Position: Senior Source Code Auditor - Cybersecurity

Location: Irvine, CA (Relocation Assistance Available)

Compensation: $120,000 - $180,000 base salary + Year-End Bonus

We are seeking five highly skilled and experienced Senior Source Code Auditors to join the cybersecurity team of one of the world’s leading providers of networking devices and smart home products. In this role, you will be responsible for auditing and analyzing source code to identify potential security risks, ensure compliance with coding standards, and enhance the overall security posture of our applications. You will work closely with development teams, security specialists, and key stakeholders to offer actionable insights and recommendations to improve both code quality and security.

Key Responsibilities:

• Perform thorough audits of source code to identify vulnerabilities, security risks, and performance inefficiencies.
• Analyze code across various languages and frameworks including Python, Java, C++, JavaScript, Swift, and Kotlin.
• Establish and maintain auditing standards, methodologies, and tools to ensure consistent, high-quality code reviews.
• Collaborate with development teams to provide guidance on secure coding practices and remediation strategies.
• Create comprehensive audit reports detailing findings, risks, and actionable recommendations for improving code security.
• Keep up to date with emerging security threats, coding standards, and best practices to continuously enhance auditing processes.
• Mentor junior auditors, sharing expertise on auditing methods, tools, and industry best practices.
• Partner with cross-functional teams to integrate security practices throughout the software development lifecycle (SDLC).
• Assist in the development and delivery of security training programs for development teams to raise awareness and best practices.

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent work experience.
• At least 5 years of experience in source code auditing, software development, or application security.
• Strong knowledge of secure coding principles, software vulnerabilities, and common attack vectors (e.g., SQL injection, cross-site scripting, buffer overflow).
• Proficiency in a variety of programming languages and familiarity with several development frameworks.
• Experience with automated code review tools such as SonarQube, Coverity, Checkmarx, and Veracode, along with manual code review techniques.
• Excellent analytical and problem-solving skills with a keen eye for detail.
• Strong communication skills to effectively explain technical concepts to both technical and non-technical stakeholders.
• Relevant certifications such as CEH, OSCP, or CISSP are highly desirable.

Preferred Skills:

• Experience auditing code for cloud-based applications and familiarity with cloud security (AWS, Azure, GCP).
• Knowledge of DevSecOps practices and experience integrating security into CI/CD pipelines.
• Familiarity with regulatory standards and compliance requirements related to software security (e.g., ISO27001, GDPR, PCI-DSS, HIPAA).

Benefits:

• Free snacks and beverages.
• Comprehensive health coverage (medical, dental, and vision) with partial coverage for dependents.
• 401(k) retirement contributions.
• Over four weeks of paid time off annually.
• Bi-annual salary reviews and increases.
• Health and wellness benefits, including a free gym membership.
• Quarterly team-building activities.