• Security certifications, bug bounty participation and community contributions are advantageous.

Responsibilities

• Perform security assessments on web, mobile, thick client apps and browser extensions.
• Conduct external and internal network penetration tests.
• Perform security source code reviews and cloud security reviews.
• Develop comprehensive pentest reports for technical and non-technical audiences.
• Research and develop novel pentesting techniques for blockchain space.
• Contribute to the security community with tools, presentations, and blogs.

Skills

Application security

Penetration testing

Web application security

Mobile application security

Network penetration testing

Source code review

Cloud security

Threat modeling

JavaScript

TypeScript

Python

Bash

Cryptography

AWS

Azure

GCP

Web3 security

Education

BS in Computer Science or Information Security

MS in Computer Science or Information Security

PhD in Computer Science or Information Security

Tools

AWS

Azure

GCP

Smart contract security

Job description

CertiK is hiring a senior security engineer to conduct penetration tests and application-security assessments across web, mobile, thick-client, cloud, network, and browser-extension environments. The role blends hands-on offensive security, source-code review, threat modeling, reporting, and blockchain security research.

We seek at least four years in app security and pentesting, strong JavaScript/TypeScript, scripting, and familiarity with AWS, Azure, and GCP.