In this role, you will scope and lead focused security reviews on critical internet scale applications and supporting infrastructure. You will learn the services architecture and risk profile to build a scope that enables a meaningful security review.

Minimum Qualifications

4+ years in an information security field or software engineering; 2 or more of those years conducting security reviews
2+ years of manually reviewing source code to assist in finding vulnerabilities
Ability to adapt quickly to prioritization shifts and investigate unfamiliar technologies
Extensive infrastructure, cloud, and application security experience
Experience communicating risk to engineering and leadership teams
Ability to reason about security of a large and complex application or infrastructure
Experience going deep on complex systems for extended engagements

Preferred Qualifications

8+ years in an information security field; 4 or more of those years conducting security reviews
Bachelors degree in Computer Science / Engineering or a related, with emphasis in security related fields (or equivalent experience)
Experience constructing threat scenario narratives and building exploit chains
Ability to reason about and influence software architecture for security
Community contributions like public CVEs, bug bounty recognition, open source tools, blogs, talks etc.