Application Security Consultant

Converge Enterprise; Oregon; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Converge Enterprise seeks an Application Security Consultant to deliver on red team projects and risk reduction for Fortune 1000 clients through technical testing.

You will assess client web apps, APIs, mobile, and AI-enabled systems, perform threat analysis, and document findings with remediation steps. The role emphasizes business outcomes and client-facing consulting within a professional services context.

Qualifications

• Bachelor’s degree in CS/ CIS or equivalent.
• OSWE certification or equivalent required.
• Strong report writing and consultative skills.
• Experienced penetration tester and vulnerability assessor.

Responsibilities

• Conduct security testing of client applications (web, API, mobile, AI-enabled).
• Perform threat analysis identifying assets, actors, and probable events.
• Carry out pre-assessment research including recon and customer interviews.
• Document security weaknesses with steps to reproduce.
• Analyze findings and propose remediation.

Skills

Ethical thinking

OWASP ASVS

Threat analysis

Client interaction

Team collaboration

CTF participation

Education

Bachelor’s degree in CS/CIS

OSWE certification

Offensive Security certifications

Job description

Position Title: Application Security Consultant, Professional Services

Position Location: Remote in the Contiguous US

Job Summary: The Application Security Consultant delivers on a variety of red team projects and techniques with a focus on business outcomes and helping our clients reduce risk through technical testing. Professional services tasks will include working with diverse Fortune 1000 clients to fully test their environments.

Essential Functions:

• Business focused technical testing – apply advanced technical methods to test, prove andvalidate technical controls within client applications.
• Conduct technical assessments of client web applications, API’s, mobile applications, and AI enabled applications.
• Perform threat analysis, including identifying critical organization assets and services, relevantthreat actors, and likely threat events.
• Perform pre-assessment research and preparation including reconnaissance, documentationand customer interviews.
• Document security weaknesses, including steps to reproduce.
• Analyze security findings, including risk analysis and root cause analysis.
• Research and propose practical remediation.

Required Skills/Abilities/Competencies:

• Ethical and Critical Thinking.
• Apply industry standards and best practices including the OWASP Application Security Verification Standard (ASVS), various OWASP Top 10’s, Open-Source Security TestingMethodology Manual (OSSTMM), and the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework.
• Involvement in security-related projects / communities including CTFs.
• Analytic sharpness in thinking like a threat actor or attacker.
• Be authentic, trustworthy, straightforward, and honest.
• Have a client-first mindset and the ability to interact professionally with customers.
• Possess a blue-collar work ethic with the willingness to wear many proverbial ‘hats’ and have a flexible outlook towards your work.
• Be competitive and have a performance-based drive to succeed, including self-suficiency and the ability to work as part of a team.

Preferred Additional Skills/Abilities/Competencies:

• Ability to conduct network-layer penetration tests of external and internal client networks.
• Knowledge of common Active Directory attacks, adversary-in-the-middle attacks, and relay based attacks common in Windows-based networks.
• Experience with password-spraying and password cracking.
• Obfuscation/Encoding designed to bypass or defeat various controls or countermeasures.
• Experience bypassing common security technologies such as advanced EDR solutions.
• Conducting social engineering exercises with adherence to a defined Rules of Engagement document.
• Experience conducting wireless penetration tests against modern wireless networks.

Education and Experience:

• Bachelor’s degree in Computer Science, Computer Information Systems, or equivalent preferred.
• OSWE certification or equivalent advanced level certs are required.
• Other Offensive Security certifications are a plus.
• Network testing skills are a plus.
• Excellent report writing and consultative skills.
• Experienced penetration tester and vulnerability assessor.

Physical Requirements:

• Prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift up to 15 pounds at times.

We are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Employees hired under this position must be able to perform the essential functions of the position satisfactorily and, if requested, reasonable accommodation will be made to enable employees with disabilities to perform the essential functions, absent undue hardship. The Employer retains the right to change or assign other duties to this position at any time with or without notice.

Pellera provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.