Note: The job is a remote job and is open to candidates in USA. DirectDefense provides cybersecurity defense strategies and information security services. The Application Security Consultant will assess customer applications, identify and validate vulnerabilities, perform dynamic testing and static code reviews, and recommend practical remediation strategies.
Responsibilities
- Conduct thorough analysis to identify and exploit vulnerabilities in customer applications
- Collaborate with development teams to creatively remediate identified vulnerabilities and enhance application security
- Perform dynamic testing and static code reviews to identify security vulnerabilities and weaknesses
- Utilize industry-leading tools, with a focus on application testing workspaces such as Burp Suite
- Stay abreast of the latest developments in application security, tools, and methodologies such as OWASP ASVS
Skills
- 1-3 years of hands-on experience in network/infrastructure security and penetration testing
- Bachelor's degree in Computer Science, Engineering, Math, or a related field (or equivalent hands-on experience, classroom project work, or internship)
- Strong understanding of application security principles and common vulnerabilities
- Experience in performing dynamic and static code reviews
- Familiarity with vulnerability scanning tools, specifically Burp Suite
- Excellent written and verbal communication skills, with the ability to convey complex security topics clearly and concisely to diverse audiences
- Experience in automated and manual application testing is a big plus
- Certifications such as OSCP, BSCP, OSWE, GWAPT or related offensive security certifications are a strong plus
- Knowledge of common web application vulnerabilities and exploitation techniques
- Understanding of cryptography, authentication, and authorization mechanisms
- Excellent problem-solving skills and a proactive approach to addressing security concerns
- Effective communication and collaboration skills to work with cross-functional teams
- Experience with automated and manual application testing is a significant plus
- AWS experience is a big plus
Company Overview