You will perform penetration tests and application security assessments across web, mobile, desktop, and browser extension platforms. You will conduct external and internal network tests, review source code, assess cloud security (AWS, Azure, GCP), and analyze Web3 applications including smart contracts. You will produce clear pentest reports for technical and non-technical audiences, research and develop new testing techniques and tools, and share findings via tools, presentations, and blog posts.
Responsibilities
- Perform security assessments on web applications, mobile applications, thick client applications, and browser extensions
- Conduct external and internal network penetration tests
- Perform security source code reviews
- Perform cloud security reviews
- Develop comprehensive pentest reports for technical and non-technical audiences
- Research and develop pentesting techniques, tools, and methodologies for blockchain applications
- Contribute to the community by developing tools, presentations, and blog posts
Requirements
- Passionate about cryptocurrency, DeFi, and blockchain with willingness to learn Web3 technologies such as smart contracts
- Minimum of 4 years of experience in application security and penetration testing
- Experience in source code review for multiple languages with strong understanding of JavaScript and TypeScript
- Experience in mobile application penetration testing
- Familiarity with cloud platforms and their security risks such as AWS, Azure, and GCP
- Experience programming with scripting languages such as Python and Bash
- Solid understanding of cryptography
- BS/MS/PhD in Computer Science or Information Security
- Strong spoken and written communication skills
Benefits
- Medical insurance
- Vision insurance
- Dental insurance
- 401(k) plan with company matching
- Life and accidental death and dismemberment insurance
- HSA (with high deductible plan)
- FSA
- Flexible paid time off and holidays
- Variable commission program for business development sales roles