Job Title: Senior Software Security Engineer Must have 10+ yrs of experience
Location - 100% remote, working Eastern Time hours
Work authorization - U.S. citizens and green card holders only W2 only no C2C
Role Overview Our client is seeking a Senior Software Security Engineer to assess third-party Windows desktop applications requested by employees. You will review application behavior, reverse engineer Windows binaries, and analyze network traffic to determine whether software meets internal security standards. This includes identifying unauthorized outbound connections and other activity that may violate firm policy. You will work closely with the senior security reviewer, Windows Platform Engineering, Frontline Support, and employees requesting software. The role requires practical judgment in defining approval conditions and proposing workarounds that address security risks while meeting business needs.
Responsibilities- Perform security reviews of third-party, non-SaaS Windows applications and validate compliance with internal security standards.
- Reverse engineer and debug Windows binaries to identify vulnerabilities, unsafe behavior, and potential avenues for exploitation.
- Analyze application network protocols and use packet capture, traffic interception, decryption, and packet modification to validate application behavior.
- Apply penetration testing techniques and select tools suited to each application and review.
- Identify common desktop application weaknesses, document findings, and define security conditions for approval where appropriate.
- Communicate risks, remediation options, and practical workarounds to engineering, support, and business users.
- Keep requestors informed throughout the software review process.
Required Qualifications- Strong knowledge of Microsoft Windows, desktop application conventions, and enterprise endpoint infrastructure, including Active Directory.
- Hands-on experience with Windows binary reverse engineering, debugging, and software security analysis.
- Proficiency in network protocol analysis, packet inspection, traffic interception, and decryption.
- Ability to interpret internal security policies and apply them to software review decisions.
- Working knowledge of Linux and strong communication skills across technical and business teams.
Preferred Qualifications- Capture-the-Flag (CTF) competition experience.
- Background in network or systems administration.
Certifications are optional. Selection is based on demonstrated hands-on experience.