We’re looking for candidates that are knowledgeable in application security and vulnerabilities. We don’t expect our candidates to know everything, but we do expect them to take on new challenges and not be afraid to fail. Successful candidates are passionate about information security and willing to learn new things.
Our security team is located in downtown Seattle serving a global client base of technology vendors and enterprise IT organizations. We’re looking for a professional security engineer to join our office in Seattle.
Hack all the things. Okay, seriously, here are some HR Role and Responsibility content regarding what you will do on a daily basis:
- Work closely with other application security engineers to perform reviews and tests on Web and Conventional applications as well as embedded, firmware, mobile, and more
- Use a combination of manual and automated techniques to assess risks and circumvent security mechanisms of devices and applications
- Create threat models that result in more secure application design
- Design and develop security testing scenarios
- Analyze and present results of testing to team members, managers, and customers
- Write detailed problem reports, test plan documents, and mitigation recommendations as needed
- Develop tools to aid penetration test automation and effectiveness
- Review code for common security vulnerabilities
- Possible travel to client sites to conduct in-person security reviews and assessments
We’ll glance at it. Being professional with documentation is important when putting together reports for our clients. Constructing a formal resume can demonstrate that to us. What we’re really looking for, even if your resume doesn’t say it, is someone versed and capable in one or many of the following areas:
- Penetration Testing and Ethical Hacking
- Dynamic and/or Static Code Analysis
- Software Development
- Interest in conducting security research
What we expect of our applicants:
- Knowledge of common application security bugs and other attack types
- Demonstrate an ability to code in one or more language
- Above average knowledge of Windows and/or Linux and Unix variants
- Willingness to learn new technologies
- Strong written and verbal communication skills
- Not a jerk – We have a policy about it
Nice to Haves
These skills are not required, but if you have any of them, you are likely a good candidate for the position:
- B.S. in Computer Science or related degree
- Completed OSCP, OSCE, or a similar security certification
- Understanding of application design, development, and testing techniques
- Involved in Bug Bounty program
- Participated in a Capture the Flag event
- Working knowledge of common security testing tools like Burp Suite, SQLMap, Metasploit, IDAPro, etc.
- Experience with embedded, firmware, and/or IoT technologies
- Detail-oriented and dependable
- Good sense of humor
If you have an in-deep knowledge of a specific technology, teach us about it. Our engineers have a wide breadth of security knowledge, but we love it when engineers have an extensive understanding of one technology.
Perks & Benefits
There is a reason we have a 4.9/5 rating on Glassdoor. We take care of our clients, but also take care of our employees.
- Comprehensive health, dental, and vision insurance coverage provided (HMO, PPO, and HSA options available)
- Generous 401k matching
- Take what you need PTO
- Work-life balance – we mean it
- Financial assistance and scheduled time off for research
- Professional Development budget for conferences, classes, certifications, or other learning opportunities
- Flexible work environment with telecommuting options available
- Extensive technology budget renewed every year
- Free coffee, snacks, beverages, among other office treats
**You must be legally eligible to work in the USA. We are not accepting candidates that will require Security Innovation to commence (“sponsor”) an immigration case (for example, H-1B or other employment-based immigration cases) at this time or in the future.