Application Security Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Execute red team projects and techniques aimed at achieving business objectives and minimizing client risk through technical assessments.

• Collaborate with a variety of Fortune 1000 clients to thoroughly evaluate their environments.

• Utilize advanced technical methodologies to test, verify, and validate technical controls within client applications.

• Conduct technical evaluations of web applications, APIs, mobile applications, and AI-driven applications.

• Carry out threat analyses to identify critical organizational assets and services, relevant threat actors, and potential threat events.

• Perform pre-assessment research and preparation, including reconnaissance, documentation, and client interviews.

• Document security vulnerabilities along with steps to replicate them.

• Analyze security findings, encompassing risk analysis and root cause examination.

• Research and suggest practical remediation strategies.

⛳️ Requirements

• Position Location: Remote within the Contiguous US.

• Implement industry standards and best practices, including OWASP ASVS, OWASP Top 10, OSSTMM, and the MITRE ATT&CK Framework.

• Engage in security-related projects or communities, including Capture The Flag (CTF) events.

• Possess the ability to think like a threat actor or attacker.

• Maintain a professional demeanor while interacting with clients and uphold a client-first approach.

• Demonstrate the capability to work both independently and collaboratively within a team.

• Preferably capable of conducting network-layer penetration tests on both external and internal client networks.

• Have knowledge of Active Directory attacks, adversary-in-the-middle attacks, and relay-based attacks in Windows environments (preferred).

• Experience with password spraying and password cracking techniques (preferred).

• Familiarity with obfuscation/encoding methods to circumvent controls or countermeasures (preferred).

• Experience in bypassing common security technologies such as advanced EDR solutions (preferred).

• Skilled in conducting social engineering exercises under defined Rules of Engagement (preferred).

• Experience in performing wireless penetration tests against contemporary wireless networks (preferred).

• Bachelor's degree in Computer Science, Computer Information Systems, or an equivalent field is preferred.

• OSWE certification or equivalent advanced-level certification is required.

• Other Offensive Security certifications are advantageous.

• Proficiency in network testing skills is a plus.

• Strong report writing and consultative skills are essential.

• Experienced in penetration testing and vulnerability assessment.

• Capability to sit for extended periods and work at a computer is necessary.

• Must be able to lift up to 15 pounds occasionally.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Flexible working hours and remote work options.

• Opportunities for professional development and continued education.

• Supportive team environment focused on growth and collaboration.