Thank you for considering GRIMM

Sr Challenge Development Lead The GRIMM AppSec team works with clients not just to assess current technologies and systems but to help train developers, architects, operators, and leadership through the use of hands on capture the flag (CTF) style exercises. These include both internal product development as well as custom solutions developed in partnership with our clients.

GRIMM is seeking a senior engineer to primarily lead these types of engagements, but with the flexibility to support other engagements as needed. This is a customer-facing position; qualified applicants will need to be comfortable engaging with clients on their own to gather and refine requirements, discuss findings and development, present progress, and also to help establish and expand business relationships with our customers.

In addition to creating, deploying, and running Capture The Flag events, the AppSec team focuses on a range of topics covering security design reviews (architecture, protocol analysis, etc.) including threat modeling, kernel vulnerability research, mobile/web/desktop app vulnerability research, embedded systems analysis, and more. All members of our team are constantly learning about new topics and applying that knowledge to challenging problems. We all share information and help guide each other as a team, and everyone has opportunity to work independently and direct their own activities.

Education and Certification A degree or comparable work experience is required in the fields of Computer Science, Computer Engineering, or a related discipline. Degreed or certified candidates will not receive preferential consideration. If a specific certification is required by a client GRIMM will cover certification costs. Location The AppSec team is 100% remote. Some future (post-pandemic) projects may require travel to customer sites or other venues where in person CTFs may be hosted. Travel will be less than 25%, though opportunities for additional travel may be available if desired.

Company Description GRIMM researches and develops the art of the possible in business modernization and computing technologies through cybersecurity, sensors, tools, analytics, frameworks, modeling and simulation, automated testing, cyber range Installation, Operations, and Maintenance (IOM), consulting, and intelligence. Our practices build on extensive experience in cyber mission support for national defense, and commercial service improvement and consulting. Our engineers and subject matter experts (SMEs) learned their trade from real-world engagements, not just textbooks. Position Requirements: The ideal candidate will have at least 5 years of experience in application in security, including at least 2 years creating/deploying/running Capture The Flag (CTF) competitions. They will also need to be able to manage and lead all technical aspects of a client engagement. A senior engineer must be able to oversee and mentor junior and mid level engineers.

Desired Qualities: Strong technical background in multiple application security fields such as:

• Vulnerability Analysis
• Threat Modeling
• Security Design Reviews
• In-depth knowledge of an operating system
• Network traffic analysis
• Web security
• Source analysis

Additional desired traits include:

• US Resident
• Desire and aptitude for public speaking
• Willingness to go to conferences and represent the company (speaking, running contests/exhibits, etc.) Perks: Ability to work from home, with some travel Work with a team of skilled people who think hacking is fun Take on a variety of high caliber technical challenges Strong benefits package Medical/dental/vision insurance premiums paid 100% by the company 5% company match for 401K plan, no vesting period 10 paid holidays and flexible vacation policy GRIMM promotes a Drug-Free Workplace, is an Equal Opportunity Employer (EOE) and an Affirmative Action Employer.

GRIMM researches and develops the art of the possible in business modernization and computing technologies through cybersecurity, sensors, tools, analytics, frameworks, modeling and simulation, automated testing, cyber range Installation, Operations and Maintenance (IOM), consulting, and intelligence. Our practices build on extensive experience in cyber mission support for national defense, and commercial service improvement and consulting. Our engineers and subject matter experts (SMEs) learned their trade from real-world engagements, not just textbooks.

We promote a Drug-Free Workplace, are an Equal Opportunity Employer (EOE) and Affirmative Action Employer.