Senior Application Security Consultant

JR United Kingdom; Swindon; Hybrid; GBP 50,000 - 80,000; Full time

Job summary

A leading consulting firm is seeking a Senior Application Security Consultant in Swindon, UK, for a non-invasive security review of a web application. This role focuses on conducting thorough audits, identifying vulnerabilities, and delivering professional reports without implementation tasks. The consultant will enjoy remote flexibility and immediate onboarding, making a significant impact on high-visibility projects.

Benefits

Remote flexibility

Focus on review and advisory work

High visibility project

Structured communication

Qualifications

• 4+ years in Application Security, AppSec consulting, or Secure Code Review roles.
• Familiarity with OWASP, CWE, and secure software development principles.
• Experience delivering professional security reports with findings and recommendations.

Responsibilities

• Conduct comprehensive security reviews of web-based applications.
• Perform static code analysis, identify vulnerabilities, and assess against OWASP Top 10.
• Produce detailed security audit reports with findings and recommendations.

Skills

Application Security

Secure Code Review

Technical Writing

Communication Skills

Education

Preferred certifications: OSCP, CSSLP, GWAPT, CEH

Tools

Snyk

Checkmarx

Veracode

Burp Suite

Job description

Social network you want to login/join with:

Senior Application Security Consultant, swindon, wiltshire

col-narrow-left

Client:

EVOLUTION PROJECT CONSULTING LIMITED

Location:

swindon, wiltshire, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

04.06.2025

Expiry Date:

19.07.2025

col-wide

Job Description:

About the Role

We are seeking a highly experienced Application Security Consultant to conduct a comprehensive security review of a web-based application. This is a non-invasive, review-only assignment — no remediation or code modifications are required.

You’ll work independently to assess application code and related configurations, identify any security vulnerabilities, and deliver a detailed, evidence-based security audit report.

Key Responsibilities

• Perform static code analysis and security audit of a web application.
• Identify potential vulnerabilities in logic, data handling, authentication, and access control.
• Assess the application against OWASP Top 10 and other secure coding standards.
• Review third-party dependencies for known issues.
• Produce a professional security report with risk ratings, findings, and recommendations.

Required Skills & Experience

• 4+ years in Application Security, AppSec consulting, or Secure Code Review roles.
• Familiarity with tools like Snyk, Checkmarx, Veracode, or Burp Suite (passive scanning).
• Knowledge of OWASP, CWE, and general secure software development principles.
• Strong technical writing and communication skills.
• Preferred certifications: OSCP, CSSLP, GWAPT, CEH, or equivalent.
• Executive summary for non-technical stakeholders.
• Technical breakdown of findings with severity and impact.
• Recommended mitigation guidance (no implementation expected).

Why Join Us?

• Remote flexibility
• No remediation work — fully focused on review and advisory
• A project with high visibility and real-world impact
• Prompt onboarding and structured communication

How to Apply

Message us directly or email [emailprotected] with your CV, availability, and examples of previous audit/reporting work if available.