Sr. Application Security Consultant

Role:    Sr. Application Security Consultant

Location: United States (Remote)

Salary Range: $115K-$176K / year

Referral fee: $3000

SKILLS MATRIX 

What You'll Do

• Working independently and collaboratively with a team to both lead and support
• Perform penetration testing on applications with complex technology stacks from both a:
• Unauthenticated perspective and Authenticated perspective
• Dynamically flex your skills when assessing emerging or custom technologies.
• Lead complex engagements to provide a technical consistency approach across multiple tests
• Contextualize vulnerabilities and assess realistic impact to a client accounting for mitigating and aggravating factors
• Manage priorities and tasks to achieve utilization targets
• Operate with professionalism both internally and with clients
• Ensure quality reports and services are delivered efficiently and on time
• Support sales and business growth by scoping out potential opportunities
• Maintains strong depth of knowledge in the practice area
• Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables

What You'll Bring

• Application penetration testing and assessment tradecraft and methodologies (including browser-based, API)
• Strong working knowledge of at least two programming or scripting languages
• Strong understanding of security principles and industry best practices
• Minimum of 5 years' experience in a consulting/ professional services role
• Minimum of 5 years' experience in Application Security and/or Software Development

SKILLS REQUIRED

• Mobile Application Penetration Testing
• Hardware Penetration Testing
• Cloud Penetration Testing
• Al Penetration Testing
• Secure Code Review
• Thick Application Penetration Testing
• Container Penetration Testing
• Network Active Directory Penetration Testing

• AWAE, OSCP, OSCE, OSEE offensive security certifications
• development and engineering backgrounds
• Cloud Service penetration testing tradecraft and methodologies across multiple service providers (e.g. AWS, Google Cloud Platform, etc.)
• Mobile platform and application penetration testing tradecraft and methodologies across both iOS and Android
• Red/Purple Team tradecraft and methodologies
• Social engineering in all its forms
• AWS Certified Solutions Architect -
• Professional, AWS Certified Security, AWS
• Certified Advanced Networking, AWS Certified
• SysOps Administrator
• Network, Database, System administration experience and certifications