Application Security Consultant

Mastech Digital; United States; Remote; USD 80,000 - 100,000; Full time

Job summary

A leading company is seeking a Talent Acquisition Specialist who will assess source code for security vulnerabilities. This role requires expertise in application security and secure coding practices. The candidate will mentor developers and contribute to training efforts. The position is remote and offers a contract for over a year, making it ideal for professionals looking to make a significant impact in application security.

Qualifications

• 3+ years in application security, including secure code review.
• Understanding of OWASP Top 10 and CWE Top 25 issues.

Responsibilities

• Analyze and identify security vulnerabilities in source code.
• Train and assist developers in writing secure software.
• Mentor team members to improve assessment delivery.

Skills

Application Security

Secure Code Review

Communication

Education

Bachelor's Degree in Computer Science

Master's Degree in relevant fields

Tools

Checkmarx

Job description

Direct message the job poster from Mastech Digital

Talent Acquisition Specialist at Mastech Digital

Role: Source Code Review Assessor - SCA (Static code review)/Application Security Consultant

Duration: 12+ Months

Remote - EST

Responsibilities:

1. Analyze and identify security vulnerabilities in source code using automated and manual static analysis tools and techniques.
2. Train and assist developers in writing secure software and remediating vulnerabilities.
3. Develop and review vulnerability descriptions, business impact, and remediation content.
4. Research and recommend open source tools for secure code review.
5. Contribute to secure coding and remediation training development and delivery.
6. Mentor team members to improve assessment delivery and skills.
7. Recommend best practices to automate application security testing within SDLC.

Basic Qualifications:

1. 3+ years in application security, including secure code review, web application penetration testing, or threat modeling.
2. 2+ years in secure code review/static application security testing.
3. Understanding of OWASP Top 10 and CWE Top 25 issues, with ability to identify and remediate vulnerabilities.
4. Ability to communicate security risks and impacts to diverse audiences.
5. Bachelor's Degree in Computer Science or Engineering with GPA of 3.0+.

Preferred Qualifications:

1. Experience with static analysis tools like Checkmarx.
2. Experience in server-side programming languages.
3. Master's degree in relevant fields.

Additional Details:

• Seniority level: Associate
• Employment type: Contract
• Job function: Information Technology
• Industries: IT Services and IT Consulting