Cybersecurity Specialist – Application Security

About the Role

Payken is looking for a hands-on Cybersecurity Specialist who thinks like an attacker.

Your mission: Find vulnerabilities before someone else does.

You'll work directly with our development team to test applications, APIs, new features, code changes, integrations, and blockchain technology for exploitable security weaknesses.

Candidates located in the St. Louis, Missouri area are strongly preferred.

What You'll Do

• Penetration test Payken applications, APIs, and infrastructure

• Test new releases and code changes for exploitable vulnerabilities

• Identify weaknesses in authentication, authorization, APIs, access controls, data security, and transaction flows

• Review code and application architecture for security risks

• Document vulnerabilities and provide clear remediation recommendations

• Work directly with developers to resolve vulnerabilities and verify fixes

• Test third-party integrations for security weaknesses

• Assist with security testing of blockchain and smart-contract components

• Help incorporate security testing into our development and release process

What We're Looking For

• 3+ years of experience in application security, penetration testing, ethical hacking, vulnerability research, or cybersecurity

• Strong knowledge of web application and API security

• Understanding of OWASP Top 10 and common attack techniques

• Experience with penetration-testing and vulnerability-assessment tools

• Ability to independently identify, reproduce, and explain vulnerabilities

• Ability to work directly with software developers to resolve security issues

White-Hat Experience Encouraged

Experience with bug bounty programs, ethical hacking, vulnerability research, red teaming, CTF competitions, or responsible vulnerability disclosure is highly valued.

If you've discovered real-world vulnerabilities, show us what you've found. Bug bounty profiles, public disclosures, GitHub projects, security research, or similar examples are encouraged.

Certifications such as OSCP, OSWE, Security+, CEH, or GIAC are helpful but not required.

Demonstrated ability matters more than credentials.

Location

St. Louis, Missouri area strongly preferred.

Compensation

Salary Negotiable

100% company-paid health insurance premiums

401(k) with 6% employer match

Performance bonuses

Interested?

If your instinct when you see a new application is “How could I break this?” — we want to hear from you.