Application Security Consultant

100% REMOTE ROLE

Client is looking for an Application Security Consultant. Can be remote although Denver-based would be preferred.

Looking to start asap.

Duties will include:

Manage SAST (Snyk) and DAST (Qualys WAS) tooling

o Be able to interpret, and possibly manually verify the results.

o Guide developers in findings mitigation

Perform code reviews

o Primarily .NET but also Ruby, PowerShell

Perform vendor analysis

o Specifically embedded content for marketing sites

Monitor for/respond to CrowdStrike alerts

o Particularly (though not limited to) in AKS and cloud IOM/IOAs

WAF (Imperva) management

o Create/manage Rules & Policies

o Advanced Bot

o Respond to WAF events

Respond to incidents

o interpret logs and be able to translate them into reporting on incidents

Potentially conduct an OWASP SAMM assessment.