Web2 & Mobile Security Researcher
Certora
Arlington, VA, USA
Posted on Sep 22, 2025
- 5+ years of hands-on experience in application security or vulnerability research, with a strong focus on white-box code review.
- Demonstrated experience in building or shaping new security domains, practices, or methodologies within an organization.
- Strong background in Web2 application security: OWASP Top 10, authentication/authorization flaws, and logic vulnerabilities.
- Hands-on experience with at least one major programming language: JavaScript/TypeScript, Python, Java/Kotlin, or C#.
- Hands-on experience in mobile application security (iOS/Android), including storage, networking, Memory and key management vulnerabilities.
- Familiarity with security testing tools (SAST/DAST, dependency scanning, fuzzing).
- Ability to clearly document findings, develop proof-of-concepts, and communicate remediation guidance to developers.
- Strong written and verbal communication skills in English.