Senior Red Team Security Engineer — Remote (Turkey)

Remote

San Francisco (CA)

Remote

USD 85,000 - 135,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Monthly meal allowance

Private health insurance

Learning platforms access

ESOP

Job summary

Insider One is the leading platform uniting marketing and customer engagement tools to help teams reach their peak potential. The company’s global team collaborates across 30+ offices and 50+ nationalities, delivering a CDP-driven experience with AI-powered personalization.

The Security Engineering role offers remote work from Turkey, a chance to impact Fortune 500 clients, and ongoing internal trainings. You will perform tests, review code, and guide engineering teams to mitigate threats while

Qualifications

Have 4+ years of working experience in web application security.
Have hands-on experience in security testing of web applications, web services, mobile applications, APIs, etc.
Have experience securing REST APIs and web services.
Have experience using and implementing SAST / DAST tools such as Fortify, Veracode, Checkmarx, or other similar tools.
Know how to conduct penetration tests of information systems using commercial and open-source exploitation tools.
Have a good understanding of standard security vulnerabilities and common remediation as published by OWASP, SANS, etc.
Have experience working with secure coding methodology and best practices and their implementation within engineering teams.
Will support developers of our business units in their SDLC and provide guidance regarding mitigations to emerging threats.
Will review application source code based on static application security testing tools.
Will be engaging in security research to remain current on vulnerabilities and testing tools.
Will be creating detailed, professional documentation/reports that clearly communicate vulnerabilities, mitigation strategies, and remediation steps.
Have the ability to work on multiple projects concurrently and be committed to providing exemplary customer service.
Have strong written and verbal communication skills in English.
Have Python, JavaScript, PHP programming experience as a plus.
Have knowledge in scripting (any language) and experience in automation scripts for application security testing as a plus.
Have familiarity with cloud security, particularly AWS security concepts, as a plus.
Have certifications such as eWAPTx, OSCP, OSWE, etc., as a plus.
Are able to work in a team-centric environment.
Have strong critical thinking and analytical skills.
Have experience in executing white, gray, or black box security posture assessments and completing detailed reports that outline the findings and recommendations.

Responsibilities

Performs web, mobile application, and internal penetration tests, source code reviews, threat analysis, social-engineering assessments.
Supports blue teams when needed.
Researches new attack vectors and stays current with cybersecurity news and trends.
Trains Quality Assurance and Development teams in standard security testing techniques and secure software development.