Application Security Consultant

Converge Technology Solutions

4d • Remote

About The Position

The Application Security Consultant delivers red team projects and technical testing focused on business outcomes and helping clients reduce risk. The role works with diverse Fortune 1000 clients to test their environments, including web, API, mobile, and AI-enabled applications. Work includes threat analysis, pre-assessment research and preparation, documenting and analyzing security weaknesses, and proposing practical remediation.

Requirements

• Demonstrate ethical and critical thinking.
• Apply industry standards and best practices, including OWASP ASVS, OWASP Top 10 publications, OSSTMM, and the MITRE ATT&CK Framework.
• Have involvement in security-related projects or communities, including CTFs.
• Think analytically like a threat actor or attacker.
• Be authentic, trustworthy, straightforward, and honest.
• Have a client-first mindset and interact professionally with customers.
• Demonstrate a strong work ethic, willingness to take on varied responsibilities, and flexibility.
• Be self-sufficient, performance-driven, and able to work as part of a team.
• Hold an OSWE certification or equivalent advanced-level certification.
• Have excellent report-writing and consultative skills.
• Be an experienced penetration tester and vulnerability assessor.

Nice To Haves

• Bachelor’s degree in Computer Science, Computer Information Systems, or equivalent.
• Other Offensive Security certifications.
• Network testing skills.
• Ability to conduct network-layer penetration tests of external and internal client networks.
• Knowledge of common Active Directory attacks, adversary-in-the-middle attacks, and relay-based attacks common in Windows-based networks.
• Experience with password spraying and password cracking.
• Experience with obfuscation or encoding designed to bypass or defeat controls or countermeasures.
• Experience bypassing common security technologies such as advanced EDR solutions.
• Experience conducting social engineering exercises while adhering to a defined Rules of Engagement document.
• Experience conducting wireless penetration tests against modern wireless networks.

Responsibilities

• Apply advanced technical methods to test, prove, and validate technical controls within client applications.
• Conduct technical assessments of client web applications, APIs, mobile applications, and AI-enabled applications.
• Perform threat analysis, including identifying critical organizational assets and services, relevant threat actors, and likely threat events.
• Perform pre-assessment research and preparation, including reconnaissance, documentation, and customer interviews.
• Document security weaknesses, including steps to reproduce them.
• Analyze security findings, including risk analysis and root cause analysis.
• Research and propose practical remediation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level