A key technical leadership role shaping how ATP detects and prevents real-world attacks, involving vulnerability research, exploit analysis, and production detection work.
Compensation
$172,100.00 - $278,300.00/yr
Responsibilities
Shape ATP detection strategy by identifying important vulnerability, exploit, and attack technique areas where new or improved protections are needed.
Drive innovative detection ideas from concept to production, delivering measurable improvements in coverage, quality, speed, or scalability.
Improve rapid response capability for zero-days, high-impact CVEs, and emerging attack vectors by guiding technical assessment, detection strategy, and release decisions.
Raise the quality and consistency of IPS protections by defining detection approaches, validation expectations, and technical review standards for complex cases.
Expand the team’s ability to deliver protections at scale through practical automation, detection pipeline improvements, and AI-assisted research workflows.
As a junior penetration tester, you’ll be at the forefront of cutting‑edge technology, working hands‑on with the latest electronics.
Compensation
$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Responsibilities
Perform in‑depth assessments and analyses of sophisticated systems using penetration testing and threat‑hunting techniques
Conduct grey and black box penetration testing
Develop and present proof‑of‑concepts to demonstrate exploitation techniques
Responsible for assessing and evaluating the security posture of Honeywell IA Products and partner technologies, delivering security services, and developing testing methodologies.
Responsibilities
Deliver Security Testing across all IA products
Report observations using standardized reporting structure
Work with cross functional teams to develop remediation suggestions
Lead hands‑on penetration testing of public partner‑facing booking APIs, payment flows, web and mobile apps, and cloud infrastructure for a global travel tech platform.
Compensation
You will get a competitive salary.
Responsibilities
Test partner‑facing booking APIs against the OWASP API Security Top 10
Assess API authentication and integrity end to end, including OAuth 2.0/OIDC, API keys, JWTs, webhooks and request signing
Hunt for business‑logic abuse in booking, checkout, payment and refund flows
Run authenticated tests of traveller‑, partner‑ and operator‑facing web and mobile apps following OWASP WSTG and ASVS
Review cloud, Kubernetes and CI/CD configurations and secrets handling for attack paths
Architect, design, implement, test, and deliver highly scalable authentication and session services on Salesforce Core (Java), with strict availability and latency requirements
Compensation
The typical base salary range for this position is $197,300 - $313,700 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $237,700 - $344,700 annually.
Responsibilities
Architect, design, implement, test, and deliver highly scalable authentication and session services on Salesforce Core (Java)
Build and evolve standards-based identity protocols
Harden sessions and credentials against hijacking, replay, phishing, and credential stuffing
Threat-model new features, work with Product Security, and fix findings from penetration tests, bug bounty, and incident reviews
Roll out security enforcement safely for customers using feature flags, phased cohorts, telemetry-driven decisions, and clear deprecation plans
Requirements
A related technical degree required
Nice to have: Experience building highly scalable web applications or identity infrastructure
Nice to have: Experience with MFA and passwordless authentication
Nice to have: Familiarity with identity RFCs and specifications
Nice to have: Experience with HSMs, cloud KMS, or secrets-management systems
Perform penetration testing to identify potential vulnerabilities in web systems, cloud services and IoT solutions using hacking attacks.
Responsibilities
Perform penetration testing to identify potential vulnerabilities in web systems, cloud services and IoT solutions using hacking attacks.
Perform risk assessment for identified vulnerabilities to design detailed penetration test report.
Present findings to relevant stakeholders and technical teams to introduce testing procedure, methodology and vulnerability risk severity in technical dimension.
Investigate and analyze vulnerabilities on software systems, to design protection measures to mitigate cybersecurity risks.
Investigate, research and evaluate security industry trends and best practices.