Security Engineer II

Job Summary

Owning the security assessment process, the full-time Security Engineer II will conduct vulnerability research and analysis, develop custom security tooling, and communicate findings to clients, all in a remote work environment.

Key responsibilities

• Independently lead security assessments of client software, managing the process from scoping to delivery
• Identify and validate vulnerabilities, establishing root causes and developing proof-of-concept code as necessary
• Design and build custom security tools to enhance assessment coverage and improve repeatability

Required qualifications

• Typically 2+ years of relevant experience in application security, vulnerability research, or security-focused software engineering
• Demonstrated experience in vulnerability discovery, including identification and validation of vulnerabilities
• Strong code-analysis skills across complex codebases and familiarity with security implications of system design
• Proficiency in at least two programming languages relevant to security analysis, such as Rust, Go, C, or Python
• Working knowledge of memory-corruption vulnerabilities and mitigations, including exploit primitives and defensive mechanisms