7 hours ago
Base Salary
$200k - $240k/yr
Responsibilities
- Conduct penetration tests of web applications, APIs, infrastructure, Android applications, and iOS applications.
- Perform authorization, exploitability, cloud, and identity-focused offensive security assessments.
- Run purple-team exercises with Detection & Response and help create detections from offensive tradecraft.
- Develop and maintain offensive tooling and repeatable testing playbooks, including contributions to phishing and social-engineering assessments.
- Document findings with reproducible proofs of concept, risk ratings, and actionable remediation guidance.
Requirements
- At least 4 years of experience as an Application Security or Product Security Engineer.
- Experience pentesting web, API, and mobile targets, with extensive security assessment experience.
- Experience with Burp Suite and the ability to work independently.
- Bachelor’s degree in a relevant field such as Computer Science, Computer Engineering, or Information Security, or relevant experience.
- Ability to quickly learn modern technology stacks such as Java, Spring, Terraform, and Kubernetes.
- Preferred qualifications include regulated-environment experience, mobile application pentesting using OWASP MASVS, cloud red-team or adversary-emulation experience, and certifications such as OSCP, OSWE, or GXPN.
Benefits
- Hybrid schedule with three days per week onsite in the San Francisco FiDi or Culver City office.
- Premium healthcare, dental, and vision insurance plans, including HMO and PPO options.
- 401(k) savings plan with a 4% match and immediate vesting.
- Sixteen weeks of paid parental leave after one year of employment.
- Professional growth opportunities, an employee mobility program, and an annual learning and development budget.
- Company perks program, financial guidance program, and a one-month work-from-anywhere policy with some country exceptions.
Tech Stack
Categories
About Altruist
Altruist builds a custodian and wealth management platform for independent registered investment advisors, combining account opening, trading, portfolio management, billing, and reporting in one system. The company generates revenue as a brokerage custodian and through advisor software and services. Founded in 2018 and headquartered in Culver City, California, it is privately held and serves RIAs across the United States.