Senior Application Security Consultant

JR United Kingdom; Stoke-on-Trent; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

Une entreprise de conseil en sécurité réputée recherche un Consultant en Sécurité des Applications Senior à Stoke-on-Trent. Le rôle consiste à effectuer des revues de sécurité sur des applications web et à produire des rapports détaillés sans intervention sur le code. Vous bénéficierez d'une flexibilité de travail à distance et d'un environnement de travail axé sur l'analyse et les conseils.

Benefits

Flexibilité de travail à distance

Travail centré sur les conseils et la révision

Impact sur le monde réel

Qualifications

• 4+ années d'expérience en sécurité des applications.
• Compétences en rédaction technique.
• Connaissance des principes de développement logiciel sécurisé.

Responsibilities

• Effectuer une analyse de code statique et un audit de sécurité d'une application web.
• Produire un rapport de sécurité professionnel avec évaluations des risques.

Skills

Application Security

AppSec consulting

Secure Code Review

Technical writing

Communication

Education

OSCP

CSSLP

GWAPT

CEH

Tools

Snyk

Checkmarx

Veracode

Burp Suite

Job description

Social network you want to login/join with:

Senior Application Security Consultant, stoke-on-trent

col-narrow-left

Client:

EVOLUTION PROJECT CONSULTING LIMITED

Location:

stoke-on-trent, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

2

Posted:

04.06.2025

Expiry Date:

19.07.2025

col-wide

Job Description:

About the Role

We are seeking a highly experienced Application Security Consultant to conduct a comprehensive security review of a web-based application. This is a non-invasive, review-only assignment — no remediation or code modifications are required.

You’ll work independently to assess application code and related configurations, identify any security vulnerabilities, and deliver a detailed, evidence-based security audit report.

Key Responsibilities

• Perform static code analysis and security audit of a web application.
• Identify potential vulnerabilities in logic, data handling, authentication, and access control.
• Assess the application against OWASP Top 10 and other secure coding standards.
• Review third-party dependencies for known issues.
• Produce a professional security report with risk ratings, findings, and recommendations.

Required Skills & Experience

• 4+ years in Application Security, AppSec consulting, or Secure Code Review roles.
• Familiarity with tools like Snyk, Checkmarx, Veracode, or Burp Suite (passive scanning).
• Knowledge of OWASP, CWE, and general secure software development principles.
• Strong technical writing and communication skills.
• Preferred certifications: OSCP, CSSLP, GWAPT, CEH, or equivalent.
• Executive summary for non-technical stakeholders.
• Technical breakdown of findings with severity and impact.
• Recommended mitigation guidance (no implementation expected).

Why Join Us?

• Remote flexibility
• No remediation work — fully focused on review and advisory
• A project with high visibility and real-world impact
• Prompt onboarding and structured communication

How to Apply

Message us directly or email [emailprotected] with your CV, availability, and examples of previous audit/reporting work if available.