APPLICATION SECURITY MANAGING CONSULTANT

Target Labs, Inc; Jersey City (NJ); On-site; USD 110,000 - 150,000; Full time

Job summary

A leading consulting firm seeks an Application Security Managing Consultant for a 6-month engagement in Jersey City. This role involves leading a team focused on implementing and managing application security protocols across software development lifecycles. Ideal candidates will have extensive experience in vulnerability testing and software security program development, along with strong project management and communication skills.

Qualifications

• 6-8 years of experience in application security programs.
• Advanced understanding of web architecture and protocols.
• Certified Secure Software Lifecycle Professional (CSSLP) preferred.

Responsibilities

• Lead a team of application security specialists.
• Develop and manage software security controls in the SDLC.
• Communicate business impact of vulnerabilities.

Skills

Threat modeling

Vulnerability testing

Code review

Project management

Communication

Education

Bachelor's degree

Tools

AppScan

NTO Spider

WebInspect

Ounce

Fortify

Java

.NET

C

C++

Shell scripting

Job description

APPLICATION SECURITY MANAGING CONSULTANT

Location: Jersey City, New Jersey

Duration: 6 months

Accuvantis is seeking an Application Security Managing Consultant to lead the application security program in a large international enterprise.

The analyst will be responsible for:

• Leading a team of application security specialists.
• Developing, implementing, and managing software security controls within the software development lifecycle (SDLC).

Position Requirements:

• No security clearance required.
• Bachelor's degree preferred.

Desired Experience:

• 6-8 years of experience in creating best-practice processes and implementing application security programs in large enterprises, including:
• Threat modeling, profiling applications, identifying threats, and developing test cases.
• Leading staff in vulnerability testing, code review, issue tracking, and resolution.
• Communicating the business impact of vulnerabilities and reporting mitigation steps.
• Managing metrics for vulnerability reporting and remediation.
• Optimizing vulnerability scanning processes with tools like AppScan, NTO Spider, and WebInspect.
• Providing direction for static analysis and code review with tools such as Ounce, Fortify, and AppScan Source Edition.
• Leveraging development experience in Java, .NET, C, C++, and shell scripting for vulnerability identification and creating utilities.
• Having an advanced understanding of web architecture and protocols (HTTP(S), TCP/IP, ARP, SMTP, DNS, etc.).
• Having an advanced understanding of common security issues and remediation techniques (OWASP Top 10, SANS Top 25).
• Excellent written and verbal communication skills.
• Strong project management and leadership abilities.
• Ability to manage technical resources.

Desired Certifications:

• Certified Secure Software Lifecycle Professional (CSSLP) preferred.