We’re looking for experienced candidates that are knowledgeable in application security and software vulnerabilities. We don’t expect our candidates to know everything, but we do expect them to take on new challenges and not be afraid to fail. Successful candidates are passionate about information security and willing to learn new things. This position is remote, but we do have offices in Seattle, WA & Wilmington, MA. Our Services team works with a global client-base of technology vendors and enterprise IT organizations.

Responsibilities:

• Hack all the things.

• Work closely with other Application Security Engineers to perform reviews and tests on web and conventional applications as well as embedded, firmware, mobile, and more
• Use a combination of manual and automated techniques to assess risks and circumvent security mechanisms of devices and applications
• Create threat models that result in more secure application design
• Design and develop security testing scenarios
• Analyze and present results of testing to team members, managers, and customers
• Write detailed problem reports, test plan documents, and mitigation recommendations as needed
• Develop tools to aid penetration test automation and effectiveness
• Review code for common security vulnerabilities

• Demonstrating your skills to us our hacking challenge is more important than your resume, but a strong resume for this position includes:
• Penetration Testing and Ethical Hacking
• Dynamic and/or Static Code Analysis
• Software Development
• Technical security research

• What we expect of our applicants:
• Knowledge of common application security bugs, attack types, and mitigation strategies
• B.S. in Computer Science, related degree, or equivalent experience
• Deep understanding of networking fundamentals
• Experience conducting security assessments across web, network, and API targets
• Strong familiarity with cloud technologies like AWS, Azure, or GCP
• Subject matter expert in one of our core domains such as web, mobile, IoT, applied crypto, etc
• Demonstrate an ability to code in one or more language
• Above average knowledge of Windows and/or Linux and Unix variants
• Willingness to learn new technologies
• Strong written and verbal communication skills
• Understanding of application design, development, and testing techniques
• Working knowledge of common security testing tools like Burp Suite, SQLMap, Metasploit, Ghidra, IDA, etc.
• Interest in or previous experience completing security related research

• These skills are not required, but if you have any of them, you are likely a good candidate for the position:
• Completed OSCP, OSWE, or a similar security certification
• Involved in Bug Bounty programs
• Participated in Capture the Flag events
• Experience with embedded, firmware, and/or IoT technologies
• Experience with applied cryptography and/or blockchain
• Previous consulting experience
• Detail-oriented and dependable

Benefits and Perks:

Security Innovation is proud to offer the following:

 • Competitive salary and equitable salary structure

 • Flexible work from home and remote options

 • Unlimited paid time off, mental health days, and 12 company holidays

 • Comprehensive Health, Dental, and Vision insurance options

 • Flex Spending and HSA options401k with immediate vesting and up to 6% match

 • Generous professional development budget

 • Professional certification, training, and conference opportunities

 • Ample engineer hardware budget

 • Culture focused on health & wellness, diversity, equity, and inclusion