Application Security Consultant ( F2F Interview at New York, NY)

Innovee Consulting LLC; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

Innovee Consulting LLC in New York seeks an Application Security Consultant to bolster security across on-premises environments. You will work with product teams, infrastructure, and leadership to strengthen SDLC security, perform assessments, and configure protections on Akamai and Cloudflare WAFs.

You will also help establish repeatable processes, metrics, and governance, enabling development teams through tooling and coaching, with a focus on secure development practices and proactive risk

Qualifications

• 5+ years hands-on security engineering or consulting experience in application security.
• On-premises security consultant with cloud and WAF tooling expertise.
• Experience with securing SDLC/DevOps and governance.
• Strong knowledge of OWASP Top 10 and secure coding practices.

Responsibilities

• Lead security assessments across Akamai and Cloudflare WAF platforms.
• Perform secure architecture reviews and tooling optimization.
• Onboard, configure, tune, and monitor protections; implement governance.
• Develop repeatable security processes and metrics for product teams.

Skills

Cloudflare WAF

Akamai WAF

OWASP Top 10

SAST/DAST/SCA tools

HTTP traffic analysis

Cloud platforms (Azure/AWS)

Security telemetry & dashboards

DevOps security practices

Tools

Checkmarx

BurpSuite

Fortify

Job description

Job Description

The Application Security Consultant role is an on-premises position. The consultant will provide specialized security expertise to support product teams, product owners, infrastructure, and cybersecurity leadership. This role strengthens application security across the SDLC and DevOps through assessments, secure architecture reviews, tooling optimization, and operational governance. The consultant will also play a key role in onboarding, configuring, tuning, and monitoring protections across Akamai and Cloudflare WAF platforms, ensuring consistent security coverage across high value, cloud hosted, and externally facing applications. Additionally, the consultant is expected to perform technical assessments, enabling development teams through tooling and coaching, and helping establish repeatable processes, metrics, and governance.

Role

Application Security Consultant

Location

2 Broadway, New York, NY

Duration

Long Term

F2F Interview

at New York, NY

Technical Skills

• 5+ years Hands on experience with Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush).
• 4+ Hands on experience with Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing).
• Deep understanding of OWASP Top 10, application security principles, secure development practices.
• 5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
• Experience analyzing HTTP traffic, headers, payloads, and attack vectors (XSS, SQLi, RCE, deserialization, CSRF, SSRF, etc.).
• Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.
• Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.

Additional Skills

• Database Security 2 4 years
• Information Security 4 6 years
• Java 1 2 years
• Power App 2 4 years
• .NET Code Development 4 6 years
• IT Architecture 2 4 years
• Web Development 2 4 years