SalariesSign in
AboutPrivacyTerms
Senior Information Security Engineer- Application Security Focus
Hexens

Senior Information Security Engineer- Application Security Focus

United KingdomRemoteFull-time
Posted Sep 27
Apply

Job Description

Hexens.io is looking for a Senior Information Security Engineer with a strong focus on application security to join our team. At Hexens.io, we deliver cutting-edge cybersecurity services with a core emphasis on blockchain technology. We address complex security challenges, protecting applications and infrastructures that handle multimillion-dollar digital assets.

Remote Availability: Work from anywhere! This is a fully remote role with no location restrictions.

Responsibilities:

  • Alongside our off-chain security lead, plan and deliver advanced application security assessments against API services, application front-ends, wallet software, browser plugins, mobile apps, and SDKs.
  • Collaborate with leading smart contract auditors and cryptography researchers, leveraging your application security expertise to assess attack surfaces outside their on-chain specializations.
  • Work to identify technical vulnerabilities, architectural flaws, and ways to mitigate future risk in the crucial junctions between off-chain and on-chain systems.
  • Interact with developers and key stakeholders when identifying and handling security issues.
  • Deliver clear and concise reporting on issues and attack paths identified.

Required skillset:

  • At least 5 years experience, or equivalent technical expertise, delivering offensive security services, with a primary focus on application security.
  • Expert-level web application and API security experience, with proficiency assessing apps with modern web frameworks, and identifying advanced client-side, back-end, and business logic attacks.
  • Experience assessing mobile applications (Android/iOS), browser extensions, and desktop applications.
  • Practical experience finding complex vulnerabilities and attack paths in Golang, Rust, TS/JS, Python, Java, or C-based codebases during white/grey-box appsec assessments.
  • Working knowledge of cloud, CI/CD, container, CDN, and network security concepts, and how they apply to application security.
  • Knowledge or willingness to learn web3 security concepts and how they apply to web3-centric applications.
  • Decent scripting and automation skills.
  • Assisting with scoping requirements for application security work.
  • Strong client-facing and soft skills.

Big plus if any of the following apply:

  • Significant web2 bug bounty/vulnerability disclosure history.
  • Prior experience as a smart contract auditor or onchain-focused security researcher.
  • Prior experience developing or integrating DeFi protocols, smart contracts, wallet services, or other web3 services.
  • Advanced relevant security certifications (OSWE, Burp Suite Certified Professional, etc.)

Benefits:

  • Work alongside industry-leading specialists
  • Opportunity to work with the most exciting and prominent companies in the industry
  • Highly competitive salary
  • Great work environment

Originally posted on Himalayas

View job

Senior OT Cybersecurity / ICS Security Architect (Part-Time)

Peraton

  • United States
  • Remote
  • Part-time
Apply
Sep 27
View job

Security Operations Analyst

Workstreet

  • Philippines
  • Remote
  • Full-time
Apply
Sep 27
View job

SOC/NOC Security & Network Operations Analyst

Outsource Access

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Chief Information Security Officer (CISO)

TheHiveCareers

  • Guyana
  • Remote
  • Full-time
Apply
Sep 27
View job

Information Assurance and Security Engineer

Peraton

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Security Engineer

Walker & Dunlop

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Lead, Security Engineer V&CM

Common Securitization Solutions

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior Information Security Engineer- Application Security Focus

Hexens

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 27
View job

Cyber Security Analyst

LTS Corporation

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior Application Delivery & Edge Security Engineer (Minneapolis, USA-MN, US, 5

Wipro Limited

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior Threat Intelligence Researcher

Lancope

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 27
View job

Agentic AI Security Engineer

LTS Corporation

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Risk & Controls Manager

Consensys

  • Afghanistan
  • Remote
  • Full-time
Apply
Sep 27
View job
Q

Customer Onboarding Engineer (Security & Comp

Quzara LLC

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior Security Infrastructure Engineer

