Security Engineer (contract)

What you’ll do

• Run a scoped security review and penetration test of the platform, the connector and the dashboard
• Check tenant isolation, key scopes, OAuth flows, payments and abuse controls
• Write clear findings with severity and fixes, and re-test after they ship

What you bring

• Proven web application and cloud security testing experience
• Familiarity with OAuth 2.1, JWTs, multi-tenant SaaS and payment flows
• Clear written reports; bonus for public findings or certifications

What we offer

• A paid, scoped engagement with a clear brief
• Remote, flexible schedule
• The chance to shape a security program early

How we hire

1. Apply on this site. Every application goes through the form on the role’s page, with the live link of something you deployed on Harakumo. Email and LinkedIn messages are not reviewed.
2. Build it, from your own account. Create a free account, build a working app around your own idea (connect your AI to harakumo.com/mcp, or use the CLI or SDK), deploy it, and submit it signed in at /careers/next-step. We read what you built before résumés.
3. One conversation. 45 minutes with the founder about what you built and what you would build here.
4. A paid project, if useful. Optional: a scoped, paid one-week project on a real service. Then an offer.

The same steps, for every role, are on the careers page.