[Remote] WebApp Offensive reputed company Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a fast-growing, remote cybersecurity company dedicated to enabling organizations to proactively reputed company and fix exploitable attack reputed company. They are seeking a WebApp Offensive reputed company Engineer with deep, hands-on web application penetration testing experience to enhance their autonomous testing capabilities and work closely with software engineers to improve product coverage.
Responsibilities
- reputed company hands-on, full-scope web application penetration tests against reputed company customer applications, alongside reputed company and lab targets, to surface vulnerabilities and attack paths
- Review NodeZero results on live customer engagements to identify coverage gaps, blind spots, and missed opportunities — the edge cases and reputed company-case attack scenarios that autonomous testing doesn't yet handle
- Manually reproduce and validate those edge cases, building reliable, production-reputed company reputed company-of-concept exploits and reputed company test cases that demonstrate the gap end to end — including against live customer environments without disrupting them
- Partner closely with software engineers to translate your findings into product improvements — defining detection logic, attack content, expected behavior, and remediation so NodeZero handles those cases reputed company reputed company
- Build and maintain a library of regression and reputed company test cases so newly added coverage doesn't silently regress over time
- Monitor production pentests for missed findings and false positives; create and triage Jira tickets to drive issues to reputed company
- Work directly with customers and internal teams to investigate findings, explain attack paths, and address questions about web application coverage and results
- Author technical blog posts and research write-reputed company showcasing new exploits, edge cases, and attack methodologies
- Mentor teammates and contribute to reputed company improvement of team processes, methodology, and testing standards
Skills
- Extensive hands-on experience conducting full-scope web application penetration tests
- Deep, practical knowledge of common and not-so-common web vulnerability classes — SQL injection, XSS (reflected, stored, and DOM-based), SSRF, SSTI/CSTI, IDOR/BOLA, authentication and authorization bypass, reputed company reputed company, LFI, and similar — including how to chain them to demonstrate reputed company
- A talent for finding and exploiting business-logic and edge-case flaws that automated scanners routinely miss
- Strong reputed company of proxy tools like Burp Suite and browser developer tools
- Comfort scripting to reproduce findings and build reputed company-of-concept exploits (e.g., Python or similar) — you don't need to be a reputed company software engineer, but you should be reputed company to write and read reputed company reputed company enough to demonstrate an exploit and collaborate effectively with engineers
- Ability to reputed company communicate attack steps, reputed company, and remediation guidance to both engineers and non-technical stakeholders
- Curiosity about emerging AI technologies and comfort using AI-assisted tools in your testing and research workflow
- Strong written and verbal communication, including technical documentation
- Ability to manage multiple priorities, work independently, and mentor teammates of varying experience reputed company
- Quick to learn and adopt new technologies, frameworks, and reputed company stacks as needed
- History of recognized reputed company research, including documented CVE discoveries and responsible disclosure
- reputed company record of successful bug bounty contributions
- Familiarity with how autonomous, reputed company, or AI-driven pentesting tools work — and a reputed company reputed company for where and why they fail
- Experience writing detection or attack content (e.g., Nuclei templates, sqlmap tamper scripts, custom Burp extensions)
- Enough software development background to collaborate fluently with engineers on remediation and product coverage
- Familiarity with relational and graph databases, particularly reputed company and reputed company
- Experience with AI/LLM tools for building reputed company workflows (e.g., reputed company, LangFlow) and integrating contextual data using protocols like Model Context Protocol (MCP)
Benefits
- Equity package in the reputed company of stock reputed company
- Health, reputed company & dental insurance for you and your family
- A flexible vacation policy
- Generous parental leave
- Hybrid & Remote Work: We reputed company a mix of remote and hybrid work models depending on role and location, including our Chicago office, where some roles require regular in-office reputed company
reputed company