Security Engineer II

Owning the security assessment process, the full-time Security Engineer II will conduct vulnerability research and analysis, develop custom security tooling, and communicate findings to clients, all in a remote work environment. Key responsibilities Independently lead security assessments of client software, managing the process from scoping to delivery Identify and validate vulnerabilities, establishing root causes and developing proof-of-concept code as necessary Design and build custom security tools to enhance assessment coverage and improve repeatability Required qualifications Typically 2+ years of relevant experience in application security, vulnerability research, or security-focused software engineering Demonstrated experience in vulnerability discovery, including identification and validation of vulnerabilities Strong code-analysis skills across complex codebases and familiarity with security implications of system design Proficiency in at least two programming languages relevant to security analysis, such as Rust, Go, C, or Python Working knowledge of memory-corruption vulnerabilities and mitigations, including exploit primitives and defensive mechanisms