Onsite App Security Consultant: WAF & SDLC Expert

V Group Inc.; New York (NY); Vor Ort; USD 124.000 - 207.000; Teilzeit

Zusammenfassung

V Group Inc is seeking an Application Security Consultant for an on‑premises contract role in New York City. The consultant will protect applications across the SDLC, implement secure architecture reviews, and optimize tooling.

The position requires onsite work and expertise with WAF platforms (Cloudflare, Akamai) and security monitoring. The role includes hands‑on assessments, coaching development teams, and building repeatable governance and metrics to ensure strong security coverage for

Qualifikationen

• 5+ years Hands‑on experience with Cloudflare WAF.
• 4+ Hands‑on experience with Akamai WAF.
• Deep understanding of OWASP Top 10 and secure development practices.
• 5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
• Experience analyzing HTTP traffic, headers, payloads, and attack vectors.
• Experience with cloud platforms (Azure, AWS, SaaS) and modern architectures.
• Experience integrating or consuming security telemetry to build dashboards and metrics.

Aufgaben

• Provide specialized security expertise to support product teams, owners, infrastructure, and cybersecurity leadership.
• Strengthen application security across the SDLC and DevOps through assessments and architecture reviews.
• Onboard, configure, tune, and monitor protections across Akamai and Cloudflare WAF platforms.
• Ensure consistent security coverage across high‑value, cloud‑hosted, and externally facing applications.
• Perform technical assessments, enabling development teams through tooling and coaching.
• Establish repeatable processes, metrics, and governance.

Kenntnisse

Cloudflare WAF

Akamai WAF

OWASP Top 10

SAST/DAST/SCA tools

HTTP traffic analysis

Cloud platforms (Azure/AWS)

Security telemetry & dashboards

Jobbeschreibung

V Group Inc is seeking an Application Security Consultant for an on‑premises contract role in New York City. The consultant will protect applications across the SDLC, implement secure architecture reviews, and optimize tooling.

The position requires onsite work and expertise with WAF platforms (Cloudflare, Akamai) and security monitoring. The role includes hands‑on assessments, coaching development teams, and building repeatable governance and metrics to ensure strong security coverage for