Secure Code Auditor

About Sequester

Sequester is a privacy-first encrypted vault for personal photos and videos. We build software where security, reliability, and user trust are product features???not afterthoughts.

About this role

You will review Sequester's most sensitive code paths???authentication, encryption wrappers, backup logic???for logic flaws, unsafe defaults, and deviations from secure patterns.

What you will do

• Perform manual code audits on critical modules flagged by AppSec or release gates
• Map findings to CWE categories with fix guidance engineers can implement directly
• Track audit coverage over time and recommend high-risk areas for the next review cycle
• Validate that crypto and secrets-handling libraries are used as intended
• Support release blocking decisions when critical issues remain unresolved

What we are looking for

• Expert-level code review in Dart, PHP, or similar stacks used at Sequester
• Deep understanding of common vulnerability classes (injection, authZ, timing, memory safety where relevant)
• Experience auditing security-sensitive code under time pressure before major launches
• Clear, constructive feedback culture

Location

Remote-friendly. We hire globally and collaborate async-first across time zones.