Senior App Security Engineer - Red Team

Talanto; Los Angeles, Northern (CA, KY); Hybrid; USD 170,000 - 225,000; Full time

Benefits offered by this job

Premium healthcare

401k with 4% match

Parental leave (16 weeks)

Work from anywhere policy

Job summary

Talanto is seeking a Senior Application Security Engineer (Red Team) to join our Security team. You will continuously attack our products like a real adversary to ensure robust defenses and secure software across web, mobile, and infrastructure.

The role follows a hybrid schedule with three days onsite in our San Francisco FiDi, Culver City, or LA-area offices, focusing on offensive security, purple-team exercises, and actionable remediation guidance.

Qualifications

• 4+ years as an Application/Security Engineer or similar role.
• Pentesting across web, API, and mobile targets.
• Experience with security assessments and Burp Suite.
• Bachelor's degree in CS/CE/InfoSec or equivalent experience.

Responsibilities

• Penetration test the web app, APIs, infrastructure, Android and iOS apps.
• Break security controls to improve defenses with repeatable testing.
• Perform focused authorization and exploitability assessments on high-risk paths.
• Conduct cloud pentests and identity-focused offensive testing.
• Run purple-team exercises with Detection & Response and build detections.
• Develop offensive tooling and testing playbooks; contribute to phishing and social-engineering tests.
• Document findings with reproducible PoCs, risk ratings, and remediation guidance.

Skills

Pentester

Independent worker

Mobile pentesting

Regulated fintech exposure

Creative problem solving

Education

B.S. in Computer Science / Computer Engineering / Information Security

Tools

Burp Suite

Java

Spring

Terraform

Kubernetes

Job description

Talanto is seeking a Senior Application Security Engineer (Red Team) to join our Security team. You will continuously attack our products like a real adversary to ensure robust defenses and secure software across web, mobile, and infrastructure.

The role follows a hybrid schedule with three days onsite in our San Francisco FiDi, Culver City, or LA-area offices, focusing on offensive security, purple-team exercises, and actionable remediation guidance.