Application Security Consultant

DirectDefense, Inc.; United States; Remote; USD 96,000 - 124,000; Part time

Job summary

DirectDefense, Inc. is seeking an Application Security Consultant for a three-month contract in the United States.

The role focuses on identifying vulnerabilities in client applications, advising remediation, and conducting dynamic testing and code reviews, leveraging Burp Suite and OWASP ASVS practices. Ideal candidates hold 1–3 years in security, a relevant bachelor’s degree, strong communication, and familiarity with security testing tools.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Math, or related field or equivalent hands-on experience.
• Experience with application security principles and common vulnerabilities.
• Experience performing dynamic and static code reviews.
• Familiarity with Burp Suite or similar tools.

Responsibilities

• Conduct vulnerability analysis of customer applications.
• Collaborate with development teams to remediate vulnerabilities and improve security.
• Perform dynamic testing and static code reviews to identify weaknesses.
• Utilize tools like Burp Suite for testing workspaces and assessments.
• Stay updated on application security trends and OWASP ASVS practices.

Skills

Vulnerability assessment

Dynamic testing

Static code review

Strong communication

Education

Bachelor’s degree in Computer Science/Engineering/Math or related field

Tools

Burp Suite

Job description

Are you passionate about application security and ready to make an immediate impact in a contract role? We are seeking a motivated Application Security Consultant with experience in software development, DevOps, or software quality assurance—or a strong foundation in application security. In this role, you will assess customer applications, identify and validate vulnerabilities, leverage innovative security tools, and recommend practical remediation strategies.

Contract Length:

Three months, with the possibility of an extension or conversion to a full-time position

Hourly Rate (1099):

$70–$90 per hour

Responsibilities:

• Conduct thorough analysis to identify and exploit vulnerabilities in customer applications.
• Collaborate with development teams to creatively remediate identified vulnerabilities and enhance application security.
• Perform dynamic testing and static code reviews to identify security vulnerabilities and weaknesses.
• Utilize industry-leading tools, with a focus on application testing workspaces such as Burp Suite.
• Stay abreast of the latest developments in application security, tools, and methodologies such as OWASP ASVS

Qualifications:

• 1-3 years of hands-on experience in network/infrastructure security and penetration testing.
• Bachelor’s degree in Computer Science, Engineering, Math, or a related field (or equivalent hands‑on experience, classroom project work, or internship).
• Strong understanding of application security principles and common vulnerabilities.
• Experience in performing dynamic and static code reviews.
• Familiarity with vulnerability scanning tools, specifically Burp Suite.
• Excellent written and verbal communication skills, with the ability to convey complex security topics clearly and concisely to diverse audiences.
• Experience in automated and manual application testing is a big plus.

Preferred Skills:

• Certifications such as OSCP, BSCP, OSWE, GWAPT or related offensive security certifications are a strong plus.
• Knowledge of common web application vulnerabilities and exploitation techniques.
• Understanding of cryptography, authentication, and authorization mechanisms.
• Excellent problem-solving skills and a proactive approach to addressing security concerns.
• Effective communication and collaboration skills to work with cross‑functional teams.
• Experience with automated and manual application testing is a significant plus.
• AWS experience is a big plus.

Candidates must currently reside in the United States and be able to complete the client’s required U.S.-based background‑screening process. Applicants must also be legally authorized to work in the United States without current or future sponsorship.

A little about DirectDefense

Since coming together in 2011 to form DirectDefense, our team has been committed to offering Cybersecurity defense strategies that are unmatched in the industry. Whether we are performing assessments of networks, platforms, and applications or applying managed services to improve your organization’s security posture, we are focused on providing world‑class services that don’t just work–they work for you.

OUR MISSION

We establish partnerships with our clients based on trust and results. We leverage our deep industry knowledge and expertise to identify and remediate blind spots in your security program, provide meaningful visibility of your entire enterprise, and align your organization with security best practices and compliance standards.

OUR VISION

We aim to secure organizations across all industries against advanced threats and attacks in today’s world. Partnering with organizations, we provide unmatched information security services designed to improve your overall security posture, close gaps, and continuously track vulnerabilities through ongoing education and support.