Application Security Specialist - Burp & OWASP Pro

Direct Defense; Englewood (CO); On-site; USD 100,000 - 108,000; Full time

Benefits offered by this job

401(k)

AD&D Insurance

Dental Insurance

Disability insurance

Health insurance

Life insurance

Vision insurance

Flex PTO

Paid certification and CE

Job summary

DirectDefense is seeking an Application Security Consultant for a contract role to assess customer applications, identify vulnerabilities, and drive remediation with development teams. You will perform dynamic testing and static code reviews, using Burp Suite and other tools, while staying current with OWASP ASVS and industry best practices.

The role emphasizes collaboration, clear communication, and hands-on testing across security domains, with a schedule that supports a standard work week and

Qualifications

• 1-3 years of hands-on experience in network/infrastructure security and penetration testing.
• Bachelor's degree in CS, Engineering, Math, or related field.
• Strong understanding of application security principles and common vulnerabilities.
• Experience in performing dynamic and static code reviews.
• Familiarity with Burp Suite vulnerability scanning tools.
• Excellent written and verbal communication skills.
• Experience in automated and manual application testing is a big plus.
• Certifications such as OSCP, BSCP, OSWE, GWAPT or related offensive security certificates are a plus.
• Knowledge of web application vulnerabilities and exploitation techniques.

Responsibilities

• Conduct thorough analysis to identify and exploit vulnerabilities in customer applications.
• Collaborate with development teams to creatively remediate identified vulnerabilities and enhance application security.
• Perform dynamic testing and static code reviews to identify security vulnerabilities and weaknesses.
• Utilize industry-leading tools, with a focus on application testing workspaces such as Burp Suite.
• Stay abreast of the latest developments in application security, tools, and methodologies such as OWASP ASVS

Skills

Application security

Vulnerability assessment

Dynamic testing

Static code reviews

Burp Suite familiarity

Communication skills

Education

Bachelor's degree in CS/Engineering/Math or related

Tools

Burp Suite

OWASP ASVS

Job description

DirectDefense is seeking an Application Security Consultant for a contract role to assess customer applications, identify vulnerabilities, and drive remediation with development teams. You will perform dynamic testing and static code reviews, using Burp Suite and other tools, while staying current with OWASP ASVS and industry best practices.

The role emphasizes collaboration, clear communication, and hands-on testing across security domains, with a schedule that supports a standard work week and