{"id":158041,"url":"https://alion.io/job/census-senior-product-security-consultant-100-remote","title":"Senior Product Security Consultant - 100% Remote","company":{"id":55596,"name":"CENSUS","domain":"census-labs.com","url":"https://alion.io/company/census-labs","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":{"grade":"B","score":81,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PKI","optional":false},{"name":"STRIDE","optional":false},{"name":"C#","optional":true},{"name":"C++","optional":true},{"name":"Go","optional":true},{"name":"JavaScript","optional":true},{"name":"Kotlin","optional":true},{"name":"PHP","optional":true},{"name":"Python","optional":true},{"name":"Ruby","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-07-06T09:57:09Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-22T18:46:52Z","board_verified":true,"closed_at":null,"days_open":108,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":107},"description":"About CENSUS\nCENSUS LABS is a cybersecurity engineering powerhouse specializing in\nsecuring products and organizations. Our identity is rooted in\nprofessionalism, engineering excellence, a scientific mindset, and\nhacking demeanor. We are research-driven, enabling us to deliver a\ndiverse range of professional services.\nCENSUS is trusted to conduct high-impact product security\nengagements, helping our clients secure their solutions from design to\ndeployment, using realistic and risk-informed approaches. Our expertise\nspans end-to-end systems, including Secure Communications, IoT, Medical\nDevices, Mobile, and Vehicle Computing platforms.\nLearn more about CENSUS at census-labs.com. **VALID PASSPORT REQUIRED FOR SECURITY CLEARANCE PURPOSES**\nAbout the Job\nCENSUS’ bespoke cybersecurity services are driven by a talented team\nof Security Engineers, Consultants, and Researchers whose work goes\nbeyond traditional security assessment. Under the mentorship of our\nEngineering Managers, our consultants perform technical evaluations of\ncomplex systems and deliver insights that drive measurable\nimprovements.\nWe are seeking a technically strong and detail-oriented Senior\nProduct Security Consultant to join our Cybersecurity Engineering team.\nThe ideal candidate will have extensive experience in product-level\nsecurity verification, threat model analysis, and product-level\ntesting.\nYou will be responsible for evaluating the security posture of\nsoftware and system products by validating architecture, threat models,\nand security controls. You will participate in structured evaluation\nprojects aligned with industry and regulatory standards such as Common\nCriteria, ISO/IEC 27002, or equivalent frameworks.\nKey Responsibilities\nReview and validate security documentation (e.g., Security Targets, threat models, trust boundaries, asset inventories). \nAssess the completeness, accuracy, and risk coverage of variousthreat models and risk assessment frameworks (STRIDE, LINDDUN, OWASP,\nTARA, TAL, etc.). \n\nVerify security requirement traceability across assets, trust boundaries, and system functions. \nConduct architectural and implementation-level reviews of security controls (e.g., encryption, access control, key management). \nPerform targeted security testing (white-box and black-box) onsystem APIs, client/mobile apps, backend services, and cloud\ninfrastructure. \n\nValidate implementation of cryptographic controls, key lifecycle procedures, and secure communication protocols. \nEvaluate the use of post-quantum cryptography and hybrid models in secure key management. \nAnalyze secure deployment configurations across containerizedplatforms (Docker, Kubernetes), CI/CD pipelines, and cloud services. \n\nDeliver comprehensive, standards-aligned technical reports based on evaluation findings. \nCommunicate product security risks clearly to both technical and non-technical audiences. \nMinimum Qualifications\nMSc or BSc in Computer Science, Electrical/Software Engineering, Cybersecurity, or a related technical discipline. \n4+ years of experience in product security, software evaluation, or penetration testing. \nProven ability to evaluate threat models, security requirements, and mitigation effectiveness. \nStrong technical writing and documentation skills in English. \nExcellent analytical skills and attention to detail. \nRequired Skills\nIn-depth understanding of security architecture and commonsystem design patterns (e.g., API gateways, microservices, message\nqueues, service meshes). \n\nHands-on experience performing design-level security reviews and verifying implementation alignment with defined threat models. \nFamiliarity with structured security frameworks such as Common Criteria, FIPS 140, ISO 15408, OWASP ASVS, and MASVS. \nPractical experience with security testing in diverse product environments (mobile, embedded, web/cloud, API). \nKnowledge of authentication, authorization, identity, andsecrets management technologies (e.g., OAuth2, MFA, PKI, SSO, Cloud IAM,\nHashiCorp Vault). \n\nProficiency in applied cryptography (e.g., mTLS, E2EE, AEAD, key derivation, key wrapping, remote attestation). \nAbility to identify security vulnerabilities across platforms (e.g., OWASP Top 10, misconfigurations, transport security gaps). \nExcellent documentation and communication skills, able to articulate technical risks and findings to diverse audiences. \nProblem solving skills, analytical thinking, and willingness to learn/grow. \nNice-to-Have Skills\nAbility to read and analyze source code for logic flaws in one or more language families: \nMobile: Swift, Obj-C, Kotlin, Java, Dart, JavaScript \nWeb/Cloud: Java, Python, Go, PHP, Ruby, C#, JavaScript \nNative/Embedded: C, C++ \nExperience debugging or instrumenting applications across edge, embedded, or cloud platforms. \nFamiliarity with Zero Trust architectures, enclaves, and confidential computing technologies. \nExposure to fuzzing, symbolic execution, or static analysis techniques. \nExperience collaborating with distributed teams across different time zones and cultures. \nOUR Values & Core Competencies\nAct with Integrity\nWe uphold the highest ethical standards and take full responsibility\nin every action - whether securing systems, researching vulnerabilities,\nor collaborating with clients. Trust is the foundation of our impact.\nCollaborate with Trust\nWe bring together diverse perspectives across disciplines and\nborders, knowing that collective intelligence leads to stronger, more\nresilient outcomes.\nChallenge with Curiosity\nWe question deeply, explore fearlessly, and pursue knowledge\nrelentlessly to uncover threats, solve root problems, and drive smarter\nsecurity decisions.\nInnovate to Protect\nWe create with purpose - building secure, scalable, and\nforward-looking solutions that safeguard people, organizations, and the\ndigital future.\nAdapt with Precision\nWe move with speed and discipline - learning from failure, refining\nour approach, and staying focused amid complexity and constant change.\nReady to Make an Impact?\nApply today!","description_format":"text","description_chars":6028,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-07-06T09:57:09Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.388,"p_room":0.28,"age_days":107,"expected_fill_days":36,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/census-senior-product-security-consultant-100-remote","json_url":"https://alion.io/job/census-senior-product-security-consultant-100-remote.json","meta":{"generated_at":"2026-10-22T22:21:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7507,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":55596},"rest":"https://alion.io/mcp/rest/get_company?id=55596"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcensus-senior-product-security-consultant-100-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcensus-senior-product-security-consultant-100-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcensus-senior-product-security-consultant-100-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/census-senior-product-security-consultant-100-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcensus-senior-product-security-consultant-100-remote"}]}