Altruist is seeking a Senior Application Security Engineer to join our growing Security team. This hybrid role requires three days per week onsite at our San Francisco FiDi or Culver City offices. You will pentest the Altruist web application, APIs, infrastructure, Android and iOS applications; continuously break security controls to strengthen defenses; perform focused authorization and exploitability assessments on high-risk paths; conduct cloud pentests and identity-focused offensive testing; run purple-team exercises with Detection & Response and help build detections from your tradecraft; develop and maintain offensive tooling and repeatable testing playbooks; and document findings with reproducible proofs-of-concept, clear risk ratings, and actionable remediation guidance. Qualifications: 4+ years of experience as an Application/Security Engineer; pentesting across web, API, and mobile targets; extensive security assessment experience; experience with Burp Suite; ability to work independently; degree in Computer Science, Computer Engineering, Information Security, or equivalent experience; strong technical aptitude with modern stacks (Java, Spring, Terraform, Kubernetes); ownership mindset; excellent communication; resilience; willingness to learn; creative problem solving. Bonus points for experience in regulated environments (fintech/financial services); mobile pentesting (OWASP MASVS) and cloud/adversary emulation experience; relevant certifications (OSCP, OSWE, GXPN). Salary in San Francisco, CA: $200,000–$240,000 USD. Altruist offices: Culver City, CA; San Franci

Altruist is seeking a Senior Application Security Engineer to join our growing Security team. This hybrid role requires three days per week onsite at our San Francisco FiDi or Culver City offices. You will pentest the Altruist web application, APIs, infrastructure, Android and iOS applications; continuously break security controls to strengthen defenses; perform focused authorization and exploitability assessments on high-risk paths; conduct cloud pentests and identity-focused offensive testing; run purple-team exercises with Detection & Response and help build detections from your tradecraft; develop and maintain offensive tooling and repeatable testing playbooks; and document findings with reproducible proofs-of-concept, clear risk ratings, and actionable remediation guidance. Qualifications: 4+ years of experience as an Application/Security Engineer; pentesting across web, API, and mobile targets; extensive security assessment experience; experience with Burp Suite; ability to work independently; degree in Computer Science, Computer Engineering, Information Security, or equivalent experience; strong technical aptitude with modern stacks (Java, Spring, Terraform, Kubernetes); ownership mindset; excellent communication; resilience; willingness to learn; creative problem solving. Bonus points for experience in regulated environments (fintech/financial services); mobile pentesting (OWASP MASVS) and cloud/adversary emulation experience; relevant certifications (OSCP, OSWE, GXPN). Salary in San Francisco, CA: $200,000–$240,000 USD. Altruist offices: Culver City, CA; San Franci