Application Security Modernization Consultant

Accenture•Philadelphia, PA

About The Position

Accenture Security is seeking an Application Security Modernization Consultant to help clients modernize applications and strengthen their security. The role focuses on transforming existing applications to cloud-first models and improving resilience against evolving threats through shift-left DevSecOps principles, automation, and AI. The consultant works with legacy .NET, Linux web, Java, SAP, and SQL systems as they move to public, private, or hybrid cloud environments, and develops policies, practices, automation, AI, and tool integrations to protect applications from unauthorized access, use, disclosure, modification, or disruption. The consultant develops secure, scalable cloud application architectures; advises on application migration and modernization; integrates security throughout the secure SDLC; and delivers application security solutions, including AI agents and harnesses. The role also involves client engagement, security assessments, delivery planning, quality and contract alignment, mentoring junior practitioners, and contributing reusable assets and thought leadership. Travel may range from 0% to 100%, depending on business needs and client requirements.

Requirements

At least 3 years of experience in application security, focused on modernizing security frameworks and implementing secure, scalable solutions in cloud environments using DevSecOps.
At least 3 years of experience migrating, assessing, and securing .NET apps, Java apps, SAP apps, and/or SQL databases in cloud settings.
At least 3 years of experience with application security tooling, including SAST, SCA, DAST, ASPM, CNAPP, WAF, secrets scanning, container scanning, API security scanning, AI security assessments, and Infrastructure as Code scanning.
Bachelor’s degree or equivalent, or at least 12 years of work experience. Applicants with an associate degree must have at least 6 years of work experience.
Travel may be required, ranging from 0% to 100% depending on business need and client requirements.

Nice To Haves

Experience in a consultant or advisory capacity; Big Four experience is an asset.
Advanced knowledge of internal controls and security protocols, particularly for cloud-based application security.
Expert knowledge of the Secure SDLC and its implementation.
Foundational understanding of AI application design.
Ability to work creatively and analytically in a problem-solving environment.
Demonstrated success contributing to a team-oriented environment and interest in a collaborative workplace.
Excellent leadership, written and oral communication, and interpersonal skills.

Responsibilities

Build and contribute to strong client relationships through direct interaction and understanding clients’ security needs for modernized applications.
Design secure-by-default, scalable cloud security architectures for .NET, Linux web, Java, and other applications and databases.
Provide expertise during legacy application migrations to cloud environments, ensuring compliance and security standards are met.
Apply application security expertise to challenges associated with cloud migration and modernization.
Implement and integrate security across the secure software development lifecycle using DevSecOps practices.
Deliver modern application security solutions, including implementation of AI agents and harnesses.
Communicate client expectations to engagement teams and align delivery with project security objectives.
Conduct comprehensive security assessments, especially in modernized environments.
Take responsibility for significant engagement components, potentially taking a larger role on smaller, critical projects.
Contribute to engagement planning and ensure deliverables meet contract and work-plan objectives.
Deliver services that meet Accenture Project Manager specifications and exceed client expectations.
Coach and develop junior application security practitioners, and contribute reusable assets, methods, and thought leadership.
Identify and communicate opportunities to improve security frameworks during ongoing client engagements.