Senior AppSec Engineer: Offensive Security & Pentesting

Altruist; San Francisco (CA); Hybrid; USD 200,000 - 240,000; Full time

Benefits offered by this job

Office spaces in SF/Culver City/Dallas

Comprehensive health plans (medical/dd

401k with 4% match

16 weeks parental leave

Growth & mobility program

Perks program

Financial guidance program

Work from anywhere (1 month)

Job summary

Altruist is seeking a Senior Application Security Engineer to join the Security team in a hybrid role with three days onsite in San Francisco or Culver City. You will pentest web apps, APIs, infrastructure, and mobile apps, break controls to improve defenses, and conduct focused assessments on high-risk paths.

You should have 4+ years in application security, experience with Burp Suite, and a background in fintech or regulated environments.

Qualifications

• 4+ years of experience as an Application/Security Engineer in fintech or regulated environments.
• Experience with web, API, and mobile pentesting.
• Proven security assessment experience and ability to produce actionable remediations.

Responsibilities

• Penetration test the Altruist web application, APIs, infrastructure, and mobile apps.
• Identify and break security controls to improve defenses.
• Perform risk-based authorization and exploitability assessments on high-risk paths.

Skills

Penetration testing

Mobile/Web/API pentesting

Burp Suite

Independent work

Communication

Regulated fintech experience

Education

B.S. in Computer Science / Computer Engineering / Information Security

Tools

Burp Suite

Job description

Altruist is seeking a Senior Application Security Engineer to join the Security team in a hybrid role with three days onsite in San Francisco or Culver City. You will pentest web apps, APIs, infrastructure, and mobile apps, break controls to improve defenses, and conduct focused assessments on high-risk paths.

You should have 4+ years in application security, experience with Burp Suite, and a background in fintech or regulated environments.