7 hours ago
Base Salary
$170k - $225k/yr
Responsibilities
- Penetrate the web application, APIs, infrastructure, Android application, and iOS application.
- Perform authorization, exploitability, cloud, and identity-focused offensive security assessments.
- Conduct purple-team exercises with Detection & Response and help build detections from offensive tradecraft.
- Develop and maintain offensive tooling and repeatable testing playbooks, including support for phishing and social-engineering assessments.
- Document findings with reproducible proofs of concept, risk ratings, and actionable remediation guidance.
Requirements
- Have 4+ years of experience working as an Application or Product Security Engineer.
- Have penetration-testing experience across web, API, and mobile targets and extensive experience conducting security assessments.
- Have experience with tools such as Burp Suite.
- Hold a B.A. or B.S. in a relevant field such as Computer Science, Computer Engineering, or Information Security, or have relevant experience.
- Be able to quickly learn modern technology stacks, including Java, Spring, Terraform, and Kubernetes.
- Preferred qualifications include regulated-environment experience, mobile application pentesting using OWASP MASVS, cloud red-team or adversary-emulation experience, and certifications such as OSCP, OSWE, or GXPN.
Benefits
- Hybrid schedule with three days per week onsite in the San Francisco FiDi or Culver City office.
- Salary range of $170,000-$225,000 USD, plus competitive total compensation and a bonus program for eligible roles.
- Premium HMO and PPO healthcare, dental, and vision insurance plans.
- 401(k) savings plan with a 4% match and immediate vesting.
- Sixteen weeks of paid parental leave after one year of employment.
- Professional growth opportunities, an employee mobility program, and an annual learning and development budget.
- Company perks program with discounts on pet insurance, fitness, cell phone plans, travel, and other services.
- Financial guidance program covering debt, spending, saving, planning, and home-purchasing preparedness.
- One month work-from-anywhere policy, except in certain countries.
- Amenity-filled offices in Culver City, San Francisco, and Dallas.
Tech Stack
Categories
About Altruist
Altruist builds a custodian and wealth management platform for independent registered investment advisors, combining account opening, trading, portfolio management, billing, and reporting in one system. The company generates revenue as a brokerage custodian and through advisor software and services. Founded in 2018 and headquartered in Culver City, California, it is privately held and serves RIAs across the United States.