Senior AppSec Consultant — Remote Code Review

IOActive, Inc.; United States; Hybrid; USD 75,000 - 175,000; Full time

Benefits offered by this job

Remote work flexibility

Travel opportunities

Competitive compensation and bonuses

Opportunity to work with leading cyber

Research and learning opportunities

Job summary

IOActive, Inc. is seeking a Senior Consultant, Application Security to lead deep manual code reviews and adjacent AppSec work for enterprise clients. You will perform tests on web, mobile, and embedded systems, write clear remediation guidance, and present findings in workshops.

Qualifications include 5+ years in offensive security with strong code review experience and hands-on expertise in multiple languages. The role offers remote-friendly, hybrid work within a flexible security-focused team.

Qualifications

• 5+ years in offensive security services with 2–3 years in application security and code review.
• Hands-on delivery across AppSec disciplines: code review, penetration testing, threat modeling, SDLC consulting.
• Depth in 2+ languages (e.g., JavaScript/TypeScript, Python, Java, C#/C++, Go, Rust).

Responsibilities

• Lead manual source code reviews across web, mobile, API, and embedded targets.
• Author actionable findings reports with remediation guidance and architectural recommendations.
• Run client workshops to explain findings and patterns for security resilience.
• Mentor junior consultants and contribute to playbooks, tooling, and templates.

Skills

Code review

AppSec

Threat modeling

Client engagement

Team mentorship

Strong written & verbal communication

Cross-language versatility

Genuine curiosity about systems

Education

Relevant bachelor's degree or equivalent

Tools

JavaScript

Python

Java

C#

C/C++

Go

Rust

Job description

IOActive, Inc. is seeking a Senior Consultant, Application Security to lead deep manual code reviews and adjacent AppSec work for enterprise clients. You will perform tests on web, mobile, and embedded systems, write clear remediation guidance, and present findings in workshops.

Qualifications include 5+ years in offensive security with strong code review experience and hands-on expertise in multiple languages. The role offers remote-friendly, hybrid work within a flexible security-focused team.