What we’re looking for?
We’re looking for candidates that are knowledgeable in application security and vulnerabilities. We don’t expect our candidates to know everything, but we do expect them to take on new challenges and not be afraid to fail. Successful candidates are passionate about information security and willing to learn new things.
Our security team is located in downtown Seattle serving a global client base of technology vendors and enterprise IT organizations. We’re looking for a professional security engineer to join our office in Seattle (A remote opportunity is an option for Senior Security Engineers but relocation to Seattle is preferred).
Hack all the things. Okay, seriously, here are some HR Role and Responsibility content regarding what you will do on a daily basis:
- Work closely with other application security engineers to perform reviews and tests on Web and Conventional applications as well as embedded, firmware, mobile and more
- Use a combination of manual and automated techniques to assess risks and circumvent security mechanisms of devices and applications
- Create threat models that result in more secure application design
- Design and develop security testing scenarios
- Analyze and present results of testing to team members, managers and customers
- Write detailed problem reports, test plan documents, and mitigation recommendations as needed
- Develop tools to aid penetration test automation and effectiveness
- Review code for common security vulnerabilities
- Possible travel to client sites to conduct in-person security reviews and assessments
We’ll glance at it. Being professional with documentation is important when putting together reports for our clients. Constructing a formal resume can demonstrate that to us. What we’re really looking for, even if your resume doesn’t say it, is someone versed and capable in one or many of the following areas:
- Penetration Testing and Ethical Hacking
- Dynamic and/or Static Code Analysis
- Software Development
- Interest in conducting security research
What we expect of our applicants:
- Knowledge of common application security bugs and other attack types
- An understanding of common attacks against cloud technologies.
- Demonstrate an ability to code in one or more language
- Above average knowledge Windows and/or Linux and Unix variants
- Willingness to learn new technologies
- Strong written and verbal communication skills
- Not a jerk – We have a policy about it
Nice to Haves:
These skills are not required, but if you have any of them, you are likely a good candidate for the position:
- B.S. in Computer Science or related degree
- Completed OSCP, OSCE, or a similar security certification
- Understanding of application design, development, and testing techniques
- Involved in Bug Bounty program
- Participated in a Capture the Flag event
- Working knowledge of common security testing tools like Burp Suite, SQLMap, Metasploit, IDAPro, etc.
- Experience with embedded, firmware, and/or IoT technologies
- Detail oriented and dependable
- Good sense of humor
If you have an in-deep knowledge of a specific technology, teach us about it. Our engineers have a wide-breadth of security knowledge, but we love it when engineers have an extensive understanding in one technology.
**You must be legally eligible to work in the USA. We are not accepting candidates that will require Security Innovation to commence (“sponsor”) an immigration case (for example, H-1B or other employment-based immigration case) at this time or in the future.