Sezzle

  • Argentina
  • Remote
  • Full-time
Apply
Sep 27
View job

Lead Analyst, Third Party Security

Circle

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Arquiteto Especialista IAM

IRIUM Portugal

  • Portugal
  • Remote
  • Full-time
Apply
Sep 27
View job

Cybersecurity, OT-IT Security Consultant

Brown and Caldwell

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job
T

Senior IT Security Engineer

The Hanover Insurance Group

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Information Security Officer (ISO) (Any city, LA, US, 99999)

Gainwell Technologies

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job
I

Threat Intelligence and Detection Engineer

Insane Cyber

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Staff Security Engineer [Remote-US]

Quanata, LLC

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Backend Security Engineer

micro1

  • Worldwide
  • Remote
  • Contract
Apply
Sep 27
View job

Sr. Manager, Identity and Access Management

CDK Global

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Principal OT Cybersecurity / ICS Security Architect

Peraton

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Chief Risk Officer (CRO) – Retail Banking

TheHiveCareers

  • Guyana
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior Mobile Software Engineer (iOS / Android), Identity & Security - India

JumpCloud

  • India
  • Remote
  • Full-time
Apply
Sep 27
View job
I

Vice President, Cybersecurity, Risk & Compliance (Deputy CISO)

International Data Group, Inc.

  • United States
  • Remote
  • Full-time
Apply
Sep 27
View job

Senior Full-Stack Developer [Security & Risk Products]

ScalePad

  • Canada
  • Remote
  • Full-time
Apply
Sep 27
View job

Site Reliability Engineer (FedRAMP / Security) - CA

Coralogix

  • United States
  • Remote
  • Full-time
Apply
Sep 27
PreviousPage 91 of 128Next
Hexens

Senior Information Security Engineer- Application Security Focus

United KingdomRemoteFull-time
Posted Sep 27
Apply

Job Description

Hexens.io is looking for a Senior Information Security Engineer with a strong focus on application security to join our team. At Hexens.io, we deliver cutting-edge cybersecurity services with a core emphasis on blockchain technology. We address complex security challenges, protecting applications and infrastructures that handle multimillion-dollar digital assets.

Remote Availability: Work from anywhere! This is a fully remote role with no location restrictions.

Responsibilities:

  • Alongside our off-chain security lead, plan and deliver advanced application security assessments against API services, application front-ends, wallet software, browser plugins, mobile apps, and SDKs.
  • Collaborate with leading smart contract auditors and cryptography researchers, leveraging your application security expertise to assess attack surfaces outside their on-chain specializations.
  • Work to identify technical vulnerabilities, architectural flaws, and ways to mitigate future risk in the crucial junctions between off-chain and on-chain systems.
  • Interact with developers and key stakeholders when identifying and handling security issues.
  • Deliver clear and concise reporting on issues and attack paths identified.

Required skillset:

  • At least 5 years experience, or equivalent technical expertise, delivering offensive security services, with a primary focus on application security.
  • Expert-level web application and API security experience, with proficiency assessing apps with modern web frameworks, and identifying advanced client-side, back-end, and business logic attacks.
  • Experience assessing mobile applications (Android/iOS), browser extensions, and desktop applications.
  • Practical experience finding complex vulnerabilities and attack paths in Golang, Rust, TS/JS, Python, Java, or C-based codebases during white/grey-box appsec assessments.
  • Working knowledge of cloud, CI/CD, container, CDN, and network security concepts, and how they apply to application security.
  • Knowledge or willingness to learn web3 security concepts and how they apply to web3-centric applications.
  • Decent scripting and automation skills.
  • Assisting with scoping requirements for application security work.
  • Strong client-facing and soft skills.

Big plus if any of the following apply:

  • Significant web2 bug bounty/vulnerability disclosure history.
  • Prior experience as a smart contract auditor or onchain-focused security researcher.
  • Prior experience developing or integrating DeFi protocols, smart contracts, wallet services, or other web3 services.
  • Advanced relevant security certifications (OSWE, Burp Suite Certified Professional, etc.)

Benefits:

  • Work alongside industry-leading specialists
  • Opportunity to work with the most exciting and prominent companies in the industry
  • Highly competitive salary
  • Great work environment

Originally posted on Himalayas