Application Security Consultant

Roles and Responsibilities:

• Act as a key liaison between various stakeholders, including development teams and leadership.
• Provide hands-on, senior-level consulting to development teams on the usage of new tools (e.g., Snyk) and guide the establishment of new processes.
• Demonstrate expertise in governance, risk management, and ensure compliance with security standards.
• Lead the migration of security tools to a new platform (Snyk)
• Showcase experience in configuring and integrating tools into a large-scale environment.
• Implement Vulnerability Management tools for Application Security, such as ServiceNow AVR or similar solutions.
• Drive strategies to identify, prioritize, and remediate vulnerabilities effectively.
• Assist development teams in Continuous Integration/Continuous Deployment (CICD)
• Demonstrate hands-on experience in integrating Application Security (AppSec) tools and Vulnerability Management Tools.
• Showcase proficiency in Static Application Security Testing (SAST), Software Composition Analysis (SCA), Dynamic Application Security Testing (DAST), and Container Security.
• Work independently to drive and execute application security transformation initiatives

Qualifications and Skills:

• Proven experience in managing large-scale Application Security transformations.
• Strong stakeholder management skills, with the ability to communicate complex security concepts to technical and non-technical audiences.
• Hands-on experience with security tools, particularly in the configuration, integration, and migration processes.
• Expertise in Synk tool is mandatory.
• Expertise in vulnerability management and implementing solutions like ServiceNow AVR.
• In-depth knowledge of CICD pipelines
• Proficiency in integrating and configuring AppSec tools, including SAST, SCA, DAST, and Container Security.
• Ability to work independently and drive initiatives to completion.

Education and Experience:

• Bachelor's degree in computer science, Information Security, or a related field.
• Five+ years of experience in a senior-level security role, with a focus on application security.