Penetration Tester / Security Engineer | Remote

Crossing Hurdles is seeking a SecOps Engineer for a contract position. The role involves performing secure code reviews, identifying and remediating application-layer vulnerabilities, and advising development teams on secure coding practices.

Responsibilities:

• Perform expert-level secure code reviews focusing on OWASP Top 10 and CWE vulnerability classes
• Identify, triage, and remediate application-layer vulnerabilities, including broken access control and SQL injection
• Develop and maintain security automation tools using Python, GoLang, or JavaScript/TypeScript
• Conduct and document penetration tests, collaborating with teams to drive remediation initiatives
• Advise development teams on secure coding practices to enhance security throughout the software lifecycle
• Stay informed of emerging threats and incorporate best practices within the customer's environments

Requirements:

• Have strong relevant experience in software engineering or security operations with a focus on application-layer security
• Demonstrate proficiency in Python, GoLang, Rust, JavaScript, or TypeScript
• Have expertise in secure code review and professional penetration testing
• Possess strong familiarity with OWASP Top 10, CWE, and modern vulnerability classes
• Have a proven ability to detect, prioritize, and remediate vulnerabilities in production applications