Security Consultant - Fixed Term

IOActive, Inc.; Seattle (WA); Hybrid; USD 65,000 - 150,000; Full time

Benefits offered by this job

Remote work flexibility

Travel opportunities

Competitive compensation

Job summary

IOActive is seeking a Security Consultant for a fixed-term engagement up to 3 months with potential renewal. You will conduct comprehensive assessments across web/mobile apps, APIs, and infrastructure, delivering actionable findings and client-facing reports.

The role requires strong AppSec experience, independent delivery, and effective communication with technical and non-technical stakeholders. The position supports remote or office work with opportunities for travel, and IOActive emphasizes

Qualifications

• 5+ years in offensive security services
• 2–3 years focused on application security and source code review
• Hands‑on engagement delivery across AppSec disciplines
• Ability to work independently under deadlines
• Strong written and verbal communication for technical audiences

Responsibilities

• Conduct application security assessments for web and mobile apps, APIs, and other software systems
• Conduct infrastructure and cloud configuration security reviews
• Assess using AI-based and traditional pentesting approaches
• Identify vulnerabilities and deviations from best practices with actionable remediation
• Prepare clear professional reports detailing risks and recommendations
• Participate in client meetings and technical discussions

Skills

AppSec experience

Code review

Penetration testing

Report writing

Client communication

Education

Bachelor's degree or equivalent

Certifications: OSCP, OSWE, GWAPT, CSSLP, GWEB

Job description

\"Making the world a safer and more secure place.\" \"

It’s our mission, plain and simple. It drives everything we do – from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn’t just “push the envelope” or “think outside the box.” We shred the envelope, crush the box, and we have fun doing it. We are always looking for people who share our mission to join us.

About IOActive:

IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.

Who you are:

IOActive is looking for Security Consultants who can deliver a range of security assessments including web and mobile application reviews, infrastructure penetration tests, code reviews and security advisory engagements to secure client’s environments and applications. An ideal candidate can is self-motivated and working with internal stakeholders and clients to assess clients products, report findings, and document protocols, policies and procedures.

This position is for a fixed term of up to 3 months with the potential to renew.

What you'll do:

• Conduct application security assessments for web and mobile applications (Android/iOS), APIs, and other software systems.
• Conduct infrastructure and cloud configuration security reviews
• Conduct assessments incorporating AI-based and traditional pentesting approaches against real world threats.
• Identify and document security vulnerabilities, misconfigurations and deviations from best practices, providing actionable recommendations to address them.
• Prepare clear, professional reports describing identified risks and recommended remediation steps.
• Participate in client meetings and technical discussions

Who you bring:

• 5+ years in offensive security services, with at least 2–3 years focused on application security and source code review
• Hands‑on engagement delivery across multiple AppSec disciplines — application penetration testing, code review, or SDLC consulting
• The ability to work independently under deadlines.
• Strong technical credibility and the comfort to operate as a senior voice on engagements
• Excellent written communication — you produce reports that developers act on rather than file
• Strong verbal communication, with the ability to both present as a subject matter expert in technical discussions and deliver complex concepts, results, etc. to a general audience
• Nice to have - Familiarity with relevant standards and frameworks: OWASP, NIST, ISO, SAE
• Relevant bachelor's degree or equivalent experience
• Relevant industry certifications strongly preferred: OSCP, OSWE, GWAPT, CSSLP, GWEB, or equivalent application-security focused credentials

What We Offer

A chance to work with an industry leader in cyber security

Access to world‑class technical teams and research

A high‑energy, collaborative team that values innovation

Flexibility—work remotely or from the office as needed

Opportunities for travel

Competitive compensation and benefits with base salaries ranging $65,000 to $150,000 depending on background, experience and location.

WhyIOActive:

We have over 25 years of experience that’s established and stable; yet high‑growth with the energy, passion and dynamic work environment of a startup. We are renowned for ourinnovation and thought leadership within our high‑profile, cutting edge space. We're one of “the good guys” doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.

IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.