Security Consultant - Fixed Term

IOActive, Inc.; United States; Teletrabalho; USD 65 000 - 150 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote or office

Travel opportunities

Competitive compensation

World-class teams

Innovation-driven culture

Resumo da oferta

IOActive, Inc. seeks Security Consultants to deliver comprehensive assessments including web/mobile application reviews, infrastructure pentests, code reviews, and security advisory engagements. This fixed-term role up to 3 months may renew and offers remote or office work with travel opportunities.

Candidates should have 5+ years in offensive security, with 2–3 years in AppSec and relevant certifications. You will report findings, document remediation steps, and participate in client

Qualificações

• 5+ years in offensive security services, with 2–3 years in AppSec and code review.
• Hands-on delivery across AppSec disciplines: pen-testing, code review, or SDLC consulting.
• Ability to work independently under deadlines.
• Strong technical credibility and senior voice on engagements.
• Excellent written reports that developers act on.
• Strong verbal communication for technical and general audiences.
• Nice to have: familiarity with OWASP, NIST, ISO, SAE.
• Bachelor’s degree or equivalent experience.
• Industry certifications: OSCP, OSWE, GWAPT, CSSLP, GWEB, or equivalent.

Responsabilidades

• Conduct application security assessments for web and mobile apps, APIs, and software systems.
• Conduct infrastructure and cloud configuration security reviews.
• Assess with AI-based and traditional pentesting against real-world threats.
• Identify vulnerabilities and misconfigurations; provide actionable remediation.
• Prepare clear reports describing risks and remediation steps.
• Participate in client meetings and technical discussions.

Conhecimentos

Offensive security

Application security

Code review

Penetration testing

SDLC consulting

Report writing

Independent work

Strong communication

Senior delivery

Formação académica

Bachelor’s degree or equivalent

Ferramentas

OSCP

OSWE

GWAPT

CSSLP

GWEB

Descrição da oferta de emprego

Who you are :

IOActive is looking for Security Consultants who can deliver a range of security assessments including web and mobile application reviews, infrastructure penetration tests, code reviews and security advisory engagements to secure client’s environments and applications. An ideal candidate can is self-motivated and working with internal stakeholders and clients to assess clients products, report findings, and document protocols, policies and procedures.

This position is for a fixed term of up to 3 months with the potential to renew.

What you’ll do:

• Conduct application security assessments for web and mobile applications (Android/iOS), APIs, and other software systems.
• Conduct infrastructure and cloud configuration security reviews
• Conduct assessments incorporating AI-based and traditional pentesting approaches against real world threats.
• Identify and document security vulnerabilities, misconfigurations and deviations from best practices, providing actionable recommendations to address them.
• Prepare clear, professional reports describing identified risks and recommended remediation steps.
• Participate in client meetings and technical discussions

Who you bring:

• 5+ years in offensive security services, with at least 2–3 years focused on application security and source code review
• Hands-on engagement delivery across multiple AppSec disciplines — application penetration testing, code review, or SDLC consulting
• The ability to work independently under deadlines.
• Strong technical credibility and the comfort to operate as a senior voice on engagements
• Excellent written communication — you produce reports that developers act on rather than file
• Strong verbal communication, with the ability to both present as a subject matter expert in technical discussions and deliver complex concepts, results, etc. to a general audience
• Nice to have - Familiarity with relevant standards and frameworks: OWASP, NIST, ISO, SAE
• Relevant bachelor’s degree or equivalent experience
• Relevant industry certifications strongly preferred: OSCP, OSWE, GWAPT, CSSLP, GWEB, or equivalent application-security focused credentials

What We Offer

• A chance to work with an industry leader in cyber security
• Access to world-class technical teams and research
• A high-energy, collaborative team that values innovation
• Flexibility—work remotely or from the office as needed
• Opportunities for travel
• Competitive compensation and benefits with base salaries ranging $65,000 to $150,000 depending on background, experience and location.

If this sounds like your kind of challenge, we’d love to hear from you.

Why I O Active:

We have over 25 years of experience that’s established and stable; yet high-growth with the energy, passion and dynamic work environment of a startup. We are renowned for ourinnovation and thought leadership within our high-profile, cutting edge space. We’re one of “the good guys” doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.

IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.