Senior AppSec Consultant: Secure DevOps & SDLC

Information Technology Senior Management Forum; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health, dental, vision, life insurance

Paid vacation and sick leave

Paid holidays

Job summary

Information Technology Senior Management Forum is seeking an Application Security Consultant to strengthen the security posture of our applications throughout the development lifecycle. The role requires strong AppSec knowledge, ability to interpret vulnerability data, and collaboration with DevOps and domain security teams for secure design and remediation.

The ideal candidate will test controls, coordinate vulnerability remediation across multiple scanning disciplines, and help teams adopt

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or related field.
• Minimum of 7 years of professional experience in information security.
• Advanced knowledge of data security, privacy laws, regulatory compliance, and advanced security technologies.
• Experience in threat analysis, vulnerability testing, incident response, and forensic methodologies.

Responsibilities

• Conduct control testing and validate controls across AppSec domains.
• Perform vulnerability analysis and remediation coordination for applications.
• Advise application teams on remediation, including vulnerability burndown.
• Produce program metrics (burndown, aging, trend, adoption) and maintain intake workflows.

Skills

Application security

Vulnerability analysis

CI/CD security

Threat analysis

Communication

Education

Bachelor’s degree in Computer Science/Information Systems

Security certifications (CISSP/CISM/GIAC)

Tools

ServiceNow Vulnerability Response

Cloud/container security tools

Job description

Information Technology Senior Management Forum is seeking an Application Security Consultant to strengthen the security posture of our applications throughout the development lifecycle. The role requires strong AppSec knowledge, ability to interpret vulnerability data, and collaboration with DevOps and domain security teams for secure design and remediation.

The ideal candidate will test controls, coordinate vulnerability remediation across multiple scanning disciplines, and help teams adopt