SalariesSign in
AboutPrivacyTerms
Senior Information Security Engineer- Application Security Focus
Hexens

Senior Information Security Engineer- Application Security Focus

United KingdomRemoteFull-time
Posted Sep 27
Apply

Job Description

Hexens.io is looking for a Senior Information Security Engineer with a strong focus on application security to join our team. At Hexens.io, we deliver cutting-edge cybersecurity services with a core emphasis on blockchain technology. We address complex security challenges, protecting applications and infrastructures that handle multimillion-dollar digital assets.

Remote Availability: Work from anywhere! This is a fully remote role with no location restrictions.

Responsibilities:

  • Alongside our off-chain security lead, plan and deliver advanced application security assessments against API services, application front-ends, wallet software, browser plugins, mobile apps, and SDKs.
  • Collaborate with leading smart contract auditors and cryptography researchers, leveraging your application security expertise to assess attack surfaces outside their on-chain specializations.
  • Work to identify technical vulnerabilities, architectural flaws, and ways to mitigate future risk in the crucial junctions between off-chain and on-chain systems.
  • Interact with developers and key stakeholders when identifying and handling security issues.
  • Deliver clear and concise reporting on issues and attack paths identified.

Required skillset:

  • At least 5 years experience, or equivalent technical expertise, delivering offensive security services, with a primary focus on application security.
  • Expert-level web application and API security experience, with proficiency assessing apps with modern web frameworks, and identifying advanced client-side, back-end, and business logic attacks.
  • Experience assessing mobile applications (Android/iOS), browser extensions, and desktop applications.
  • Practical experience finding complex vulnerabilities and attack paths in Golang, Rust, TS/JS, Python, Java, or C-based codebases during white/grey-box appsec assessments.
  • Working knowledge of cloud, CI/CD, container, CDN, and network security concepts, and how they apply to application security.
  • Knowledge or willingness to learn web3 security concepts and how they apply to web3-centric applications.
  • Decent scripting and automation skills.
  • Assisting with scoping requirements for application security work.
  • Strong client-facing and soft skills.

Big plus if any of the following apply:

  • Significant web2 bug bounty/vulnerability disclosure history.
  • Prior experience as a smart contract auditor or onchain-focused security researcher.
  • Prior experience developing or integrating DeFi protocols, smart contracts, wallet services, or other web3 services.
  • Advanced relevant security certifications (OSWE, Burp Suite Certified Professional, etc.)

Benefits:

  • Work alongside industry-leading specialists
  • Opportunity to work with the most exciting and prominent companies in the industry
  • Highly competitive salary
  • Great work environment

Originally posted on Himalayas

View job
C

AI Engineer (Offensive Security)

CovertSwarm

  • Australia
  • Remote
  • Full-time
Apply
Sep 27
View job
C

Red Team Operator (Hive Member) - Apply Anytime!

CovertSwarm

  • Australia
  • Remote
  • Full-time
Apply
Sep 27
View job
C

Senior Offensive Security Professional / Red Teamer (CCRTS, CCRTM, CCT-APP)) - U

CovertSwarm

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 27
View job

云安全与 DevSecOps 工程师 / DevSecOps & Cloud Security Engineer

DavionLabs

  • China
  • Remote
  • Full-time
Apply
Sep 27
View job

IT Security Architect

Conduent

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

AI Red Team Specialist - Remote | Upto $22/hr

mercor

  • Canada
  • Remote
  • Contract
Apply
Sep 27
View job

Specialist, Cloud Security (Remote, GBR)

Crowdstrike

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 27
View job

Blockchain Security Engineer / 区块链安全工程师

DavionLabs

  • China
  • Remote
  • Full-time
Apply
Sep 27
View job

Endpoint Security Engineer (Mid-Level) – Carbon Black & Symantec

Plurilock Security Inc.

  • United States
  • Remote
  • Contract
Apply
Sep 27
View job
P

Solution Manager (m/w/d) Integrated Security Services

primion Technology GmbH

  • Australia
  • Remote
  • Full-time
Apply
Sep 27
View job

Information Security Architect

Ryder System, Inc.

