<p><a href="https://himalayas.app/companies/independent-security-evaluators">Independent Security Evaluators</a> (ISE) is continuously looking for Senior level Application Security Pentester/Analyst candidates. <strong>We are not currently hiring for this role, but we would still love to connect with you!</strong></p><p>Do you enjoy working with wicked smart people, like to hack into things, solve puzzles, and work on cool projects? ISE is the place for you! </p><h3>What you’ll do at ISE:</h3><ul><li>Interface directly as a project lead, senior analyst, or in a scoping capacity</li><li>Mentor junior analysts throughout client assessments, research projects, findings reviews, and general professional and technical development</li><li>Perform hands-on security assessments and reviews on various pieces of technology including but not limited to:<ul><li>Web apps and APIs</li><li>Mobile apps</li><li>Networks</li><li>Cloud architecture and configuration</li><li>Source code analysis</li><li>Hardware and firmware</li></ul></li><li>Create comprehensive assessment reports that clearly identify vulnerabilities, how they impact our client’s digital assets, and remediation strategies</li><li>Provide consultative advice to ISE’s clients regarding best practices, design guidance, new threats, policies and processes, etc. Basically: be their genius friend who helps solve problems.</li><li>Perform research and develop whitepapers/presentations/etc. regarding relevant research, security topics, tools and techniques driven by your areas of interest and expertise</li><li>Opportunity to participate in IoT Village</li></ul><h3>What you won't do at ISE:</h3><ul><li>Use scanners - we might use a scanning tool on occasion but our assessments are designed to find what scanners miss</li><li>Write policy or compliance rules or assess tools for regulatory purposes</li><li>Only hack with your head down - we are looking for folks who will talk with our clients, mentor others, and collaborate on projects, talks, and research</li></ul><h3>What you bring to the table:</h3><ul><li>6+ years in security consulting with a focus on application/software</li><li>Experience with programming and developing exploits</li><li>Familiarity with Unix command line tools and working in CLI environments</li><li>Skillset in the following:<ul><li>Web and desktop application security (Advanced)</li><li>Cloud security and architecture (Advanced)</li><li>Mobile application security (Basic)</li></ul></li><li>Background in the following: <ul><li>Software vulnerability analysis, code analysis, and fuzzing</li><li>Reverse engineering through static and dynamic analysis</li><li>Analyzing cryptographic workflows</li><li>Analyzing network traffic</li><li>Experience interacting with clients in a consultative environment</li></ul></li><li>Strong technical writing and oral communication skills</li><li>Public speaking experience</li><li>Desire to make things better: help our clients secure their products, help y