SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Altruist is transforming the wealth management industry with an AI platform for financial advisors. The company is hiring a Senior Application Security Engineer to join the growing Security team and conduct offensive security testing across the product suite.
In this role, you will perform penetration testing on Altruist's web application, APIs, infrastructure, and mobile applications (Android/iOS). Your responsibilities include breaking security controls to improve them, conducting authorization and exploitability assessments on high-risk attack paths, performing cloud pentests and identity-focused offensive testing, and running purple-team exercises with Detection & Response teams to build detections from your tradecraft. You'll develop and maintain offensive tooling, repeatable testing playbooks, and contribute to phishing and social-engineering assessments. All findings must be documented with reproducible proofs-of-concept, clear risk ratings, and actionable remediation guidance.
You bring 4+ years of experience as an Application/Product Security Engineer with hands-on pentesting across web, API, and mobile targets. You have extensive experience with security assessments and tools like Burp Suite, and can work independently with strong technical aptitude. A B.A./B.S. in Computer Science, Computer Engineering, Information Security, or equivalent experience is required. You're technologically savvy, able to quickly learn modern tech stacks (Java, Spring, Terraform, Kubernetes), and possess superb communication skills with an ego-less confidence and creative problem-solving approach.
Bonus qualifications include experience in regulated fintech/financial services environments, mobile application pentesting (OWASP MASVS), cloud/red-team and adversary emulation experience, and relevant certifications (OSCP, OSWE, GXPN).
The role follows a hybrid schedule with three days per week onsite in either the San Francisco FiDi or Culver City office.
