Senior Application Security Engineer — Hybrid + WFA

Altruist; Los Angeles (CA); Ibrido; USD 170.000 - 225.000; Tempo pieno

Vantaggi offerti da questo lavoro

Stunning office spaces (Culver City,SF

Dallas office access

Premium health insurance

401k with 4% match

16 weeks parental leave

Professional growth opportunities

Employee mobility program

One month work from anywhere policy

Descrizione del lavoro

Altruist is transforming wealth management with an AI platform for professionals. We seek a Senior Application Security Engineer to attack and defend our products, ensuring secure releases across web, mobile, and cloud environments.

The role involves a hybrid schedule with three days onsite in our San Francisco FiDi or Culver City offices. You’ll drive offensive testing, build repeatable playbooks, and clearly communicate risk with actionable fixes.

Competenze

• 4+ years as Application/Security Engineer.
• Pentester for web, API and mobile targets.
• Proficient with Burp Suite and security assessments.
• Independent and self-driven professional.
• Experience with Java, Spring, Terraform, Kubernetes.
• Experience in fintech or regulated environments.
• Mobile pentesting and cloud/red-team experience.

Mansioni

• Pen test the Altruist web app, APIs, infrastructure, Android and iOS apps.
• Break security controls to improve defenses with actionable remediations.
• Assess high-risk authorization and exploitability paths.
• Conduct cloud pentests and identity-focused testing.
• Run purple-team exercises with Detection & Response.
• Develop offensive tooling and repeatable testing playbooks.
• Document findings with PoCs, risk ratings, and remediation guidance.

Conoscenze

Pentesting

Security assessments

Independent worker

Java

Spring

Terraform

Kubernetes

Regulated fintech

Mobile pentesting

Cloud testing

Adversary emulation

Communication

Problem solving

Formazione

Bachelor’s degree in CS/CE/InfoSec

Strumenti

Burp Suite

Descrizione del lavoro

Altruist is transforming wealth management with an AI platform for professionals. We seek a Senior Application Security Engineer to attack and defend our products, ensuring secure releases across web, mobile, and cloud environments.

The role involves a hybrid schedule with three days onsite in our San Francisco FiDi or Culver City offices. You’ll drive offensive testing, build repeatable playbooks, and clearly communicate risk with actionable fixes.