Senior Application Security Consultant

Job Summary

To support a growing application security practice, the full-time Senior Application Security Consultant will lead manual code reviews, application penetration testing, and threat modeling while working remotely across various regions.

Key responsibilities

• Lead manual source code reviews on complex production codebases and identify various vulnerability classes
• Conduct application penetration testing, threat modeling, and SDLC advisory engagements to integrate security into development processes
• Mentor junior consultants and contribute to the development of methodologies, tooling, and report templates

Required qualifications

• 5+ years in offensive security services, with 2-3 years focused on application security and source code review
• Deep code review expertise in languages such as JavaScript, Python, Java, or C#
• Hands-on experience in application penetration testing and threat modeling
• Relevant bachelor's degree or equivalent experience
• Industry certifications such as OSCP, OSWE, or equivalent are strongly preferred