Top Tech Jobs & Startup Jobs in Seattle, WA

Conduct network, web, API, mobile, cloud, and social engineering penetration tests for customer engagements. Advise clients on vulnerabilities, remediation, and compliance; coordinate project readiness; prepare reports and deliver readouts. Maintain customer relationships, pursue required certifications, and mentor junior testers. The role is based in a Seattle SCIF with limited periodic travel to client locations.

Conduct network, web (API and mobile) and social engineering penetration tests for clients, advise on vulnerabilities and remediation, produce deliverables, coordinate engagements, train junior staff, and meet FedRAMP/A2LA certification requirements. Must support customer-facing activities and occasional onsite travel.

Manage multiple concurrent penetration testing engagements from scoping through closeout. Responsibilities include developing project plans, coordinating clients and testers, preparing rules of engagement, managing schedules, tracking scope, budgets, risks, findings, reports, and deliverables, and maintaining project data in Jira. The role serves as the primary client contact and requires rapid prioritization across engagements, strong communication, organizational skills, and familiarity with information security and penetration testing.

Own full-cycle recruiting for cybersecurity, engineering, compliance, and business roles. Manage intake meetings, sourcing, screening, candidate pipelines, interview coordination, hiring-manager communication, agency relationships, and offer transitions in Ashby. Recruit for cleared federal and government-contractor positions while assessing technical backgrounds and clearance eligibility. Partner with HR and leaders to improve recruiting processes, employer branding, and candidate experience in a fast-growing, fully remote cybersecurity and cloud compliance company.

Leads FedRAMP 20X advisory engagements, performing gap analyses, designing cloud security solutions mapped to Key Security Indicators, and developing client compliance documentation. Builds automated, code-based validation using scripts, APIs, and Infrastructure-as-Code; advises on vulnerability response, encryption, authorization boundaries, SIEM, and continuous compliance monitoring. Tracks regulatory changes, manages client relationships, leads project activities, mentors team members, and delivers high-quality services on schedule.