Senior Security Consultant: AppSec & Pentest (Remote)

IOActive, Inc.; United States; Remote; USD 65,000 - 150,000; Full time

Benefits offered by this job

Remote work flexibility

Travel opportunities

Competitive compensation and benefits

Job summary

IOActive, Inc. is seeking Security Consultants for a fixed-term role up to 3 months, with potential renewal. You will perform web/mobile app assessments, infrastructure reviews, and AI-enhanced pentesting to identify vulnerabilities and risks for clients.

The ideal candidate has 5+ years in offensive security and 2–3 years in application security, with proven report-writing and client-facing skills. Remote or onsite work, with travel as needed.

Qualifications

• 5+ years in offensive security services, with at least 2–3 years focused on application security and source code review.
• Hands-on delivery across AppSec disciplines—app pen testing, code review, or SDLC consulting.
• Excellent written communication; reports that developers act on.
• Strong verbal communication; able to present as a subject matter expert to diverse audiences.

Responsibilities

• Conduct application security assessments for web and mobile apps and APIs.
• Perform infrastructure and cloud configuration security reviews.
• Carry out assessments including AI-based and traditional pentesting approaches.
• Identify vulnerabilities and misconfigurations; provide actionable remediation steps.

Skills

Offensive security

Application security

Code review

Report writing

Communication

Education

Bachelor's degree or equivalent

Job description

IOActive, Inc. is seeking Security Consultants for a fixed-term role up to 3 months, with potential renewal. You will perform web/mobile app assessments, infrastructure reviews, and AI-enhanced pentesting to identify vulnerabilities and risks for clients.

The ideal candidate has 5+ years in offensive security and 2–3 years in application security, with proven report-writing and client-facing skills. Remote or onsite work, with travel as needed.