Back to All Openings
SecurityFull-time / Consulting
Web Security Architect
1-3 Years / Relevant Certifications
Remote (100%)
Role Overview
Lead security audits, penetration testing, and code-hardening initiatives across client projects and in-house SaaS products.
Key Responsibilities
Conduct OWASP Top 10 vulnerability assessments and penetration tests across client web apps.
Perform static and dynamic application security testing (SAST/DAST) in CI/CD pipelines.
Audit cloud infrastructure (Firebase, AWS, GCP, Vercel) for misconfigurations and least-privilege access.
Produce actionable remediation reports with proof-of-concept exploits and developer guidance.
Supervise implementation of HTTPS, CSP headers, CORS policies, secure authentication, and data encryption.
Qualifications & Skills
Hands-on experience with security testing tools: Burp Suite, OWASP ZAP, Nmap, Wireshark, sqlmap, etc.
Strong understanding of web application vulnerabilities: SQLi, XSS, CSRF, SSRF, IDOR, and broken access controls.
Certifications such as CompTIA Security+, CEH, eJPT, or OSCP are highly valued.
Ability to explain technical vulnerabilities and remediation steps clearly to developers and business owners.
Apply for this Role
Submit your resume and project link to start the conversation.
Engineering Hiring Steps
1
Application & Code Review
2
Technical Problem Session
3
Practical Build Discussion
4
Offer & Onboarding