Application Security Consultant

Direct Defense; Northern (KY); Hybrid; USD 96,000 - 124,000; Full time

Job summary

DirectDefense is seeking an Application Security Consultant for a three‑month contract in the United States. The role involves analyzing customer applications, identifying vulnerabilities, and recommending remediation strategies.

Strong knowledge of Burp Suite and OWASP ASVS is beneficial. Ideal candidates have 1–3 years in security or related fields, with a Bachelor’s in CS/Engineering/Math or equivalent experience.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Math, or related field.
• 1–3 years of hands-on experience in network/infrastructure security and penetration testing.
• Strong understanding of application security principles and common vulnerabilities.
• Experience in dynamic and static code reviews.
• Familiarity with vulnerability scanning tools, specifically Burp Suite.
• Certifications such as OSCP, BSCP, OSWE, GWAPT or related offensive security certifications are a strong plus.
• AWS experience is a big plus.

Responsibilities

• Conduct thorough analysis to identify and exploit vulnerabilities in customer applications.
• Collaborate with development teams to creatively remediate identified vulnerabilities and enhance application security.
• Perform dynamic testing and static code reviews to identify security vulnerabilities and weaknesses.
• Utilize industry-leading tools, with a focus on application testing workspaces such as Burp Suite.
• Stay abreast of the latest developments in application security, tools, and methodologies such as OWASP ASVS.

Skills

Network security

Penetration testing

Application security

Education

Bachelor’s degree in Computer Science, Engineering, Math, or related field

Tools

Burp Suite

Job description

Are you passionate about application security and ready to make an immediate impact in a contract role? We are seeking a motivated Application Security Consultant with experience in software development, DevOps, or software quality assurance—or a strong foundation in application security. In this role, you will assess customer applications, identify and validate vulnerabilities, leverage innovative security tools, and recommend practical remediation strategies.

Contract Length: Three months, with the possibility of an extension or conversion to a full-time position

Hourly Rate (1099): $70–$90 per hour

Responsibilities:

• Conduct thorough analysis to identify and exploit vulnerabilities in customer applications.
• Collaborate with development teams to creatively remediate identified vulnerabilities and enhance application security.
• Perform dynamic testing and static code reviews to identify security vulnerabilities and weaknesses.
• Utilize industry-leading tools, with a focus on application testing workspaces such as Burp Suite.
• Stay abreast of the latest developments in application security, tools, and methodologies such as OWASP ASVS

Qualifications:

• 1-3 years of hands-on experience in network/infrastructure security and penetration testing.
• Bachelor’s degree in Computer Science, Engineering, Math, or a related field (or equivalent hands-on experience, classroom project work, or internship).
• Strong understanding of application security principles and common vulnerabilities.
• Experience in performing dynamic and static code reviews.
• Familiarity with vulnerability scanning tools, specifically Burp Suite.
• Excellent written and verbal communication skills, with the ability to convey complex security topics clearly and concisely to diverse audiences.
• Experience in automated and manual application testing is a big plus.

Preferred Skills:

• Certifications such as OSCP, BSCP, OSWE, GWAPT or related offensive security certifications are a strong plus.
• Knowledge of common web application vulnerabilities and exploitation techniques.
• Understanding of cryptography, authentication, and authorization mechanisms.
• Excellent problem-solving skills and a proactive approach to addressing security concerns.
• Effective communication and collaboration skills to work with cross-functional teams.
• Experience with automated and manual application testing is a significant plus.
• AWS experience is a big plus.

Candidates must currently reside in the United States and be able to complete the client’s required U.S.-based background-screening process. Applicants must also be legally authorized to work in the United States without current or future sponsorship.

A little about DirectDefense

Since coming together in 2011 to form DirectDefense, our team has been committed to offering Cybersecurity defense strategies that are unmatched in the industry. Whether we are performing assessments of networks, platforms, and applications or applying managed services to improve your organization’s security posture, we are focused on providing world-class services that don’t just work–they work for you.

OUR MISSION

We establish partnerships with our clients based on trust and results. We leverage our deep industry knowledge and expertise to identify and remediate blind spots in your security program, provide meaningful visibility of your entire enterprise, and align your organization with security best practices and compliance standards.

OUR VISION

We aim to secure organizations across all industries against advanced threats and attacks in today’s world. Partnering with organizations, we provide unmatched information security services designed to improve your overall security posture, close gaps, and continuously track vulnerabilities through ongoing education and support.