Senior Application Security Consultant, Strategic Services
New
G
GuidePoint SecurityApplication security
Source API remote eligibility restrictions: United StatesFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- Minimum of 6 years of experience in Application Security and/or Software Development, with at least 3 years in Application Security; minimum of 2 years of experience in consulting services or internal security roles requiring effective communication with both technical teams and executive leadership.
- Required Skills
- JavascriptGenerative AI
Requirements
- Have a minimum of 6 years of experience in Application Security and/or Software Development, including at least 3 years in Application Security.
- Have at least 2 years of experience in consulting services or internal security roles requiring communication with technical teams and executive leadership.
- Bring direct hands-on experience in application threat modeling, architecture reviews, and AppSec/DevSecOps program assessments.
- Have comprehensive hands-on experience using generative AI in automated workflows.
- Have experience with application security controls, architectures, requirements, and industry standards.
- Have a development and/or application architecture design background, including secure cryptography implementation, input validation to prevent injection attacks, and exception management.
- Have operational DevSecOps experience.
- Have development experience in JavaScript, shell, Python, Java, C++, PHP, or C#, and be able to translate security requirements into technical implementations.
- Understand application security issues, mitigation strategies, and common security controls.
- Understand application security tools, methodologies, and frameworks such as OWASP SAMM, OWASP DSOMM, NIST SSDF, SLSA, NIST AI RMF, and MITRE ATLAS.
- Hold a bachelor's degree in a relevant discipline or have equivalent experience.
- Be willing to travel up to 10%.
Responsibilities
- Deliver Application Threat Modeling, Application Architecture Reviews, and AppSec/DevSecOps Program Assessments.
- Author comprehensive assessment deliverables for technical and managerial audiences, covering technical execution, deficiencies, business impact, and remediation strategies.
- Analyze complex application architectures and provide remediation guidance.
- Foster client relationships through support, information, and guidance while managing concurrent client engagements.
- Assist with practice development and improve service offerings.
- Mentor team members.
- Contribute to marketing initiatives through research, speaking, writing, and tool development.
View Full Description & ApplyYou'll be redirected to the employer's site
