Contract Application Security Engineer

Direct Defense; Northern (KY); Hybrid; USD 96,000 - 124,000; Full time

Job summary

DirectDefense is seeking an Application Security Consultant for a three‑month contract in the United States. The role involves analyzing customer applications, identifying vulnerabilities, and recommending remediation strategies.

Strong knowledge of Burp Suite and OWASP ASVS is beneficial. Ideal candidates have 1–3 years in security or related fields, with a Bachelor’s in CS/Engineering/Math or equivalent experience.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Math, or related field.
• 1–3 years of hands-on experience in network/infrastructure security and penetration testing.
• Strong understanding of application security principles and common vulnerabilities.
• Experience in dynamic and static code reviews.
• Familiarity with vulnerability scanning tools, specifically Burp Suite.
• Certifications such as OSCP, BSCP, OSWE, GWAPT or related offensive security certifications are a strong plus.
• AWS experience is a big plus.

Responsibilities

• Conduct thorough analysis to identify and exploit vulnerabilities in customer applications.
• Collaborate with development teams to creatively remediate identified vulnerabilities and enhance application security.
• Perform dynamic testing and static code reviews to identify security vulnerabilities and weaknesses.
• Utilize industry-leading tools, with a focus on application testing workspaces such as Burp Suite.
• Stay abreast of the latest developments in application security, tools, and methodologies such as OWASP ASVS.

Skills

Network security

Penetration testing

Application security

Education

Bachelor’s degree in Computer Science, Engineering, Math, or related field

Tools

Burp Suite

Job description

DirectDefense is seeking an Application Security Consultant for a three‑month contract in the United States. The role involves analyzing customer applications, identifying vulnerabilities, and recommending remediation strategies.

Strong knowledge of Burp Suite and OWASP ASVS is beneficial. Ideal candidates have 1–3 years in security or related fields, with a Bachelor’s in CS/Engineering/Math or equivalent experience.