About the role
Count My Boxes is multi-tenant. You will review auth, portal tokens, file links, and admin paths for cross-tenant access, and you will keep the dependency and header bar from drifting. Remote contract. Findings go to engineering with a reproduction, not a slogan.
What you'll do
- Review changes that touch login, portal access, uploads, or tenant filters
- Retest a reported cross-tenant or IDOR issue yourself
- Track vulnerable packages and the ones we actually ship
- Write the customer-facing answer when we are asked how data is separated
What we're looking for
- You have done application security or a security-minded engineering role on a multi-tenant app
- You can explain a finding to someone who will fix it
Nice to have
- ASP.NET, OAuth, or signed customer links