Senior Application Security Consultant

Prudent Technologies and Consulting is hiring for a fast-growing Cybersecurity team that supports a customer base including the worlds largest organizations. We have an immediate opening for a Senior Application Security Consultant. The role requires an experienced offensive consultant who understands application security testing methodologies, frameworks, tools and reporting. As a Senior Consultant you will perform and lead technical teams to conduct thorough security assessments as well as perform field related research. Candidates should be familiar with a variety of technologies including web, mobile, API, AI/LM, cloud, desktop, single sign-on and OAuth.

Responsibilities:

• Consult with technical and non-technical client stakeholders
• Collaborate with Sales teams to assist in scoping efforts
• Lead projects and mentor less experienced consultants
• Perform advanced comprehensive penetration tests, adhering to industry-standard best practices
• Conduct penetration testing across diverse environments, including desktop applications, mobile applications, web applications, cloud environments, on-prem environments, APIs and AI/LM
• Document and report vulnerabilities, show proof-of-concepts where applicable, and provide detailed explanations to highlight severity, business impact, and tailored remediation steps
• Manages priorities and tasks to achieve utilization targets
• Participate in research and development efforts to improve the Cybersecurity practice

Qualifications:

Required Qualifications:

• 8+ years of direct experience performing manual penetration testing assessments on desktop applications, mobile applications, web applications, cloud environments, API and AI/LM
• Proficient at using penetration testing tools such as Burp Suite, DAST scanners, Metasploit and Nessus to identify and exploit vulnerabilities
• Able to write deliverable reports, including executive summaries and presentations, and status reports for clients
• Understanding of industry-standard security frameworks (e.g., OWASP and MITRE ATT&CK)
• Excellent project management, leadership, time management, and client consulting skills

Preferred Qualifications:

• Bachelors degree in computer science, information security, or related field

• Good to have (preferred) relevant certifications (e.g., OSCP and/or OSWE)

• Experience with scripting languages such as Python and Bash
• Experience with application development, systems engineering, or similar

• Published CVE/CWE contributions, participation in CTF events and independent research projects

Education:

• Direct work experience performing application penetration testing assessments; ability to begin testing immediately with guidance on Prudents specific approach and methodology