Senior Security Consultant - AppSec & Cloud Pen Testing

IOActive, Inc.; Seattle (WA); Hybrid; USD 65,000 - 150,000; Full time

Benefits offered by this job

Remote work flexibility

Travel opportunities

Competitive compensation

Job summary

IOActive is seeking a Security Consultant for a fixed-term engagement up to 3 months with potential renewal. You will conduct comprehensive assessments across web/mobile apps, APIs, and infrastructure, delivering actionable findings and client-facing reports.

The role requires strong AppSec experience, independent delivery, and effective communication with technical and non-technical stakeholders. The position supports remote or office work with opportunities for travel, and IOActive emphasizes

Qualifications

• 5+ years in offensive security services
• 2–3 years focused on application security and source code review
• Hands‑on engagement delivery across AppSec disciplines
• Ability to work independently under deadlines
• Strong written and verbal communication for technical audiences

Responsibilities

• Conduct application security assessments for web and mobile apps, APIs, and other software systems
• Conduct infrastructure and cloud configuration security reviews
• Assess using AI-based and traditional pentesting approaches
• Identify vulnerabilities and deviations from best practices with actionable remediation
• Prepare clear professional reports detailing risks and recommendations
• Participate in client meetings and technical discussions

Skills

AppSec experience

Code review

Penetration testing

Report writing

Client communication

Education

Bachelor's degree or equivalent

Certifications: OSCP, OSWE, GWAPT, CSSLP, GWEB

Job description

IOActive is seeking a Security Consultant for a fixed-term engagement up to 3 months with potential renewal. You will conduct comprehensive assessments across web/mobile apps, APIs, and infrastructure, delivering actionable findings and client-facing reports.

The role requires strong AppSec experience, independent delivery, and effective communication with technical and non-technical stakeholders. The position supports remote or office work with opportunities for travel, and IOActive emphasizes