Application Security Engineer

Job Summary

Contributing to security assessments of client software, the full-time remote Security Engineer I will identify vulnerabilities, develop custom security tools, and communicate findings to clients while working alongside more experienced engineers.

Key responsibilities

• Lead the security assessment of specific components within client engagements, tracing root causes and delivering analysis
• Discover and validate vulnerabilities in application code and systems, providing proof-of-concept code when appropriate
• Design and build security-testing tools for vulnerability detection and conduct threat modeling of software architectures

Required qualifications

• At least 1 year of relevant experience in application security, vulnerability research, or security-focused software engineering
• Demonstrable capability in vulnerability discovery, including personal examples of identified security weaknesses
• Strong code-analysis skills with the ability to read and trace execution in unfamiliar code
• Proficiency in at least two relevant programming languages, such as Rust, Go, C, C++, Python, JavaScript, or TypeScript
• Working knowledge of memory-corruption vulnerabilities and common mitigations