Senior Security Engineer - Crypto

Senior Application Security & Penetration Testing Engineer – Web & Mobile Security

📍 Remote | 🕒 Full-time (Long‑term Contractor)

About the Company 🌐

A fast‑growing global cybersecurity company is building advanced security capabilities at the intersection of application security and blockchain technology. The company delivers security services across web, mobile, cloud, and modern application environments, supporting clients operating mission‑critical systems worldwide. 🌍

By combining deep technical expertise with ongoing research and tooling development, the organisation delivers high‑impact security assessments, penetration testing, and security reviews for complex, real‑world platforms. 💻🔐 It is strongly committed to security excellence, transparency, and continuous innovation. ✨

Role Overview 🚀

This opportunity is ideal for a hands‑on senior application security professional with strong penetration testing experience across web and mobile applications.

The role is highly technical and delivery‑focused, offering exposure to a wide range of systems including modern APIs, cloud infrastructure, and emerging Web3 environments. 🧠 The successful candidate will work directly on security assessments while also contributing to research, tooling, and community initiatives.

This is a high‑impact role requiring strong offensive security skills, clear communication, and a passion for improving application security at scale. 🤝

Key Responsibilities 📋

🔍 Application Security & Penetration Testing

Perform security assessments of web, mobile, thick‑client applications, and browser extensions.

Conduct external and internal network penetration tests.

Identify complex vulnerabilities including logic flaws, authentication issues, and privilege escalation paths.

Carry out security-focused source code reviews, particularly for JavaScript and TypeScript codebases.

☁️ Cloud Security

Conduct cloud security reviews across AWS, Azure, and/or GCP.

Assess IAM configurations, access controls, and misconfiguration risks.

Understand how application and cloud security intersect in modern environments.

📝 Reporting & Communication

Produce clear, high‑quality pentest reports for both technical and non‑technical audiences.

Communicate risk, impact, and remediation guidance effectively.

Work closely with clients to support security improvements.

🧪 Research & Innovation

Research and develop new penetration testing techniques and tools.

Contribute to internal R&D efforts and community knowledge sharing through blogs, tools, or presentations. 📚

Candidate Profile 🎯

📊 Experience

4+ years’ experience in application security and penetration testing.

Strong experience with web application and API security.

Proven source code review experience, especially in JavaScript and TypeScript.

Experience testing mobile applications (Android and/or iOS).

Familiarity with cloud platforms and security risks (AWS, Azure, GCP).

🛠 Skills

Experience with scripting languages such as Python and/or Bash.

Solid understanding of cryptography fundamentals.

Excellent analytical and problem‑solving abilities.

Strong written and verbal communication skills.

🎓 Education

Bachelor’s degree in Computer Science, Information Security, or a related field.

Bonus Experience ⭐

Experience testing Web3 or blockchain-based applications.

Exposure to smart contract security audits.

Participation in bug bounty programs or security audit contests.

Offensive security certifications (OSCP, OSWE, OSCE, GWAPT, or similar).

Published security research, blog posts, or conference presentations. 🧑 🏫

Offer Highlights 🎁

💰 Competitive compensation

⏳ Long‑term, full‑time engagement

🧠 Dedicated time for research and skill development

🌍 Work on high‑impact, global security projects

🚀 Growth opportunities within a highly technical security environment