Senior Application Security Consultant, Strategic Services- Remote (Anywhere in the U.S.)
GuidePoint Security3 months ago
Responsibilities
- Deliver application security services including threat modeling, architecture reviews, and AppSec/DevSecOps program assessments.
- Author comprehensive technical and managerial assessment deliverables covering execution, deficiencies, business impact, and remediation strategies.
- Provide client remediation guidance and foster client relationships through support and consultation.
- Manage concurrent client engagements.
- Contribute to practice development, service offering improvements, and team mentoring.
- Support marketing initiatives through research, speaking, writing, and tool development.
- Use emerging technologies and AI tools to improve workflows and business outcomes.
Requirements
- Willingness to travel up to 10%.
- Hands-on experience delivering application threat modeling, application architecture reviews, and AppSec/DevSecOps program assessments.
- Understanding of application security tools, methodologies, controls, architectures, requirements, and standards, including OWASP SAMM, OWASP DSOMM, NIST SSDF, SLSA, NIST AI RMF, and MITRE ATLAS.
- Experience analyzing complex application architectures and integrating security into development teams and the SDLC.
- Operational DevSecOps experience and secure implementation knowledge for cryptography, input validation, injection prevention, and exception management.
- Development experience with JavaScript, shell, Python, Java, C++, PHP, or C#.
- Comprehensive hands-on experience using generative AI in automated workflows.
- At least 6 years of experience in application security and/or software development, including at least 3 years in application security.
- At least 2 years of experience in consulting services or internal security roles involving communication with technical teams and executive leadership.
- Bachelor’s degree in a relevant discipline or equivalent experience.
- Strong writing, communication, and time-management skills.
Benefits
- Primarily remote work within the U.S., with up to 10% travel and on-site work potentially required for Federal positions.
- Medical insurance options include a zero-deductible PPO and a high-deductible plan with HSA contributions.
- Dental insurance is fully paid for employees and partially paid for family plans.
- 12 corporate holidays and a Flexible Time Off program.
- Mobile phone and home internet allowance.
- Retirement plan eligibility after two months at open enrollment.
- Pet benefit option.
Tech Stack
Categories
Solutions Engineering
About GuidePoint Security
GuidePoint Security provides cybersecurity consulting, managed services, and value-added reselling/integration of security products for enterprises and U.S. public-sector agencies. Its teams deliver assessments, penetration testing, cloud and application security, identity and access management, endpoint and network protection, and governance services. Founded in 2011 and headquartered in Reston, Virginia, the privately held company serves Fortune 500 organizations and cabinet-level federal agencies.