Senior Application Security Engineer (Red Team)

Altruist • Los Angeles, CA

3d • $170,000 - $225,000 • Hybrid

About The Position

Altruist is in the midst of an exciting phase and we’re excited to hire a Senior Application Security Engineer to join our growing Security team. Your expertise will ensure our products are secure — by continuously attacking them the way a real adversary would. This role follows a hybrid schedule, with three days per week onsite in our San Francisco FiDi or Culver City office.

Requirements

• 4+ years of experience working as an Application/Product Security Engineer:
• Experience as a pentester across web, API, and mobile targets
• Extensive experience with security assessments
• Experience with tools such as Burp Suite
• Strong ability to work independently
• A B.A. / B.S. degree in relevant fields such as Computer Science or Computer Engineering or Information Security or relevant experience
• You’re technologically savvy and can easily get up to speed on modern tech stacks (i.e., Java, Spring, Terraform, Kubernetes, etc.)
• The pride you put into every aspect of your work is unparalleled and undeniable
• Intentional dialogue is a superpower. You listen as well as you share your perspective with others.
• We’re inspired by your unwavering determination to achieve success, no matter the adversity you face along the way.
• Your confidence is brilliant, yet ego-less. You possess a strong knowledge base, the ability to discover the unknown, and are open to differing perspectives.
• Identifying the problem is simply not enough. You’re instinctually creative with your approach in finding solutions to roadblocks.

Nice To Haves

• Experience working in regulated environments (fintech / financial services)
• Mobile application pentesting (OWASP MASVS) and cloud/red-team / adversary emulation experience
• Relevant certifications (e.g., OSCP, OSWE, GXPN)

Responsibilities

• Pentest the Altruist web application, APIs, infrastructure, Android application, and iOS application.
• Break security controls continuously so we can build them better each time.
• Perform focused authorization and exploitability assessments on high-risk attack paths.
• Conduct cloud pentests and identity-focused offensive testing.
• Run purple-team exercises with Detection & Response and help build detections from your tradecraft.
• Develop and maintain offensive tooling and repeatable testing playbooks; contribute to phishing and social-engineering assessments.
• Document findings with reproducible proofs-of-concept, clear risk ratings, and actionable remediation guidance.

Benefits

• Premium healthcare, dental, and vision insurance plans (HMO and PPO).
• 401k savings plan with a 4% match and immediate vesting.
• 16 week paid parental leave after one year of employment.
• Professional growth and development opportunities including an employee mobility program and an annual L&D budget allocation for each employee.
• Company perks program (includes discounts on pet insurance, fitness, cell phone plans, and travel, etc.).
• Financial guidance program (includes counseling on navigating debt, tracking personal spend, saving and planning goals, home-purchasing preparedness, etc.).
• One month work from anywhere policy (with the exception of a few countries).

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree