Security Consultant - Fixed Term

Socket.dev; United States; Hybrid; USD 65,000 - 150,000; Full time

Job summary

IOActive is seeking a Security Consultant for a fixed-term engagement up to 3 months with potential renewal. You will lead and perform security assessments across web, mobile, APIs, and cloud environments, delivering actionable findings and remediation guidance.

Join a global cybersecurity team that values integrity, deep technical expertise, and clear communication. Remote-friendly or onsite work arrangements are available, with opportunities to collaborate across client engagements.

Qualifications

• 5+ years in offensive security services, with 2-3 years on AppSec and code review.
• Experience delivering engagement across AppSec disciplines: pen test, code review, or SDLC consulting.
• Bachelor's degree or equivalent; OSCP/OSWE/GWAPT/CSSLP or similar preferred.
• Excellent written communication and client-facing reporting skills.

Responsibilities

• Conduct application security assessments for web and mobile applications (Android/iOS), APIs, and other software systems.
• Conduct infrastructure and cloud configuration security reviews.
• Perform assessments incorporating AI-based and traditional pentesting approaches against real world threats.
• Identify and document security vulnerabilities, misconfigurations and deviations from best practices, providing actionable remediation steps.
• Prepare clear, professional reports describing identified risks and recommended remediation steps.
• Participate in client meetings and technical discussions

Skills

Application security

Code review

Penetration testing

SDLC consulting

Technical communication

Education

Bachelor's degree or equivalent experience

Tools

OWASP

NIST

ISO

SAE

OSCP

OSWE

GWAPT

CSSLP

GWEB

Job description

OUR MISSION UNITES US

"Making the world a safer and more secure place."

It’s our mission, plain and simple. It drives everything we do - from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn’t just "push the envelope" or "think outside the box." We shred the envelope, crush the box, and we have fun doing it. We are always looking for people who share our mission to join us.

About IOActive:

IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker's perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.

Who you are:

IOActive is looking for Security Consultants who can deliver a range of security assessments including web and mobile application reviews, infrastructure penetration tests, code reviews and security advisory engagements to secure client’s environments and applications. An ideal candidate can is self-motivated and working with internal stakeholders and clients to assess clients products, report findings, and document protocols, policies and procedures.

This position is for a fixed term of up to 3 months with the potential to renew.

What you'll do:

• Conduct application security assessments for web and mobile applications (Android/iOS), APIs, and other software systems.
• Conduct infrastructure and cloud configuration security reviews
• Conduct assessments incorporating AI-based and traditional pentesting approaches against real world threats.
• Identify and document security vulnerabilities, misconfigurations and deviations from best practices, providing actionable recommendations to address them.
• Prepare clear, professional reports describing identified risks and recommended remediation steps.
• Participate in client meetings and technical discussions

Who you bring:

• 5+ years in offensive security services, with at least 2-3 years focused on application security and source code review
• Hands-on engagement delivery across multiple AppSec disciplines - application penetration testing, code review, or SDLC consulting
• The ability to work independently under deadlines.
• Strong technical credibility and the comfort to operate as a senior voice on engagements
• Excellent written communication - you produce reports that developers act on rather than file
• Strong verbal communication, with the ability to both present as a subject matter expert in technical discussions and deliver complex concepts, results, etc. to a general audience
• Nice to have - Familiarity with relevant standards and frameworks: OWASP, NIST, ISO, SAE
• Relevant bachelor's degree or equivalent experience
• Relevant industry certifications strongly preferred: OSCP, OSWE, GWAPT, CSSLP, GWEB, or equivalent application-security focused credentials

What We Offer

A chance to work with an industry leader in cyber security

Access to world-class technical teams and research

A high-energy, collaborative team that values innovation

Flexibility-work remotely or from the office as needed

Opportunities for travel

Competitive compensation and benefits with base salaries ranging $65,000 to $150,000 depending on background, experience and location.

Why I O Active:

We have over 25 years of experience that's established and stable; yet high-growth with the energy, passion and dynamic work environment of a startup. We are renowned for our innovation and thought leadership within our high-profile, cutting edge space. We're one of 'the good guys' doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.

IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.