Application Security Consultant

Position Title: Application Security Consultant, Professional Services Position Location: Remote in the Contiguous US Job Summary: The Application Security Consultant delivers on a variety of red team projects and techniques with a focus on business outcomes and helping our clients reduce risk through technical testing. Professional services tasks will include working with diverse Fortune 1000 clients to fully test their environments. Essential Functions: Business focused technical testing – apply advanced technical methods to test, prove and validate technical controls within client applications. Conduct technical assessments of client web applications, API’s, mobile applications, and AI enabled applications. Perform threat analysis, including identifying critical organization assets and services, relevant threat actors, and likely threat events. Perform pre-assessment research and preparation including reconnaissance, documentation and customer interviews. Document security weaknesses, including steps to reproduce. Analyze security findings, including risk analysis and root cause analysis. Research and propose practical remediation. Required Skills/Abilities/Competencies: Ethical and Critical Thinking. Apply industry standards and best practices including the OWASP Application Security Verification Standard (ASVS), various OWASP Top 10’s, Open-Source Security Testing Methodology Manual (OSSTMM), and the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK