{"id":3127259,"url":"https://alion.io/job/doyensec-application-security-engineer-remote-us-based-senior-and-above","title":"Application Security Engineer (Remote: US based - Senior and above)","company":{"id":1755031,"name":"Doyensec","domain":"doyensec.com","url":"https://alion.io/company/doyensec","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":97000,"max_usd":200000,"period":"year","method":"global_role_seniority_cell","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":true},{"name":"JavaScript","optional":true},{"name":"Python","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-10-22T23:15:50Z","employer_posted_date":null,"last_verified_at":"2026-10-22T23:15:50Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"At Doyensec (), we believe that quality is the natural product of passion and care. We love what we do and we routinely take on difficult engineering challenges to help our customers build with security.\nOur clients are some of the leading global brands in the tech and startup communities. We help them secure their software and systems by providing information security consulting services (pentesting, reverse engineering, product security design and auditing). We keep a small dedicated client base and expect to develop long-term working relationships with the projects and people with whom we work.\nWe are looking for a highly experienced security engineer to join our consulting team. We perform gray-box security testing on complex web and mobile applications. We need someone who has proven testing skills across multiple languages and environments and can hit the ground running. If you are good at crawling around in the ventilation ducts of the world’s most popular and important applications, you probably have the right skill set for the job. Experience developing code and tools is highly desirable, along with the ability to support the growth of fellow engineers.\nWe offer a competitive salary in a supportive and dynamic environment that rewards hard work and talent. We are dedicated to providing research-driven application security and therefore invest 25% of your time exclusively to research, where we build security testing tools, discover new attack techniques, and develop countermeasures.\nResponsibilities:\nSecurity testing of web, mobile (iOS, Android) applications\n\nVulnerability research activities, coordinated and executed with Doyensec's founders\n\nPartnering with customers to ensure the projects objectives are achieved\n\nLeading projects and supporting engineer growth \n\nConducting cloud based audits on popular cloud platforms\n\nProviding support and guidance for clients concerning app and cloud security configuration, hardening and industry best practices\n\nRequired Skills, Experience and Knowledge:\n\nAt least 2 years of substantial professional experience focused specifically on application security testing or development, including performing security audits, or equivalent demonstrated experience through substantial and documented participation in bug bounty programs, CTFs, or similar security research activities.\n\nProven ability to discover, document and fix security bugs in real-world applications (e.g., CVEs, publicly documented research, open source application security contributions or significant quality bug bounty work)\n\nPassion about understanding complex systems and the ability to have fun while doing it\n\nAbility to read and quickly comprehend modern coding languages (e.g., JavaScript, Python, TypeScript, Go)\n\nFamiliarity with modern coding frameworks and their security measures\n\nExpert-level skills testing web and mobile applications\n\nExpert-level skills with Burp Suite\n\nEager to learn, adapt, and perfect your work\n\nAdditional Qualifications\nExperience performing cloud security assessments\n\nExperience with low-level/compiled language testing\n\nExperience with hardware testing\n\nPractical cryptography experience as used in real-world applications\n\nSubstantial participation in CTFs (individually or making significant contributions to a team)\n\nFormal education or training in application security (related college degree, high-level training), or relevant certifications (e.g., OSCP, BSCP, OSWE, OSWA, GXPN, GPEN, OSED, OSEP, OSCE)\n\nWe offer:\nRemote work (from anywhere in the USA), with flexible hours\n\nCompetitive salary, including performance-based bonuses\n\nStartup atmosphere\n\n25% research time (really!)\n\nAccess to high-visibility security testing efforts for leading tech companies\n\nPossibility to attend and present at various security conferences around the globe\n\nPaid time off\n\nCompany retreats and get together budget\n\nOriginally posted on Himalayas","description_format":"text","description_chars":3928,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cybersecurity","Penetration Testing"],"lifecycle":[{"event":"open","at":"2026-10-23T02:28:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":5,"expected_fill_days":29,"reasons":["seen:5","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/doyensec-application-security-engineer-remote-us-based-senior-and-above","json_url":"https://alion.io/job/doyensec-application-security-engineer-remote-us-based-senior-and-above.json","meta":{"generated_at":"2026-10-28T12:13:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16101,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1755031},"rest":"https://alion.io/mcp/rest/get_company?id=1755031"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdoyensec-application-security-engineer-remote-us-based-senior-and-above"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdoyensec-application-security-engineer-remote-us-based-senior-and-above"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdoyensec-application-security-engineer-remote-us-based-senior-and-above"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/doyensec-application-security-engineer-remote-us-based-senior-and-above\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdoyensec-application-security-engineer-remote-us-based-senior-and-above"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3127259}},{"tool":"search_jobs","arguments":{"company":"doyensec.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3127259},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}