Senior Remote AppSec Security Consultant

Socket.dev; United States; On-site; USD 65,000 - 150,000; Full time

Job summary

IOActive is seeking a Security Consultant for a fixed-term engagement up to 3 months with potential renewal. You will lead and perform security assessments across web, mobile, APIs, and cloud environments, delivering actionable findings and remediation guidance.

Join a global cybersecurity team that values integrity, deep technical expertise, and clear communication. Remote-friendly or onsite work arrangements are available, with opportunities to collaborate across client engagements.

Qualifications

• 5+ years in offensive security services, with 2-3 years on AppSec and code review.
• Experience delivering engagement across AppSec disciplines: pen test, code review, or SDLC consulting.
• Bachelor's degree or equivalent; OSCP/OSWE/GWAPT/CSSLP or similar preferred.
• Excellent written communication and client-facing reporting skills.

Responsibilities

• Conduct application security assessments for web and mobile applications (Android/iOS), APIs, and other software systems.
• Conduct infrastructure and cloud configuration security reviews.
• Perform assessments incorporating AI-based and traditional pentesting approaches against real world threats.
• Identify and document security vulnerabilities, misconfigurations and deviations from best practices, providing actionable remediation steps.
• Prepare clear, professional reports describing identified risks and recommended remediation steps.
• Participate in client meetings and technical discussions

Skills

Application security

Code review

Penetration testing

SDLC consulting

Technical communication

Education

Bachelor's degree or equivalent experience

Tools

OWASP

NIST

ISO

SAE

OSCP

OSWE

GWAPT

CSSLP

GWEB

Job description

IOActive is seeking a Security Consultant for a fixed-term engagement up to 3 months with potential renewal. You will lead and perform security assessments across web, mobile, APIs, and cloud environments, delivering actionable findings and remediation guidance.

Join a global cybersecurity team that values integrity, deep technical expertise, and clear communication. Remote-friendly or onsite work arrangements are available, with opportunities to collaborate across client engagements.