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Digital Forensics Consultant (PST hours)

Lighthouse

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Analista de Segurança da Informação II - Foco em Arquitetura IAM

Central Ailos

  • Brazil
  • Remote
  • Full-time
Apply
Sep 27
View job

Coordenação de Segurança da Informação - Foco DevSecOps

Central Ailos

  • Brazil
  • Remote
  • Full-time
Apply
Sep 27
View job

Analista de Segurança da Informação III - Foco em AppSec

Central Ailos

  • Brazil
  • Remote
  • Full-time
Apply
Sep 27
View job

Security Compliance & Regulatory Affairs Analyst

Twilio

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

AWS Cloud Security Engineer- Remote

Boston Medical Center

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job
P

Cloud Security Engineer (Team Lead)

ProwlerPro, Inc.

  • Spain
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior Cloud Security Automation & AI Engineer- Remote (Anywhere in the U.S.)

GuidePoint Security LLC

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior OT Cybersecurity / ICS Security Architect (Part-Time)

Peraton

  • United States
  • Remote
  • Part-time
Apply
Sep 27
View job

Security Operations Analyst

Workstreet

  • Philippines
  • Remote
  • Full-time
Apply
Sep 27
View job

SOC/NOC Security & Network Operations Analyst

Outsource Access

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Chief Information Security Officer (CISO)

TheHiveCareers

  • Guyana
  • Remote
  • Full-time
Apply
Sep 27
View job

Information Assurance and Security Engineer

Peraton

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Security Engineer

Walker & Dunlop

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Lead, Security Engineer V&CM

Common Securitization Solutions

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior Information Security Engineer- Application Security Focus

Hexens

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 27
View job

Cyber Security Analyst

LTS Corporation

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior Application Delivery & Edge Security Engineer (Minneapolis, USA-MN, US, 5

Wipro Limited

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior Threat Intelligence Researcher

Lancope

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 27
PreviousPage 89 of 127Next
Hexens

Senior Information Security Engineer- Application Security Focus

United KingdomRemoteFull-time
Posted Sep 27
Apply

Job Description

Hexens.io is looking for a Senior Information Security Engineer with a strong focus on application security to join our team. At Hexens.io, we deliver cutting-edge cybersecurity services with a core emphasis on blockchain technology. We address complex security challenges, protecting applications and infrastructures that handle multimillion-dollar digital assets.

Remote Availability: Work from anywhere! This is a fully remote role with no location restrictions.

Responsibilities:

  • Alongside our off-chain security lead, plan and deliver advanced application security assessments against API services, application front-ends, wallet software, browser plugins, mobile apps, and SDKs.
  • Collaborate with leading smart contract auditors and cryptography researchers, leveraging your application security expertise to assess attack surfaces outside their on-chain specializations.
  • Work to identify technical vulnerabilities, architectural flaws, and ways to mitigate future risk in the crucial junctions between off-chain and on-chain systems.
  • Interact with developers and key stakeholders when identifying and handling security issues.
  • Deliver clear and concise reporting on issues and attack paths identified.

Required skillset:

  • At least 5 years experience, or equivalent technical expertise, delivering offensive security services, with a primary focus on application security.
  • Expert-level web application and API security experience, with proficiency assessing apps with modern web frameworks, and identifying advanced client-side, back-end, and business logic attacks.
  • Experience assessing mobile applications (Android/iOS), browser extensions, and desktop applications.
  • Practical experience finding complex vulnerabilities and attack paths in Golang, Rust, TS/JS, Python, Java, or C-based codebases during white/grey-box appsec assessments.
  • Working knowledge of cloud, CI/CD, container, CDN, and network security concepts, and how they apply to application security.
  • Knowledge or willingness to learn web3 security concepts and how they apply to web3-centric applications.
  • Decent scripting and automation skills.
  • Assisting with scoping requirements for application security work.
  • Strong client-facing and soft skills.

Big plus if any of the following apply:

  • Significant web2 bug bounty/vulnerability disclosure history.
  • Prior experience as a smart contract auditor or onchain-focused security researcher.
  • Prior experience developing or integrating DeFi protocols, smart contracts, wallet services, or other web3 services.
  • Advanced relevant security certifications (OSWE, Burp Suite Certified Professional, etc.)

Benefits:

  • Work alongside industry-leading specialists
  • Opportunity to work with the most exciting and prominent companies in the industry
  • Highly competitive salary
  • Great work environment

Originally posted on Himalayas