Remote Senior Security Engineer

Description:

• EarnIn is seeking a highly skilled and motivated Offensive Security Engineer to join their security team.
• The position involves conducting penetration testing on company applications, identifying vulnerabilities, and providing actionable recommendations to enhance security posture.
• This is a full-time remote position with a US Remote base salary range of $186,300 - $227,700, plus equity and benefits.
• Responsibilities include conducting internal penetration testing, performing security architecture reviews, creating and analyzing data flow diagrams (DFDs), collaborating with engineering teams, and ensuring thorough documentation of security assessments.
• The role also involves assisting with vulnerability management, developing security guidelines, staying updated on security threats, and providing mentorship to engineering teams.

Requirements:

• Candidates must have strong experience in penetration testing, including identifying and exploiting security flaws in web applications, APIs, and infrastructure.
• Proficiency in security architecture reviews and understanding of secure design principles is required, along with the ability to communicate findings effectively.
• Experience in creating and critically reviewing data flow diagrams (DFDs) to identify security issues is necessary.
• Excellent attention to detail and the ability to document findings thoroughly are essential.
• Programming experience in languages such as Python, Java, or JavaScript is required.
• Familiarity with security tooling such as Nmap, Burp Suite, Metasploit, or custom-built security scripts is needed.
• Candidates should have knowledge of threat modeling methodologies and security frameworks (e.g., STRIDE, OWASP, NIST).
• A strong understanding of web application security, authentication mechanisms, and cloud security principles is important.
• The ability to work cross-functionally with product, engineering, and security teams is necessary.
• Knowledge of container security (Docker, Kubernetes) and cloud platforms (AWS, Azure) is required.
• Understanding of vulnerability management processes and security risk assessment frameworks is essential.

Benefits:

• EarnIn offers a competitive salary range along with equity and benefits.
• The company promotes a diverse and inclusive culture, celebrating different backgrounds and perspectives.
• Employees are encouraged to contribute to a culture of belonging within the organization.
• EarnIn is committed to providing a workplace free from unlawful discrimination and is an E-Verify participant.